last executing test programs:

13m45.219653543s ago: executing program 3 (id=33):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000bfd50000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0)

13m45.179264633s ago: executing program 3 (id=34):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="05000000410000000600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="26bbf6a858894152d60aef22ae9c6d7b9ef9e74942406a53423cc33af0f1ced432027263fad080fb31800e1ac5f2107f0273d2f955010c4b0e8199fb26586d2cb2740bbc561375328d0a062a", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007ebfe000b38021ca31c81a7bd53c5db9bdd8ffb9b7aa6fd86089710e3e5cc35449f83eeb464f0afb4709000000e07b5dfd0da30fe331d6c83309556eeefa020660ffb112ec966bf434b410412954339832ab24cb536527a7edc0640ff6b2075c8a7b36fb5a8eaa86f061603432937f4b4283b1f3a8c53951f5d1fc9b962d2cfb1d83b4b18116aaa52434a3acb817cc55f76eaefb0155ca11ab3fd0"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180), 0x700}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180012000000000000000000000000009500000000070084"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00')
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@deltclass={0x2c, 0x29, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xf, 0x3}, {0x7, 0x10}}, [@tclass_kind_options=@c_tbf={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0)
mlock(&(0x7f0000514000/0x2000)=nil, 0x2000)
write$tcp_congestion(0xffffffffffffffff, &(0x7f00000001c0)='dctcp\x00', 0x6)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0xd0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 0x2, 0xc, [0x2c, 0x21, 0x28, 0x19, 0x3d, 0xf, 0x15, 0x39, 0x29, 0x5, 0x1b, 0x3e, 0x3d, 0x19, 0x3a, 0x24], 0x0, 0x2, 0xffffffff}}}, {{@ip={@local, @broadcast, 0xff, 0xffffff00, 'pim6reg\x00', 'nicvf0\x00', {0xff}, {}, 0x1, 0x2, 0x28}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "c332"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x0, 0x1, 0x1, 0x1, 0x2], 0x5, 0x1}, {0x2, [0x6, 0x5, 0x5, 0x1, 0x1], 0x4, 0x2}}}}, {{@ip={@local, @multicast2, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'geneve0\x00', {}, {0xff}, 0x89, 0x2, 0x14}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r6], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000080)={0x14, 0xfffffffffffffd07, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r8}, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x8, 0x4}]}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff7f7affffffffff08"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fspick(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

13m44.341322043s ago: executing program 3 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x118}}, 0x0) (fail_nth: 4)

13m44.057550884s ago: executing program 3 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x8, 0xfffffffffffff36d, 0x3})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0xffffffeb)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24532a0856225ab8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed395aeb7530c492beb9d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
execve(0x0, 0x0, &(0x7f0000000980)={[&(0x7f0000000780)=']}&\'[/@-}\x00']})
r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @scatter={0x8, 0x0, &(0x7f0000000900)=[{&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/137, 0x89}, {&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001b40)=""/238, 0xee}, {&(0x7f0000001c40)=""/252, 0xfc}, {&(0x7f0000001d40)=""/4096, 0x1000}]}, &(0x7f00000003c0)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0x8a, 0xdb, &(0x7f0000000500)="f8bb93727631dbd143b230552b51be5037240bdbb482e746039f74f624ceb32b73f3032c5ff60fda0a73f2e574cb3e77e542a9dc0963d16d4ba4f8b49b19a9da8f919da585e38fa4e418b6543e8b3b8248bf1329a322c039bfec2a7f1f10d1bff1d15f2bc28569b903dc82ee2ed95af1d18132925e3822292cc1d2e3896ed5659e7dd2cb887eacf99166", &(0x7f00000005c0)=""/219, 0x10, 0x0, 0xcf, 0x47, &(0x7f00000007c0)="164f0246a611c197228501c7e271fc0c2368a24172f9b3cb42e778d24bda5db80648cbb44656bb1e26551097654e2b1154683efb16a2ef3786150804f83060423d3254b03a811cd20b29ce2ac48d46ed8e611b2b32bf85c7b8569c9d5e9c0b241dbb34b4542ad3a033d4808cfef8f192a1cfc02a85ddc45354d0207a7bb2a36051e0cc9ff31eb31cdbd7492e7c9fa25bc184af870dab11466112c1b5ed7412fc26476309e2498b6628a1b189a98a91499732a306b16a40b5e3cc77a3e4a78319bb2d50307ea12117d34022e913db48", &(0x7f00000001c0)="80164ec881a6aa4a128a340c1dabff5008b3d7b6ef052269b4b592a08c43d797e4396b98445743063dbf51798e0de355faa4352ea04b2516d247e1b5328b9dfb474a35d730036e", 0x0, 0x0, 0x7fff}, 0x50)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
r8 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x2e0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565)
unshare(0x22020400)
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
connect$inet(r10, &(0x7f0000000200)={0x2, 0xfffc, @empty}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

13m42.968102884s ago: executing program 3 (id=71):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
r1 = gettid()
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000dd631724ad834bb900000200ae73"], 0x48)
openat2(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x202100, 0x248}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x5}, 0x18)
pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x10)
fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x101, 0x7ff}, &(0x7f0000000200)=0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x20000, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000200)=0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
getdents(r9, &(0x7f0000000740)=""/24, 0xff90)
getdents64(r9, 0xffffffffffffffff, 0x43)

13m42.797318365s ago: executing program 3 (id=78):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228"], 0xf8}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1201820, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='sysfs\x00', 0x83, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x9)

13m27.744788215s ago: executing program 32 (id=78):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228"], 0xf8}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1201820, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='sysfs\x00', 0x83, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x9)

3.653516208s ago: executing program 2 (id=12730):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000300)=@assoc_value, &(0x7f0000000380)=0x8) (fail_nth: 4)

3.445767138s ago: executing program 2 (id=12733):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, &(0x7f00000007c0)=""/31, &(0x7f0000000880)=[0x0, 0x0], 0x2}, 0x58)

3.295665808s ago: executing program 2 (id=12736):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2, &(0x7f0000000280), 0x1, 0x78a, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
sendfile(r0, r0, 0x0, 0x7a680013)

3.114769918s ago: executing program 2 (id=12738):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
renameat2(r1, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f00000003c0)='./bus\x00', 0x0)

3.010100168s ago: executing program 1 (id=12741):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8e}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x40000000000002}, 0x18)
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6299, 0x80, 0x0, 0x334}, &(0x7f00000002c0), 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a3100000000090001"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.805059208s ago: executing program 0 (id=12748):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_setup(0x3, &(0x7f0000000340))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x800)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0x25, [@broadcast]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, {[@nop]}}}}}}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18)
r11 = memfd_secret(0x80000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0100001800010000000000000000001d0100001500030000000000000000007fa5bf073c7f73aa010000001e010600fe08bf000071ec6d721744cd529f07f76cf8cfcad4c4ec6511ec02564abce83a6331e6628e338447baed000000000000d1f909000000052995cdf66a9c79224d13d6af5b6c67281f1519cd7c32c2bf7563b9452575505da19ea128d3e7006a1bfa06b20a67bfad1ff3f523e405bdc89377034bd24689c06663e31a8a6328248242a5c340069a48d11a5568fcbf1006e35f494e2f373148e8b4adafdd39874e9808b118301d1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe50529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c000000000000000000003757000000000000000000000000000000005c8d1866930fca15c8a95d2900000000c8191ef760239fa2c55bb68ab8df6c103054d5a40a5ef811df1b63cba51a4e9514c6"], 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x440d0)
fcntl$setlease(r11, 0x400, 0x0)
close(r11)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)

2.716975528s ago: executing program 2 (id=12751):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="340000001200010029bd7000fbdbdf25fe800000000000000000000000000011000004d50a00000000000003340735000100000017a1581085364578bd8ecc74330342cf27f5182027e8483501baf7789e56c5b1fb2a3f286f1193725ec356317428209f550e653d26894db284e08f82420f4b40992dd8e93e6d1c9114b05acb79ea447fd9dc212d7b9c"], 0x34}, 0x1, 0x0, 0x0, 0x8000005}, 0x200c0040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setitimer(0x0, 0x0, &(0x7f0000000700))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='+}[p\xb3')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
mkdir(&(0x7f0000000140)='./file0\x00', 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x8004b706, 0x0)
tkill(0x0, 0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000280)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[], 0xfe, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x4}], {0x4, 0x5}, [{}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x4}], {0x10, 0x6}, {0x20, 0x3}}, 0x4c, 0x2)

2.712829109s ago: executing program 0 (id=12752):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x54f7, &(0x7f00000006c0)={0x0, 0xd812, 0x20, 0x1, 0x140}, &(0x7f0000000740), &(0x7f0000000780))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2ab}, 0x18)
socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000706b1d010140000102030109025f0003010110040904000000010100000a240128b30802010229040100000102000009040101010102000009050109400001c266072501000d7f0009040200000102000009040201010102000009058209ff0300080507250100"], 0x0)
ptrace(0x10, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x100, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x4048010)

2.261174939s ago: executing program 5 (id=12757):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x40, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x104)
r2 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7d, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)=@secondary)

2.157079569s ago: executing program 5 (id=12758):
r0 = socket(0x2, 0x80805, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket(0x1e, 0x805, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)
mq_timedsend(r4, &(0x7f0000001880)="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", 0x1000, 0xc749, 0x0)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfffffffe})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
fdatasync(r5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10)
r6 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x60)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400))
sendmmsg(r6, &(0x7f0000002c40), 0x0, 0x44001)

2.156681899s ago: executing program 2 (id=12759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4cd224379a6859ad}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

2.111945519s ago: executing program 33 (id=12759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4cd224379a6859ad}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

1.895585709s ago: executing program 5 (id=12761):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

1.835924509s ago: executing program 5 (id=12762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x453, 0x4, 0x70bd26, 0x25dfdbff, "c0"}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800)
unshare(0x68040200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r5=>0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r9})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6a, r9})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=@delqdisc={0x158, 0x25, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x3}, {0xfff2, 0xffe0}, {0xffff, 0x9}}, [@q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc85}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000400000000000000000000000fbffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)

1.716861919s ago: executing program 1 (id=12763):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000007c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@acl}, {@abort}, {@nombcache}, {@usrjquota}]}, 0x64, 0x50f, &(0x7f0000000f80)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="83", 0x1}], 0x1, 0xd)
r4 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r4, 0x0, 0x31, &(0x7f0000000180)="b1", 0x1)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0)
write(r1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x128, 0xff, 0xa, 0x7, 0x8, "f01dba7ebbb55a2abfc775c277ed7d9305a1f4", 0x200, 0xffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setlease(r6, 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffc0, 0x3, 0x0, 0x0, 0x21, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00')
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

1.443855159s ago: executing program 1 (id=12765):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18)
r2 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000980)={<r6=>0x0, 0x5, 0x800, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d80)={r6, 0x8, 0x0, [0x8, 0x5, 0x81, 0x3, 0x3f8], [0xdc34, 0x180000, 0x80, 0x4, 0x7f, 0xfff, 0xa6, 0x3, 0xfffffffffffffffa, 0x7, 0xffffffff, 0xa, 0xb54, 0x1, 0xd8b3, 0x8000000000, 0x9da2, 0x9, 0xb, 0x6, 0x9, 0x5, 0x7979, 0x8, 0x4, 0x9, 0xfff, 0xf, 0x5, 0x0, 0xb3ab, 0x2, 0x7, 0x1, 0x2, 0x2, 0xffffffffffffffff, 0x3, 0x200, 0x2, 0x2, 0x6, 0x0, 0x1bf, 0x9, 0x8000000000, 0x73, 0x1822, 0x540f, 0x4, 0x7, 0x5, 0xc278, 0xe003, 0xffffffffffffffff, 0x6, 0x2, 0xffffffffffffff25, 0x0, 0xffffffffffffffc0, 0x4, 0x0, 0xac7, 0x2, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffffffffffff9, 0xc, 0x7, 0x7, 0x3, 0xb, 0x6e3, 0x8, 0x7, 0x22f, 0x6, 0xb0ed, 0x2, 0xfff, 0x3699, 0x6, 0x1, 0x100000000, 0x2, 0x8, 0x4, 0x0, 0x3, 0x40, 0x3, 0x5, 0x1, 0x4, 0x5, 0x8, 0x1, 0xffffffff, 0x9, 0x387aa16f, 0x7, 0x4, 0x2, 0x0, 0x8, 0x3, 0x7, 0x5, 0x4, 0x8, 0xfff, 0x6, 0x9, 0x1, 0x401, 0x2, 0xc]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r8, 0x0, 0x2}, 0x18)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
socket(0xa, 0x3, 0x3a)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10)
fcntl$lock(r9, 0x5, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x7fffffff})
capset(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, &(0x7f00000007c0)=""/31, &(0x7f0000000880)=[0x0, 0x0], 0x2}, 0x58)

1.387424909s ago: executing program 0 (id=12767):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xc}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0x0)
dup3(r2, r1, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, 0x0}])
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r5, 0x0, 0x1000}, 0x18)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000040)="0000501ef663", 0x0, 0x4, 0x10030, 0x0, 0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=0x5c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0)

1.30498142s ago: executing program 4 (id=12768):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x41, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff40c, 0x0, 0x0, 0x0, 0xfb3d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffff7f}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd5e, 0xaf, &(0x7f0000000480)=""/175, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x33, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x0, 0xa9d2, 0xda9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x1ff, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001b2c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000e10000573f2527c626d0f9fd7a7f4c5c673fc712c3a010d155d1acb4696d7b6497657325f0227fda78470f05cf5a4be5baf8e8", @ANYRES32, @ANYRES32=r0, @ANYBLOB="03000000050000000200"/28], 0x50)
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000)

1.29392442s ago: executing program 1 (id=12769):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001540)={0x5, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/31, 0x1f}], &(0x7f0000000200)=[0x2828, 0x5, 0x2, 0x0]}, 0x20)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)

1.246573049s ago: executing program 4 (id=12770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4cd224379a6859ad}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) (fail_nth: 4)

1.149429379s ago: executing program 5 (id=12771):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

1.133686s ago: executing program 4 (id=12772):
openat$autofs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044004)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x2, 0x76, 0x10b, 0x5, 0x4})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x40, @multicast2, 0xc, "037863a3d8"}]}}}}}}}, 0x0)

1.041809609s ago: executing program 5 (id=12773):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000700010000f8ffffffb702000005000000b703000000000000850000007200000295"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
unlink(&(0x7f0000000000)='.\x00')
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6020400)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3780aa012acd210c}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x94, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8801}, 0x40)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$igmp6(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b000, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000297ffb4071180603d21a0000000109002b00010002000009040b40000e01000f082402010303650209240202f9ff0300460824020108020505"], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

786.35414ms ago: executing program 4 (id=12774):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[], 0xfc, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r1, 0x1, &(0x7f0000000080))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000b602990000010000000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa20000000000004e3d28ea5e41e7a3b25d9907020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000002aad363b13e552ddd49583e09635867ef8d1b1596dc208b39c64b29094b5f0bf5d4ac81c1a31d00421565ce9ffe938f83f4edc511e3a24aa199a3ba09c611a41d9ddc155b1302005bb477c845c57636ddc55e82ea844b7226f4c7bf6d1f02bceff26026a55ecf9b5af7c0e11a08b583b73b40edd82f2badcbd0693bc8c51feb450003bf452003cd9e8a46403833946ac64f91f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1205, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x3)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
mq_timedsend(r6, &(0x7f0000000400)="2db3d625268bcb625455c519b77340891c9f68e0fab1201114e9485ff4cd3e36558ef473fecb02ae65cd97645a2cf02afc31a88593d6c6c5ffda395f0a5fc040d4a7855373e261407db0075c126196faae373c25041a12acd8954be50016c21a1cd8858f88e9952003818bada0535b6b22bc88c72747958573b661dfc30ce7e3bfa2f69b39b6f51722b304ddcae664fadeb305dd643d16a57f6afeb9a7150628d07b3e39bea4ccf1700647674c5114dd07f47541fd3149e1a295786f423ee9a0a4f9da3b5c9e1c41a6902a88aedbe2e71d13e0ed5414da1eda8128a34bad833857", 0xe1, 0x1, &(0x7f0000000280)={0x77359400})
r7 = dup2(r4, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
eventfd(0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0)

765.31946ms ago: executing program 0 (id=12775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0)

688.46558ms ago: executing program 0 (id=12776):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x40, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x104)
r2 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7d, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)=@secondary)

593.43238ms ago: executing program 4 (id=12777):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x40000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', 0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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")
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
syz_usbip_server_init(0x5)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)

434.64258ms ago: executing program 1 (id=12778):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

353.17672ms ago: executing program 0 (id=12779):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x80, 0x4)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x18)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x3ab1a0, 0x0)
ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)={0x5, 0xc, 0x0, 0x0, 0x17, "39a8d526bf67b113"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000440)={{0x1}, 'port0\x00', 0x0, 0x100000, 0x8, 0x3, 0x0, 0xfff, 0x9cc, 0x0, 0x1, 0xe})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x140e, 0x3fca440fc5d735f5, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x4)

304.13433ms ago: executing program 4 (id=12780):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x453, 0x4, 0x70bd26, 0x25dfdbff, "c0"}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800)
unshare(0x68040200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r8})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6a, r8})
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000400000000000000000000000fbffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)

285.60408ms ago: executing program 34 (id=12780):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x453, 0x4, 0x70bd26, 0x25dfdbff, "c0"}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800)
unshare(0x68040200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r8})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6a, r8})
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000400000000000000000000000fbffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)

0s ago: executing program 1 (id=12782):
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020600)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

[T20455] loop1: detected capacity change from 0 to 1024
[  826.924073][T20455] EXT4-fs: Ignoring removed orlov option
[  827.004519][T20445] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  827.011143][T20445] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  827.019677][T20445] vhci_hcd vhci_hcd.0: Device attached
[  827.129586][T20455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.144546][T16987] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  827.557409][ T1106] usb 10-1: SetAddress Request (20) to port 0
[  827.566112][ T1106] usb 10-1: new SuperSpeed USB device number 20 using vhci_hcd
[  827.640009][T15756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.649118][T20480] vhci_hcd: connection closed
[  827.665989][T14460] vhci_hcd: stop threads
[  827.675026][T14460] vhci_hcd: release socket
[  827.679485][T14460] vhci_hcd: disconnect device
[  827.684362][T20491] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  827.695940][T20489] lo speed is unknown, defaulting to 1000
[  827.730832][T20489] lo speed is unknown, defaulting to 1000
[  827.737668][T20489] lo speed is unknown, defaulting to 1000
[  827.743601][T20494] loop0: detected capacity change from 0 to 512
[  827.820950][T20494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  828.140027][T20519] xt_CT: No such helper "pptp"
[  828.493203][T20525] loop2: detected capacity change from 0 to 1024
[  828.550195][T20525] EXT4-fs: Ignoring removed orlov option
[  829.009234][T20531] loop5: detected capacity change from 0 to 8192
[  829.023991][T16119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  829.033922][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.050744][T20531]  loop5: p1 < > p2 < p5 > p3 p4
[  829.061557][T20531] loop5: p3 start 83890176 is beyond EOD, truncated
[  829.068397][T20531] loop5: p4 size 16776960 extends beyond EOD, truncated
[  829.081147][T20525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  829.164950][T20531] loop5: p5 size 16776960 extends beyond EOD, truncated
[  829.349804][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.626538][T20538] loop0: detected capacity change from 0 to 512
[  829.934248][T20540] lo speed is unknown, defaulting to 1000
[  829.970730][T20540] lo speed is unknown, defaulting to 1000
[  829.977697][T20540] lo speed is unknown, defaulting to 1000
[  830.096190][T20538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  830.241187][   T29] kauditd_printk_skb: 208 callbacks suppressed
[  830.241206][   T29] audit: type=1326 audit(28070492.927:37601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.283510][T20548] loop4: detected capacity change from 0 to 512
[  830.298765][T20550] loop1: detected capacity change from 0 to 1024
[  830.311139][T20538] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.12429: corrupted inode contents
[  830.311545][   T29] audit: type=1326 audit(28070492.957:37602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.347611][   T29] audit: type=1326 audit(28070492.957:37603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.359350][T20550] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  830.371982][   T29] audit: type=1326 audit(28070492.957:37604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.381073][T20550] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  830.405240][   T29] audit: type=1326 audit(28070492.957:37605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.423840][T20538] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.12429: mark_inode_dirty error
[  830.439009][   T29] audit: type=1326 audit(28070492.957:37606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.458514][T20538] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.12429: corrupted inode contents
[  830.473919][   T29] audit: type=1326 audit(28070492.957:37607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.509360][   T29] audit: type=1326 audit(28070492.957:37608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.533612][   T29] audit: type=1326 audit(28070492.977:37609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.557861][   T29] audit: type=1326 audit(28070492.977:37610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20537 comm="syz.0.12429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  830.570662][T20538] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.12429: mark_inode_dirty error
[  830.584552][T20550] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  830.618519][T20548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  830.648630][T20550] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.12435: unexpected bad inode w/o EXT4_IGET_BAD
[  830.708922][T20548] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.12434: corrupted inode contents
[  830.721111][T20548] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.12434: mark_inode_dirty error
[  830.747899][T20550] EXT4-fs (loop1): no journal found
[  830.753197][T20550] EXT4-fs (loop1): can't get journal size
[  830.772580][T20548] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.12434: corrupted inode contents
[  830.821784][T20550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  830.911160][T20563] loop5: detected capacity change from 0 to 1024
[  830.946531][T20548] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.12434: mark_inode_dirty error
[  831.000374][T20563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.029547][T20563] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  831.050230][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12438'.
[  831.159436][T20563] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  831.248680][T20563] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  831.262394][T20563] EXT4-fs (loop5): This should not happen!! Data will be lost
[  831.262394][T20563] 
[  831.272247][T20563] EXT4-fs (loop5): Total free blocks count 0
[  831.279042][T20563] EXT4-fs (loop5): Free/Dirty block details
[  831.285092][T20563] EXT4-fs (loop5): free_blocks=4293918720
[  831.290957][T20563] EXT4-fs (loop5): dirty_blocks=80
[  831.296164][T20563] EXT4-fs (loop5): Block reservation details
[  831.302939][T20563] EXT4-fs (loop5): i_reserved_data_blocks=5
[  831.345049][T15756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.376132][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.461545][T20574] loop2: detected capacity change from 0 to 512
[  831.500143][T20574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  831.516834][T20574] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.12439: corrupted in-inode xattr: e_name out of bounds
[  831.535889][T20574] EXT4-fs (loop2): Remounting filesystem read-only
[  831.542981][T20574] EXT4-fs (loop2): 1 truncate cleaned up
[  831.549020][T20574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.561340][T20574] SELinux: (dev loop2, type ext4) getxattr errno 5
[  831.564334][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.625386][T20579] lo speed is unknown, defaulting to 1000
[  831.680358][T20579] lo speed is unknown, defaulting to 1000
[  831.686833][T20579] lo speed is unknown, defaulting to 1000
[  831.794125][T20579] loop1: detected capacity change from 0 to 128
[  831.810690][T20574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.826828][T20579] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  831.849042][T20583] loop5: detected capacity change from 0 to 512
[  831.857599][T20579] vhci_hcd vhci_hcd.0: port 0 already used
[  831.869026][T20583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  831.909484][T20583] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12444: corrupted inode contents
[  831.923173][T20583] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12444: mark_inode_dirty error
[  831.931484][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.940918][T20583] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12444: corrupted inode contents
[  831.944431][T20574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12439'.
[  831.964934][T20583] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12444: mark_inode_dirty error
[  831.976532][T20574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12439'.
[  832.008999][T20574] 1ªX¹¦D: entered promiscuous mode
[  832.015443][T20574] batadv_slave_1: entered promiscuous mode
[  832.646228][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.703328][T20601] FAULT_INJECTION: forcing a failure.
[  832.703328][T20601] name failslab, interval 1, probability 0, space 0, times 0
[  832.716078][T20601] CPU: 0 UID: 0 PID: 20601 Comm: syz.0.12448 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  832.716118][T20601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  832.716133][T20601] Call Trace:
[  832.716141][T20601]  <TASK>
[  832.716150][T20601]  dump_stack_lvl+0xf2/0x150
[  832.716228][T20601]  dump_stack+0x15/0x1a
[  832.716249][T20601]  should_fail_ex+0x24a/0x260
[  832.716284][T20601]  should_failslab+0x8f/0xb0
[  832.716433][T20601]  kmem_cache_alloc_noprof+0x52/0x320
[  832.716456][T20601]  ? io_submit_one+0xb7/0x1230
[  832.716497][T20601]  io_submit_one+0xb7/0x1230
[  832.716572][T20601]  ? __rcu_read_unlock+0x4e/0x70
[  832.716596][T20601]  __se_sys_io_submit+0xf5/0x280
[  832.716640][T20601]  __x64_sys_io_submit+0x43/0x50
[  832.716676][T20601]  x64_sys_call+0x2c20/0x2dc0
[  832.716710][T20601]  do_syscall_64+0xc9/0x1c0
[  832.716756][T20601]  ? clear_bhb_loop+0x55/0xb0
[  832.716820][T20601]  ? clear_bhb_loop+0x55/0xb0
[  832.716853][T20601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.716883][T20601] RIP: 0033:0x7fd7e4b4d169
[  832.716902][T20601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  832.716924][T20601] RSP: 002b:00007fd7e31b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  832.716947][T20601] RAX: ffffffffffffffda RBX: 00007fd7e4d65fa0 RCX: 00007fd7e4b4d169
[  832.717062][T20601] RDX: 0000400000000500 RSI: 0000000000000001 RDI: 00007fd7e58a6000
[  832.717077][T20601] RBP: 00007fd7e31b7090 R08: 0000000000000000 R09: 0000000000000000
[  832.717091][T20601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.717105][T20601] R13: 0000000000000000 R14: 00007fd7e4d65fa0 R15: 00007ffdd6537ca8
[  832.717123][T20601]  </TASK>
[  833.144469][ T1106] usb 10-1: device descriptor read/8, error -110
[  833.157647][T15756] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  833.256446][ T1106] usb 10-1: new SuperSpeed USB device number 20 using vhci_hcd
[  833.276414][ T1106] usb 10-1: enqueue for inactive port 0
[  833.284489][ T1106] usb 10-1: enqueue for inactive port 0
[  833.290806][ T1106] usb 10-1: enqueue for inactive port 0
[  833.371988][T20607] loop1: detected capacity change from 0 to 1024
[  833.379232][T20607] EXT4-fs: Ignoring removed orlov option
[  833.418865][T20607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  833.553712][T15756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  833.776327][T20627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.803640][T20628] lo speed is unknown, defaulting to 1000
[  833.856987][T20628] lo speed is unknown, defaulting to 1000
[  833.863390][T20628] lo speed is unknown, defaulting to 1000
[  834.029002][T20628] loop0: detected capacity change from 0 to 128
[  834.090478][T20627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.118244][T20628] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  834.142552][T20628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  834.149245][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  834.157609][T20628] vhci_hcd vhci_hcd.0: Device attached
[  834.180346][T20629] loop1: detected capacity change from 0 to 128
[  834.191412][T20629] FAT-fs (loop1): Directory bread(block 32) failed
[  834.201852][T20629] FAT-fs (loop1): Directory bread(block 33) failed
[  834.208959][T20629] FAT-fs (loop1): Directory bread(block 34) failed
[  834.215626][T20629] FAT-fs (loop1): Directory bread(block 35) failed
[  834.222417][T20629] FAT-fs (loop1): Directory bread(block 36) failed
[  834.229194][T20629] FAT-fs (loop1): Directory bread(block 37) failed
[  834.235878][T20629] FAT-fs (loop1): Directory bread(block 38) failed
[  834.242768][T20629] FAT-fs (loop1): Directory bread(block 39) failed
[  834.258711][T20645] program syz.5.12459 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  834.269521][T20629] FAT-fs (loop1): Directory bread(block 40) failed
[  834.276285][T20629] FAT-fs (loop1): Directory bread(block 41) failed
[  834.332356][T20629] netlink: 'syz.1.12457': attribute type 4 has an invalid length.
[  834.344713][T20629] netlink: 'syz.1.12457': attribute type 4 has an invalid length.
[  834.358820][T20629] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  834.366658][T20629] FAT-fs (loop1): Filesystem has been set read-only
[  834.379369][T20629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12457'.
[  834.410599][T20632] vhci_hcd: connection closed
[  834.410744][ T3413] vhci_hcd: stop threads
[  834.419853][ T3413] vhci_hcd: release socket
[  834.424294][ T3413] vhci_hcd: disconnect device
[  834.462108][T20661] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12460'.
[  834.466474][   T35] usb 2-1: enqueue for inactive port 0
[  834.476657][T20661] 0ªX¹¦D: entered promiscuous mode
[  834.481899][T20661] 0ªX¹¦D: left allmulticast mode
[  834.493217][T20661] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12460'.
[  834.502452][T20661] 1ªX¹¦D: renamed from 
30ªX¹¦D
[  834.511351][T20661] 1ªX¹¦D: left promiscuous mode
[  834.516404][T20661] 1ªX¹¦D: entered allmulticast mode
[  834.530679][T20661] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  834.554626][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12460'.
[  834.563784][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12460'.
[  834.594063][T20661] lo speed is unknown, defaulting to 1000
[  834.635670][T20661] lo speed is unknown, defaulting to 1000
[  834.648531][T20661] lo speed is unknown, defaulting to 1000
[  834.686477][   T35] usb 2-1: enqueue for inactive port 0
[  834.871187][T20690] lo speed is unknown, defaulting to 1000
[  834.917335][ T1106] usb usb10-port1: attempt power cycle
[  834.962762][T16987] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  835.004355][T20720] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12463'.
[  835.004606][T20718] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12464'.
[  835.022570][T20720] 1ªX¹¦D: entered promiscuous mode
[  835.027858][T20720] 1ªX¹¦D: left allmulticast mode
[  835.035874][T20690] lo speed is unknown, defaulting to 1000
[  835.043494][T20718] 1ªX¹¦D: entered promiscuous mode
[  835.048783][T20718] 1ªX¹¦D: left allmulticast mode
[  835.058538][T20720] 0ªX¹¦D: renamed from 
31ªX¹¦D
[  835.065410][T20720] 0ªX¹¦D: left promiscuous mode
[  835.070604][T20720] 0ªX¹¦D: entered allmulticast mode
[  835.077710][T20720] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  835.093836][T20690] lo speed is unknown, defaulting to 1000
[  835.099697][T20725] 0ªX¹¦D: renamed from 
31ªX¹¦D
[  835.106839][T20725] 0ªX¹¦D: left promiscuous mode
[  835.111761][T20725] 0ªX¹¦D: entered allmulticast mode
[  835.119097][T20725] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  835.171885][T20707] siw: device registration error -23
[  835.178413][T20718] lo speed is unknown, defaulting to 1000
[  835.229290][T20720] lo speed is unknown, defaulting to 1000
[  835.232366][T20718] lo speed is unknown, defaulting to 1000
[  835.285556][T20718] lo speed is unknown, defaulting to 1000
[  835.290392][T20720] lo speed is unknown, defaulting to 1000
[  835.331993][T20720] lo speed is unknown, defaulting to 1000
[  835.653712][T20769] FAULT_INJECTION: forcing a failure.
[  835.653712][T20769] name failslab, interval 1, probability 0, space 0, times 0
[  835.667221][T20769] CPU: 1 UID: 0 PID: 20769 Comm: syz.1.12466 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  835.667253][T20769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  835.667339][T20769] Call Trace:
[  835.667346][T20769]  <TASK>
[  835.667356][T20769]  dump_stack_lvl+0xf2/0x150
[  835.667408][T20769]  dump_stack+0x15/0x1a
[  835.667429][T20769]  should_fail_ex+0x24a/0x260
[  835.667464][T20769]  should_failslab+0x8f/0xb0
[  835.667574][T20769]  kmem_cache_alloc_node_noprof+0x59/0x320
[  835.667603][T20769]  ? __alloc_skb+0x10b/0x310
[  835.667645][T20769]  __alloc_skb+0x10b/0x310
[  835.667672][T20769]  netlink_alloc_large_skb+0xad/0xe0
[  835.667787][T20769]  netlink_sendmsg+0x3b4/0x6e0
[  835.667830][T20769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.667966][T20769]  __sock_sendmsg+0x140/0x180
[  835.668006][T20769]  ____sys_sendmsg+0x326/0x4b0
[  835.668036][T20769]  __sys_sendmsg+0x19d/0x230
[  835.668131][T20769]  __x64_sys_sendmsg+0x46/0x50
[  835.668156][T20769]  x64_sys_call+0x2734/0x2dc0
[  835.668184][T20769]  do_syscall_64+0xc9/0x1c0
[  835.668309][T20769]  ? clear_bhb_loop+0x55/0xb0
[  835.668340][T20769]  ? clear_bhb_loop+0x55/0xb0
[  835.668369][T20769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.668401][T20769] RIP: 0033:0x7f75db0cd169
[  835.668417][T20769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  835.668434][T20769] RSP: 002b:00007f75d9737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.668454][T20769] RAX: ffffffffffffffda RBX: 00007f75db2e5fa0 RCX: 00007f75db0cd169
[  835.668477][T20769] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003
[  835.668489][T20769] RBP: 00007f75d9737090 R08: 0000000000000000 R09: 0000000000000000
[  835.668501][T20769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  835.668512][T20769] R13: 0000000000000000 R14: 00007f75db2e5fa0 R15: 00007ffd4c6cb5b8
[  835.668531][T20769]  </TASK>
[  835.876034][   T35] usb usb2-port1: attempt power cycle
[  836.426285][T20795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.530566][T20789] tipc: Resetting bearer <eth:syzkaller0>
[  836.562536][T20789] tipc: Disabling bearer <eth:syzkaller0>
[  836.648525][T20801] FAULT_INJECTION: forcing a failure.
[  836.648525][T20801] name failslab, interval 1, probability 0, space 0, times 0
[  836.661477][T20801] CPU: 1 UID: 0 PID: 20801 Comm: syz.4.12474 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  836.661505][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  836.661520][T20801] Call Trace:
[  836.661529][T20801]  <TASK>
[  836.661589][T20801]  dump_stack_lvl+0xf2/0x150
[  836.661623][T20801]  dump_stack+0x15/0x1a
[  836.661649][T20801]  should_fail_ex+0x24a/0x260
[  836.661728][T20801]  should_failslab+0x8f/0xb0
[  836.661765][T20801]  kmem_cache_alloc_node_noprof+0x59/0x320
[  836.661794][T20801]  ? __alloc_skb+0x10b/0x310
[  836.661821][T20801]  __alloc_skb+0x10b/0x310
[  836.661847][T20801]  netlink_alloc_large_skb+0xad/0xe0
[  836.661897][T20801]  netlink_sendmsg+0x3b4/0x6e0
[  836.661980][T20801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  836.662021][T20801]  __sock_sendmsg+0x140/0x180
[  836.662101][T20801]  ____sys_sendmsg+0x326/0x4b0
[  836.662129][T20801]  __sys_sendmsg+0x19d/0x230
[  836.662242][T20801]  __x64_sys_sendmsg+0x46/0x50
[  836.662272][T20801]  x64_sys_call+0x2734/0x2dc0
[  836.662306][T20801]  do_syscall_64+0xc9/0x1c0
[  836.662385][T20801]  ? clear_bhb_loop+0x55/0xb0
[  836.662412][T20801]  ? clear_bhb_loop+0x55/0xb0
[  836.662438][T20801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.662468][T20801] RIP: 0033:0x7f779184d169
[  836.662486][T20801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  836.662511][T20801] RSP: 002b:00007f778feb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  836.662534][T20801] RAX: ffffffffffffffda RBX: 00007f7791a65fa0 RCX: 00007f779184d169
[  836.662549][T20801] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003
[  836.662625][T20801] RBP: 00007f778feb1090 R08: 0000000000000000 R09: 0000000000000000
[  836.662637][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  836.662649][T20801] R13: 0000000000000000 R14: 00007f7791a65fa0 R15: 00007ffd17f4a0f8
[  836.662667][T20801]  </TASK>
[  837.167597][T20810] lo speed is unknown, defaulting to 1000
[  837.171870][ T1106] usb usb10-port1: unable to enumerate USB device
[  837.184369][T20812] loop2: detected capacity change from 0 to 512
[  837.193664][T20809] __nla_validate_parse: 6 callbacks suppressed
[  837.193709][T20809] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12478'.
[  837.219237][   T29] kauditd_printk_skb: 224 callbacks suppressed
[  837.219255][   T29] audit: type=1326 audit(28070499.907:37835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20811 comm="syz.5.12480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41ec8ad169 code=0x0
[  837.249324][T20817] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12478'.
[  837.249569][T20816] loop0: detected capacity change from 0 to 128
[  837.265421][T20809] 1ªX¹¦D: entered promiscuous mode
[  837.265486][   T29] audit: type=1400 audit(28070499.937:37836): avc:  denied  { create } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1
[  837.270642][T20809] 1ªX¹¦D: left allmulticast mode
[  837.281939][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12480'.
[  837.292452][   T29] audit: type=1400 audit(28070499.937:37837): avc:  denied  { create } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[  837.296880][T20819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12480'.
[  837.305606][   T29] audit: type=1400 audit(28070499.937:37838): avc:  denied  { create } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  837.309735][   T29] audit: type=1400 audit(28070499.957:37839): avc:  denied  { getattr } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1
[  837.327489][T20816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  837.336094][   T29] audit: type=1400 audit(28070499.957:37840): avc:  denied  { write } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  837.336151][   T29] audit: type=1400 audit(28070499.957:37841): avc:  denied  { nlmsg_write } for  pid=20813 comm="syz.1.12479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  837.380932][T20812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  837.390182][T20817] 0ªX¹¦D: renamed from 
31ªX¹¦D
[  837.394750][   T29] audit: type=1326 audit(28070500.077:37842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20802 comm="syz.0.12475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  837.423936][T20812] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.12477: corrupted inode contents
[  837.432974][   T29] audit: type=1326 audit(28070500.077:37843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20802 comm="syz.0.12475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd7e4b4f0ba code=0x7ffc0000
[  837.433010][   T29] audit: type=1326 audit(28070500.077:37844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20802 comm="syz.0.12475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7e4b4bad0 code=0x7ffc0000
[  837.437737][T20817] 0ªX¹¦D: left promiscuous mode
[  837.449771][T20812] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.12477: mark_inode_dirty error
[  837.450938][T20817] 0ªX¹¦D: entered allmulticast mode
[  837.482246][T20816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  837.489190][T20817] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  837.510350][T20816] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  837.510480][T20816] vhci_hcd vhci_hcd.0: Device attached
[  837.584525][T20824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.604078][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12478'.
[  837.613311][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12478'.
[  837.623275][T20824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.631200][T20812] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.12477: corrupted inode contents
[  837.644178][T20812] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.12477: mark_inode_dirty error
[  837.647540][T20810] lo speed is unknown, defaulting to 1000
[  837.655506][   T35] usb 2-1: SetAddress Request (26) to port 0
[  837.668141][   T35] usb 2-1: new SuperSpeed USB device number 26 using vhci_hcd
[  837.672963][T20827] lo speed is unknown, defaulting to 1000
[  837.676722][T20810] lo speed is unknown, defaulting to 1000
[  837.776597][T20825] vhci_hcd: connection reset by peer
[  837.809537][ T1931] vhci_hcd: stop threads
[  837.813884][ T1931] vhci_hcd: release socket
[  837.818422][ T1931] vhci_hcd: disconnect device
[  837.824668][T20827] lo speed is unknown, defaulting to 1000
[  837.841431][T20827] lo speed is unknown, defaulting to 1000
[  837.843435][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  837.871442][T20838] loop2: detected capacity change from 0 to 1024
[  837.937764][T20838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  837.996638][T20842] lo speed is unknown, defaulting to 1000
[  838.048003][T20842] lo speed is unknown, defaulting to 1000
[  838.054941][T20842] lo speed is unknown, defaulting to 1000
[  838.157498][T20842] loop1: detected capacity change from 0 to 128
[  838.181105][T20838] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  838.198109][T20838] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  838.210551][T20838] EXT4-fs (loop2): This should not happen!! Data will be lost
[  838.210551][T20838] 
[  838.220290][T20838] EXT4-fs (loop2): Total free blocks count 0
[  838.226299][T20838] EXT4-fs (loop2): Free/Dirty block details
[  838.232226][T20838] EXT4-fs (loop2): free_blocks=4293918720
[  838.238099][T20838] EXT4-fs (loop2): dirty_blocks=80
[  838.243268][T20838] EXT4-fs (loop2): Block reservation details
[  838.249283][T20838] EXT4-fs (loop2): i_reserved_data_blocks=5
[  838.270527][T20842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  838.310961][T20836] vhci_hcd vhci_hcd.0: port 0 already used
[  838.315670][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.365104][T20857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.376666][T20857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.385181][T20856] loop2: detected capacity change from 0 to 2048
[  838.394681][T20856] EXT4-fs: Ignoring removed mblk_io_submit option
[  838.407247][T20856] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[  838.465494][T20856] loop2: detected capacity change from 0 to 8192
[  838.497404][T20856]  loop2: p1 < > p2 < p5 > p3 p4
[  838.503629][T20856] loop2: p3 start 83890176 is beyond EOD, truncated
[  838.510493][T20856] loop2: p4 size 16776960 extends beyond EOD, truncated
[  838.518144][T20856] loop2: p5 size 16776960 extends beyond EOD, truncated
[  838.593329][T20882] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12485'.
[  838.608332][T20882] 1ªX¹¦D: left allmulticast mode
[  838.621656][T20882] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12485'.
[  838.638218][T20882] 0ªX¹¦D: renamed from 
31ªX¹¦D
[  838.644472][T16987] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  838.665829][T20882] 0ªX¹¦D: entered allmulticast mode
[  838.679113][T20882] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  838.695758][T20894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12485'.
[  838.704919][T20894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12485'.
[  838.740759][T20882] lo speed is unknown, defaulting to 1000
[  838.783693][T20882] lo speed is unknown, defaulting to 1000
[  838.790386][T20882] lo speed is unknown, defaulting to 1000
[  839.145518][T15756] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  839.293882][T20917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20917 comm=syz.2.12488
[  840.268158][T20973] loop5: detected capacity change from 0 to 1024
[  840.289514][T20973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  840.363354][T20973] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  840.486204][T20973] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  840.499493][T20973] EXT4-fs (loop5): This should not happen!! Data will be lost
[  840.499493][T20973] 
[  840.509303][T20973] EXT4-fs (loop5): Total free blocks count 0
[  840.515369][T20973] EXT4-fs (loop5): Free/Dirty block details
[  840.521508][T20973] EXT4-fs (loop5): free_blocks=4293918720
[  840.528099][T20973] EXT4-fs (loop5): dirty_blocks=80
[  840.533245][T20973] EXT4-fs (loop5): Block reservation details
[  840.539287][T20973] EXT4-fs (loop5): i_reserved_data_blocks=5
[  840.546123][T20970] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.559968][T20981] loop2: detected capacity change from 0 to 512
[  840.590697][T20981] EXT4-fs (loop2): 1 orphan inode deleted
[  840.604223][T20995] loop0: detected capacity change from 0 to 256
[  840.611015][ T1931] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1
[  840.613179][T20981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  840.623640][T20995] vfat: Bad value for 'shortname'
[  840.644576][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.654918][T20970] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.700248][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.711466][T20970] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.759435][T21017] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  840.770509][T20970] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.833550][T20970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.845623][T20970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.859097][T20970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.871060][T20970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.913010][T21025] loop0: detected capacity change from 0 to 128
[  841.057445][T21035] loop5: detected capacity change from 0 to 2048
[  841.064597][T21035] EXT4-fs: Ignoring removed mblk_io_submit option
[  841.078543][T21035] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  841.092703][T21039] loop0: detected capacity change from 0 to 2048
[  841.099644][T21039] EXT4-fs: Ignoring removed mblk_io_submit option
[  841.172999][T21039] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  841.353085][T21045] loop2: detected capacity change from 0 to 256
[  841.398763][T21039] loop0: detected capacity change from 0 to 8192
[  841.446295][T21035] loop5: detected capacity change from 0 to 8192
[  841.507960][T21039]  loop0: p1 < > p2 < p5 > p3 p4
[  841.527918][T21035]  loop5: p1 < > p2 < p5 > p3 p4
[  841.543509][T21039] loop0: p3 start 83890176 is beyond EOD, truncated
[  841.550240][T21039] loop0: p4 size 16776960 extends beyond EOD, truncated
[  841.588367][T21035] loop5: p3 start 83890176 is beyond EOD, truncated
[  841.595147][T21035] loop5: p4 size 16776960 extends beyond EOD, truncated
[  841.668386][T21039] loop0: p5 size 16776960 extends beyond EOD, truncated
[  841.707621][T21035] loop5: p5 size 16776960 extends beyond EOD, truncated
[  842.032875][T21052] loop5: detected capacity change from 0 to 128
[  842.381258][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  842.381275][   T29] audit: type=1326 audit(28070505.057:37955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.411210][   T29] audit: type=1326 audit(28070505.057:37956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.434653][   T29] audit: type=1326 audit(28070505.057:37957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.458238][   T29] audit: type=1326 audit(28070505.057:37958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.481807][   T29] audit: type=1326 audit(28070505.057:37959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.505415][   T29] audit: type=1326 audit(28070505.057:37960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.528990][   T29] audit: type=1326 audit(28070505.057:37961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.2.12517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.582778][T21072] loop2: detected capacity change from 0 to 512
[  842.603791][   T29] audit: type=1400 audit(28070505.287:37962): avc:  denied  { listen } for  pid=21073 comm="syz.0.12521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  842.674564][   T29] audit: type=1400 audit(28070505.347:37963): avc:  denied  { accept } for  pid=21073 comm="syz.0.12521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  842.700020][T21072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.736420][   T35] usb 2-1: device descriptor read/8, error -110
[  842.736419][T21083] netlink: 'syz.5.12523': attribute type 39 has an invalid length.
[  842.771033][   T29] audit: type=1326 audit(28070505.457:37964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.2.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1082d169 code=0x7ffc0000
[  842.852284][   T35] usb 2-1: new SuperSpeed USB device number 26 using vhci_hcd
[  842.877955][   T35] usb 2-1: enqueue for inactive port 0
[  842.888658][   T35] usb 2-1: enqueue for inactive port 0
[  842.902585][   T35] usb 2-1: enqueue for inactive port 0
[  843.185785][T21094] lo speed is unknown, defaulting to 1000
[  843.237491][T21094] lo speed is unknown, defaulting to 1000
[  843.244017][T21094] lo speed is unknown, defaulting to 1000
[  843.412812][T21094] loop5: detected capacity change from 0 to 128
[  843.429087][T21093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.504548][T21098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.515748][T21094] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  843.541296][T21094] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  843.547872][T21094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  843.555685][T21094] vhci_hcd vhci_hcd.0: Device attached
[  843.556547][T21098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.581784][T21098] s
z1: rxe_newlink: already configured on lo
[  843.605461][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.665465][T21108] loop0: detected capacity change from 0 to 512
[  843.690612][T21108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  843.706203][T21108] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  843.727779][T21108] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.12532: corrupted inode contents
[  843.740196][T21108] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.12532: mark_inode_dirty error
[  843.754321][T21108] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.12532: corrupted inode contents
[  843.771288][T21108] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.12532: mark_inode_dirty error
[  843.781709][T21100] vhci_hcd: connection closed
[  843.811948][T21114] __nla_validate_parse: 1 callbacks suppressed
[  843.812008][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12533'.
[  843.852292][T21114] IPVS: Error joining to the multicast group
[  843.875227][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.889328][ T1931] vhci_hcd: stop threads
[  843.893628][ T1931] vhci_hcd: release socket
[  843.898175][ T1931] vhci_hcd: disconnect device
[  844.003956][T21117] netlink: 'syz.1.12535': attribute type 39 has an invalid length.
[  844.191350][T21120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12536'.
[  844.444232][T11246] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  844.675559][T21124] loop5: detected capacity change from 0 to 1024
[  845.016594][T21126] lo speed is unknown, defaulting to 1000
[  845.050035][T21126] lo speed is unknown, defaulting to 1000
[  845.056243][T21126] lo speed is unknown, defaulting to 1000
[  845.301150][T21126] loop4: detected capacity change from 0 to 128
[  845.390194][T21126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  845.402766][T21126] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  845.427923][T21126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  845.434560][T21126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  845.442366][T21126] vhci_hcd vhci_hcd.0: Device attached
[  845.509802][T21124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  845.528928][T21137] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12540'.
[  845.540315][T21124] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  845.551861][T21137] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[  845.594799][T21137] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  845.613072][T21137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12540'.
[  845.622252][T21137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12540'.
[  845.648525][T21137] lo speed is unknown, defaulting to 1000
[  845.654199][T21132] vhci_hcd: connection closed
[  845.657034][ T3413] vhci_hcd: stop threads
[  845.666023][ T3413] vhci_hcd: release socket
[  845.670510][ T3413] vhci_hcd: disconnect device
[  845.687299][T21137] lo speed is unknown, defaulting to 1000
[  845.693328][T21124] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  845.702692][T21137] lo speed is unknown, defaulting to 1000
[  845.712275][T21135] netlink: 'syz.0.12534': attribute type 1 has an invalid length.
[  845.713409][T21124] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  845.720198][T21135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12534'.
[  845.720244][ T5449] usb 10-1: enqueue for inactive port 0
[  845.748921][T21124] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  845.762035][T21124] EXT4-fs (loop5): This should not happen!! Data will be lost
[  845.762035][T21124] 
[  845.772407][T21124] EXT4-fs (loop5): Total free blocks count 0
[  845.778456][T21124] EXT4-fs (loop5): Free/Dirty block details
[  845.784393][T21124] EXT4-fs (loop5): free_blocks=4293918720
[  845.790839][T21124] EXT4-fs (loop5): dirty_blocks=80
[  845.795972][T21124] EXT4-fs (loop5): Block reservation details
[  845.802024][T21124] EXT4-fs (loop5): i_reserved_data_blocks=5
[  845.810470][T21135] loop0: detected capacity change from 0 to 128
[  845.817232][T21135] ext3: Unknown parameter 'euid>18446744073709551615'
[  845.850139][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.934603][T21148] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12544'.
[  845.945120][T21148] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[  845.953637][T21148] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  845.972227][T21148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12544'.
[  845.981542][T21148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12544'.
[  845.991000][ T5449] usb 10-1: enqueue for inactive port 0
[  846.018667][T21148] lo speed is unknown, defaulting to 1000
[  846.054833][T21148] lo speed is unknown, defaulting to 1000
[  846.061692][T21148] lo speed is unknown, defaulting to 1000
[  846.289052][T16119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  846.324270][T21162] lo speed is unknown, defaulting to 1000
[  846.394813][T21164] FAULT_INJECTION: forcing a failure.
[  846.394813][T21164] name failslab, interval 1, probability 0, space 0, times 0
[  846.407593][T21164] CPU: 0 UID: 0 PID: 21164 Comm: syz.0.12550 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  846.407720][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  846.407736][T21164] Call Trace:
[  846.407744][T21164]  <TASK>
[  846.407753][T21164]  dump_stack_lvl+0xf2/0x150
[  846.407785][T21164]  dump_stack+0x15/0x1a
[  846.407812][T21164]  should_fail_ex+0x24a/0x260
[  846.407870][T21164]  should_failslab+0x8f/0xb0
[  846.407990][T21164]  __kmalloc_cache_node_noprof+0x56/0x320
[  846.408014][T21164]  ? __get_vm_area_node+0xfb/0x1c0
[  846.408043][T21164]  __get_vm_area_node+0xfb/0x1c0
[  846.408071][T21164]  __vmalloc_node_range_noprof+0x280/0xe70
[  846.408182][T21164]  ? sel_write_load+0x152/0x360
[  846.408223][T21164]  ? _parse_integer_limit+0x167/0x180
[  846.408270][T21164]  ? avc_has_perm_noaudit+0x1cc/0x210
[  846.408317][T21164]  ? sel_write_load+0x152/0x360
[  846.408418][T21164]  vmalloc_noprof+0x5e/0x70
[  846.408445][T21164]  ? sel_write_load+0x152/0x360
[  846.408524][T21164]  sel_write_load+0x152/0x360
[  846.408564][T21164]  ? __pfx_sel_write_load+0x10/0x10
[  846.408602][T21164]  vfs_write+0x27d/0x920
[  846.408690][T21164]  ? putname+0xcf/0xf0
[  846.408724][T21164]  ? __fget_files+0x17c/0x1c0
[  846.408871][T21164]  ksys_write+0xe8/0x1b0
[  846.408905][T21164]  __x64_sys_write+0x42/0x50
[  846.408936][T21164]  x64_sys_call+0x287e/0x2dc0
[  846.408981][T21164]  do_syscall_64+0xc9/0x1c0
[  846.409049][T21164]  ? clear_bhb_loop+0x55/0xb0
[  846.409091][T21164]  ? clear_bhb_loop+0x55/0xb0
[  846.409153][T21164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.409195][T21164] RIP: 0033:0x7fd7e4b4d169
[  846.409212][T21164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  846.409282][T21164] RSP: 002b:00007fd7e31b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  846.409304][T21164] RAX: ffffffffffffffda RBX: 00007fd7e4d65fa0 RCX: 00007fd7e4b4d169
[  846.409316][T21164] RDX: 0000000000003000 RSI: 0000400000000000 RDI: 0000000000000006
[  846.409328][T21164] RBP: 00007fd7e31b7090 R08: 0000000000000000 R09: 0000000000000000
[  846.409340][T21164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.409357][T21164] R13: 0000000000000000 R14: 00007fd7e4d65fa0 R15: 00007ffdd6537ca8
[  846.409375][T21164]  </TASK>
[  846.409385][T21164] syz.0.12550: vmalloc error: size 12288, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  846.412561][T21162] lo speed is unknown, defaulting to 1000
[  846.420471][T21164] ,cpuset=
[  846.468733][T21173] FAULT_INJECTION: forcing a failure.
[  846.468733][T21173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.471022][T21164] /
[  846.476853][T21173] CPU: 1 UID: 0 PID: 21173 Comm: syz.5.12553 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  846.476913][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  846.476929][T21173] Call Trace:
[  846.476938][T21173]  <TASK>
[  846.476948][T21173]  dump_stack_lvl+0xf2/0x150
[  846.476983][T21173]  dump_stack+0x15/0x1a
[  846.477012][T21173]  should_fail_ex+0x24a/0x260
[  846.477114][T21173]  should_fail+0xb/0x10
[  846.477277][T21173]  should_fail_usercopy+0x1a/0x20
[  846.477318][T21173]  _copy_from_user+0x1c/0xa0
[  846.477342][T21173]  copy_msghdr_from_user+0x54/0x2a0
[  846.477457][T21173]  ? __fget_files+0x17c/0x1c0
[  846.477501][T21173]  __sys_sendmsg+0x13e/0x230
[  846.477550][T21173]  __x64_sys_sendmsg+0x46/0x50
[  846.477592][T21173]  x64_sys_call+0x2734/0x2dc0
[  846.477682][T21173]  do_syscall_64+0xc9/0x1c0
[  846.477721][T21173]  ? clear_bhb_loop+0x55/0xb0
[  846.477802][T21173]  ? clear_bhb_loop+0x55/0xb0
[  846.477836][T21173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.477905][T21173] RIP: 0033:0x7f41ec8ad169
[  846.477925][T21173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  846.478022][T21173] RSP: 002b:00007f41eaf11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  846.478050][T21173] RAX: ffffffffffffffda RBX: 00007f41ecac5fa0 RCX: 00007f41ec8ad169
[  846.478065][T21173] RDX: 0000000000000000 RSI: 0000400000001540 RDI: 0000000000000004
[  846.478082][T21173] RBP: 00007f41eaf11090 R08: 0000000000000000 R09: 0000000000000000
[  846.478149][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.478164][T21173] R13: 0000000000000000 R14: 00007f41ecac5fa0 R15: 00007ffd20737fa8
[  846.478187][T21173]  </TASK>
[  846.478848][T21171] loop4: detected capacity change from 0 to 1024
[  846.481674][T21164] ,mems_allowed=0
[  846.514136][T21171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  846.516620][T21164] 
[  846.516631][T21164] CPU: 0 UID: 0 PID: 21164 Comm: syz.0.12550 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  846.516660][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  846.516674][T21164] Call Trace:
[  846.516732][T21164]  <TASK>
[  846.516744][T21164]  dump_stack_lvl+0xf2/0x150
[  846.516782][T21164]  dump_stack+0x15/0x1a
[  846.516810][T21164]  warn_alloc+0x145/0x1b0
[  846.516928][T21164]  __vmalloc_node_range_noprof+0x2a5/0xe70
[  846.516965][T21164]  ? _parse_integer_limit+0x167/0x180
[  846.517076][T21164]  ? avc_has_perm_noaudit+0x1cc/0x210
[  846.517127][T21164]  ? sel_write_load+0x152/0x360
[  846.517169][T21164]  vmalloc_noprof+0x5e/0x70
[  846.517203][T21164]  ? sel_write_load+0x152/0x360
[  846.517286][T21164]  sel_write_load+0x152/0x360
[  846.517336][T21164]  ? __pfx_sel_write_load+0x10/0x10
[  846.517381][T21164]  vfs_write+0x27d/0x920
[  846.517413][T21164]  ? putname+0xcf/0xf0
[  846.517515][T21164]  ? __fget_files+0x17c/0x1c0
[  846.517559][T21164]  ksys_write+0xe8/0x1b0
[  846.517593][T21164]  __x64_sys_write+0x42/0x50
[  846.517645][T21164]  x64_sys_call+0x287e/0x2dc0
[  846.517728][T21164]  do_syscall_64+0xc9/0x1c0
[  846.517831][T21164]  ? clear_bhb_loop+0x55/0xb0
[  846.517865][T21164]  ? clear_bhb_loop+0x55/0xb0
[  846.517961][T21164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.517996][T21164] RIP: 0033:0x7fd7e4b4d169
[  846.518016][T21164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  846.518039][T21164] RSP: 002b:00007fd7e31b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  846.518072][T21164] RAX: ffffffffffffffda RBX: 00007fd7e4d65fa0 RCX: 00007fd7e4b4d169
[  846.518088][T21164] RDX: 0000000000003000 RSI: 0000400000000000 RDI: 0000000000000006
[  846.518104][T21164] RBP: 00007fd7e31b7090 R08: 0000000000000000 R09: 0000000000000000
[  846.518121][T21164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.518136][T21164] R13: 0000000000000000 R14: 00007fd7e4d65fa0 R15: 00007ffdd6537ca8
[  846.518168][T21164]  </TASK>
[  846.518177][T21164] Mem-Info:
[  846.521180][T21171] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  846.525030][T21164] active_anon:3511 inactive_anon:30 isolated_anon:0
[  846.525030][T21164]  active_file:4460 inactive_file:8493 isolated_file:0
[  846.525030][T21164]  unevictable:19716 dirty:263 writeback:0
[  846.525030][T21164]  slab_reclaimable:3447 slab_unreclaimable:33042
[  846.525030][T21164]  mapped:28312 shmem:393 pagetables:1246
[  846.525030][T21164]  sec_pagetables:0 bounce:0
[  846.525030][T21164]  kernel_misc_reclaimable:0
[  846.525030][T21164]  free:1577198 free_pcp:13919 free_cma:0
[  846.532846][T21171] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  846.534157][T21164] Node 0 active_anon:14044kB inactive_anon:120kB active_file:17840kB inactive_file:33972kB unevictable:78864kB isolated(anon):0kB isolated(file):0kB mapped:113248kB dirty:1052kB writeback:0kB shmem:1572kB writeback_tmp:0kB kernel_stack:3888kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no
[  846.548593][T21162] lo speed is unknown, defaulting to 1000
[  846.552673][T21164] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  846.801318][T21186] loop2: detected capacity change from 0 to 2048
[  846.806553][T21164] lowmem_reserve[]: 0 2885 7863 0
[  846.806606][T21164] Node 0 DMA32 free:2950748kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  846.806730][T21164] lowmem_reserve[]: 0 0 4978 0
[  846.806756][T21164] Node 0 Normal free:3343072kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14864kB inactive_anon:120kB active_file:17840kB inactive_file:34056kB unevictable:78864kB writepending:1080kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:49468kB local_pcp:22960kB free_cma:0kB
[  846.806892][T21164] lowmem_reserve[]: 0 0 0 0
[  846.806955][T21164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 
[  846.817695][T21186] EXT4-fs: Ignoring removed mblk_io_submit option
[  846.823170][T21164] 1*1024kB 
[  846.848669][T21186] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[  846.850244][T21164] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  847.318400][T21164] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950748kB
[  847.334502][T21164] Node 0 Normal: 4182*4kB (UME) 3030*8kB (UM) 635*16kB (UME) 526*32kB (UME) 502*64kB (UME) 555*128kB (UME) 648*256kB (UME) 467*512kB (UME) 360*1024kB (UM) 111*2048kB (UM) 530*4096kB (UM) = 3342968kB
[  847.354445][T21164] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  847.363939][T21164] 33063 total pagecache pages
[  847.368867][T21164] 0 pages in swap cache
[  847.373029][T21164] Free swap  = 122848kB
[  847.377222][T21164] Total swap = 124996kB
[  847.381414][T21164] 2097051 pages RAM
[  847.385303][T21164] 0 pages HighMem/MovableOnly
[  847.389998][T21164] 80064 pages reserved
[  847.406016][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.422829][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12558'.
[  847.428510][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  847.428537][   T29] audit: type=1400 audit(2000000003.820:38159): avc:  denied  { nlmsg_read } for  pid=21189 comm="syz.0.12558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  847.459423][T21186] loop2: detected capacity change from 0 to 8192
[  847.467575][T21190] usb usb1: usbfs: process 21190 (syz.0.12558) did not claim interface 0 before use
[  847.487484][T21192] loop4: detected capacity change from 0 to 512
[  847.494019][T21190] loop0: detected capacity change from 0 to 2048
[  847.501295][   T29] audit: type=1400 audit(2000000003.880:38160): avc:  denied  { ioctl } for  pid=21189 comm=2B7D5B70B340 path="pid:[4026533173]" dev="nsfs" ino=4026533173 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  847.538058][T21186]  loop2: p1 < > p2 < p5 > p3 p4
[  847.545108][T21186] loop2: p3 start 83890176 is beyond EOD, truncated
[  847.551788][T21186] loop2: p4 size 16776960 extends beyond EOD, truncated
[  847.552559][T21192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  847.559408][T21190] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002]
[  847.572453][T21192] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  847.591706][T21190] System zones: 0-7
[  847.596535][T21190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.605068][T21192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.12557: corrupted inode contents
[  847.609444][T21186] loop2: p5 size 16776960 extends beyond EOD, truncated
[  847.623983][T21192] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.12557: mark_inode_dirty error
[  847.641113][T21192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.12557: corrupted inode contents
[  847.657967][T21192] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.12557: mark_inode_dirty error
[  847.673947][T21190] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[p³@: bg 0: block 234: padding at end of block bitmap is not set
[  847.690444][T21190] EXT4-fs (loop0): Remounting filesystem read-only
[  847.698717][   T29] audit: type=1326 audit(2000000004.100:38161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.742912][   T29] audit: type=1326 audit(2000000004.100:38162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.756896][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.767406][   T29] audit: type=1326 audit(2000000004.100:38163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.799231][   T29] audit: type=1326 audit(2000000004.100:38164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.823675][   T29] audit: type=1326 audit(2000000004.100:38165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.848019][   T29] audit: type=1326 audit(2000000004.100:38166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.871745][   T29] audit: type=1326 audit(2000000004.100:38167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.896093][   T29] audit: type=1326 audit(2000000004.100:38168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779184d169 code=0x7ffc0000
[  847.921712][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.951084][T21201] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.995480][T21207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  848.004478][T21207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  848.027045][ T5449] usb usb10-port1: attempt power cycle
[  848.043388][T21207] rdma_rxe: rxe_newlink: failed to add lo
[  848.078341][T21201] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.158807][T21201] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.228612][T21201] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.281249][T21223] loop0: detected capacity change from 0 to 1024
[  848.315219][T21201] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  848.328045][T21201] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  848.340590][T21201] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  848.353061][T21201] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  848.374693][T21223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.389648][T21223] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  848.401305][T21223] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  848.413847][T21223] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  848.431838][T21223] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  848.444297][T21223] EXT4-fs (loop0): This should not happen!! Data will be lost
[  848.444297][T21223] 
[  848.454649][T21223] EXT4-fs (loop0): Total free blocks count 0
[  848.460679][T21223] EXT4-fs (loop0): Free/Dirty block details
[  848.467332][T21223] EXT4-fs (loop0): free_blocks=4293918720
[  848.473095][T21223] EXT4-fs (loop0): dirty_blocks=80
[  848.478247][T21223] EXT4-fs (loop0): Block reservation details
[  848.484255][T21223] EXT4-fs (loop0): i_reserved_data_blocks=5
[  848.530503][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.765418][T21244] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[  848.775641][T21244] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  848.813884][T21244] lo speed is unknown, defaulting to 1000
[  848.854454][T21244] lo speed is unknown, defaulting to 1000
[  848.861362][T21244] lo speed is unknown, defaulting to 1000
[  848.922941][T21250] loop2: detected capacity change from 0 to 2048
[  848.946152][T21250] EXT4-fs: Ignoring removed mblk_io_submit option
[  848.982586][T21250] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[  849.129962][T21268] loop4: detected capacity change from 0 to 128
[  849.138757][T21250] loop2: detected capacity change from 0 to 8192
[  849.176965][T21268] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  849.190051][T21250]  loop2: p1 < > p2 < p5 > p3 p4
[  849.196511][T21250] loop2: p3 start 83890176 is beyond EOD, truncated
[  849.203266][T21250] loop2: p4 size 16776960 extends beyond EOD, truncated
[  849.205615][T21268] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  849.211513][T21250] loop2: p5 size 16776960 extends beyond EOD, truncated
[  849.272505][T21284] netlink: 'syz.1.12591': attribute type 39 has an invalid length.
[  849.273181][T21281] __nla_validate_parse: 4 callbacks suppressed
[  849.273197][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12589'.
[  849.333558][T21289] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12592'.
[  849.363035][T21289] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[  849.374700][T21289] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  849.397123][T21289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12592'.
[  849.406304][T21289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12592'.
[  849.435603][T21289] lo speed is unknown, defaulting to 1000
[  849.463546][T21297] FAULT_INJECTION: forcing a failure.
[  849.463546][T21297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.473212][T21289] lo speed is unknown, defaulting to 1000
[  849.477471][T21297] CPU: 1 UID: 0 PID: 21297 Comm: syz.0.12595 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  849.477583][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  849.477634][T21297] Call Trace:
[  849.477644][T21297]  <TASK>
[  849.477655][T21297]  dump_stack_lvl+0xf2/0x150
[  849.477691][T21297]  dump_stack+0x15/0x1a
[  849.477719][T21297]  should_fail_ex+0x24a/0x260
[  849.477757][T21297]  should_fail+0xb/0x10
[  849.477865][T21297]  should_fail_usercopy+0x1a/0x20
[  849.477905][T21297]  _copy_from_user+0x1c/0xa0
[  849.477946][T21297]  move_addr_to_kernel+0x82/0x120
[  849.477986][T21297]  __sys_bind+0x9e/0x190
[  849.478015][T21297]  __x64_sys_bind+0x41/0x50
[  849.478038][T21297]  x64_sys_call+0x20ab/0x2dc0
[  849.478073][T21297]  do_syscall_64+0xc9/0x1c0
[  849.478177][T21297]  ? clear_bhb_loop+0x55/0xb0
[  849.478212][T21297]  ? clear_bhb_loop+0x55/0xb0
[  849.478248][T21297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.478302][T21297] RIP: 0033:0x7fd7e4b4d169
[  849.478329][T21297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  849.478353][T21297] RSP: 002b:00007fd7e31b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  849.478378][T21297] RAX: ffffffffffffffda RBX: 00007fd7e4d65fa0 RCX: 00007fd7e4b4d169
[  849.478393][T21297] RDX: 000000000000000c RSI: 0000400000000140 RDI: 0000000000000003
[  849.478408][T21297] RBP: 00007fd7e31b7090 R08: 0000000000000000 R09: 0000000000000000
[  849.478423][T21297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.478461][T21297] R13: 0000000000000000 R14: 00007fd7e4d65fa0 R15: 00007ffdd6537ca8
[  849.478485][T21297]  </TASK>
[  849.657905][T21289] lo speed is unknown, defaulting to 1000
[  849.856132][T21312] loop5: detected capacity change from 0 to 2048
[  849.886822][ T5449] usb usb10-port1: unable to enumerate USB device
[  849.911145][T21316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.923297][T21312] EXT4-fs: Ignoring removed mblk_io_submit option
[  849.974894][T21317] lo speed is unknown, defaulting to 1000
[  849.982202][T21316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.074720][T21316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.084675][T21312] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  850.122013][T16119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  850.148857][T21318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  850.158644][T21317] lo speed is unknown, defaulting to 1000
[  850.163157][T21318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  850.175748][T21317] lo speed is unknown, defaulting to 1000
[  850.210484][T21316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.291999][T21312] loop5: detected capacity change from 0 to 8192
[  850.338936][T21316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.347418][T21318] rdma_rxe: rxe_newlink: failed to add lo
[  850.361560][T21316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.375622][T21316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.390319][T21316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.394098][T21312]  loop5: p1 < > p2 < p5 > p3 p4
[  850.405579][T21312] loop5: p3 start 83890176 is beyond EOD, truncated
[  850.412259][T21312] loop5: p4 size 16776960 extends beyond EOD, truncated
[  850.449831][T21312] loop5: p5 size 16776960 extends beyond EOD, truncated
[  850.599929][T21337] loop4: detected capacity change from 0 to 2048
[  850.633239][T21344] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12610'.
[  850.642733][T21344] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[  850.646059][T21337] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  850.650994][T21337] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  850.668280][T21344] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  850.676191][T21337] EXT4-fs (loop4): This should not happen!! Data will be lost
[  850.676191][T21337] 
[  850.699152][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12610'.
[  850.701548][T21337] EXT4-fs (loop4): Total free blocks count 0
[  850.711252][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12610'.
[  850.716601][T21337] EXT4-fs (loop4): Free/Dirty block details
[  850.731640][T21337] EXT4-fs (loop4): free_blocks=2415919104
[  850.737411][T21337] EXT4-fs (loop4): dirty_blocks=32
[  850.742577][T21337] EXT4-fs (loop4): Block reservation details
[  850.748599][T21337] EXT4-fs (loop4): i_reserved_data_blocks=2
[  850.756167][T21349] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  850.769339][T21349] EXT4-fs (loop4): This should not happen!! Data will be lost
[  850.769339][T21349] 
[  850.809161][T21344] lo speed is unknown, defaulting to 1000
[  850.876024][T21344] lo speed is unknown, defaulting to 1000
[  850.882375][T21344] lo speed is unknown, defaulting to 1000
[  850.963270][T21353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.004051][T21364] loop0: detected capacity change from 0 to 2048
[  851.012479][T21353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.022995][T21364] EXT4-fs: Ignoring removed mblk_io_submit option
[  851.062580][T21364] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  851.074160][T21359] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.118880][T21353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.131511][T21359] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.145509][T21364] loop0: detected capacity change from 0 to 8192
[  851.168695][T21353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.179325][T21364]  loop0: p1 < > p2 < p5 > p3 p4
[  851.186239][T21364] loop0: p3 start 83890176 is beyond EOD, truncated
[  851.192996][T21364] loop0: p4 size 16776960 extends beyond EOD, truncated
[  851.201938][T21359] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.213621][T21364] loop0: p5 size 16776960 extends beyond EOD, truncated
[  851.282792][T21372] netlink: 'syz.1.12619': attribute type 39 has an invalid length.
[  851.292909][T21359] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.345605][T21359] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.361100][T21359] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.375341][T21359] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.388122][T21359] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  851.459584][T21383] netlink: 'syz.5.12624': attribute type 39 has an invalid length.
[  851.694304][T21391] lo speed is unknown, defaulting to 1000
[  851.776724][T21391] lo speed is unknown, defaulting to 1000
[  851.783524][T21391] lo speed is unknown, defaulting to 1000
[  852.061062][T21391] loop1: detected capacity change from 0 to 128
[  852.118335][T21391] EXT4-fs mount: 2 callbacks suppressed
[  852.118364][T21391] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  852.139105][T21395] FAULT_INJECTION: forcing a failure.
[  852.139105][T21395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.152360][T21395] CPU: 1 UID: 0 PID: 21395 Comm: syz.4.12627 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  852.152472][T21395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  852.152484][T21395] Call Trace:
[  852.152491][T21395]  <TASK>
[  852.152499][T21395]  dump_stack_lvl+0xf2/0x150
[  852.152595][T21395]  dump_stack+0x15/0x1a
[  852.152617][T21395]  should_fail_ex+0x24a/0x260
[  852.152649][T21395]  should_fail+0xb/0x10
[  852.152722][T21395]  should_fail_usercopy+0x1a/0x20
[  852.152798][T21395]  _copy_from_user+0x1c/0xa0
[  852.152846][T21395]  copy_msghdr_from_user+0x54/0x2a0
[  852.152940][T21395]  ? __fget_files+0x17c/0x1c0
[  852.153036][T21395]  __sys_sendmsg+0x13e/0x230
[  852.153073][T21395]  __x64_sys_sendmsg+0x46/0x50
[  852.153098][T21395]  x64_sys_call+0x2734/0x2dc0
[  852.153136][T21395]  do_syscall_64+0xc9/0x1c0
[  852.153206][T21395]  ? clear_bhb_loop+0x55/0xb0
[  852.153270][T21395]  ? clear_bhb_loop+0x55/0xb0
[  852.153302][T21395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.153334][T21395] RIP: 0033:0x7f779184d169
[  852.153367][T21395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  852.153388][T21395] RSP: 002b:00007f778feb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.153422][T21395] RAX: ffffffffffffffda RBX: 00007f7791a65fa0 RCX: 00007f779184d169
[  852.153436][T21395] RDX: 0000000000044084 RSI: 0000400000004bc0 RDI: 0000000000000003
[  852.153450][T21395] RBP: 00007f778feb1090 R08: 0000000000000000 R09: 0000000000000000
[  852.153532][T21395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.153547][T21395] R13: 0000000000000000 R14: 00007f7791a65fa0 R15: 00007ffd17f4a0f8
[  852.153567][T21395]  </TASK>
[  852.327853][T21391] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.368743][T21397] loop4: detected capacity change from 0 to 512
[  852.379350][T21386] vhci_hcd vhci_hcd.0: port 0 already used
[  852.387993][T21397] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  852.398356][T21397] EXT4-fs (loop4): orphan cleanup on readonly fs
[  852.404913][T21397] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  852.428365][T21397] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  852.441995][T21397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12628: bg 0: block 40: padding at end of block bitmap is not set
[  852.463608][T21397] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  852.474207][T21397] EXT4-fs (loop4): 1 truncate cleaned up
[  852.481766][T21397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  852.547124][T21397] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.12628: corrupted xattr block 31: invalid header
[  852.567270][T21397] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=16
[  852.602928][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.660613][T21406] netlink: 'syz.4.12630': attribute type 39 has an invalid length.
[  852.684127][T21410] 9pnet: Could not find request transport: êAB;
[  852.695421][T21410] loop0: detected capacity change from 0 to 512
[  852.705842][T21410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.12632: Parent and EA inode have the same ino 15
[  852.721175][T21410] EXT4-fs (loop0): Remounting filesystem read-only
[  852.727747][T21410] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  852.740696][T21410] EXT4-fs (loop0): 1 orphan inode deleted
[  852.746965][T21410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  852.763035][T21410] SELinux: (dev loop0, type ext4) getxattr errno 5
[  852.770961][T21410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.780579][   T29] kauditd_printk_skb: 236 callbacks suppressed
[  852.780593][   T29] audit: type=1326 audit(2000000001.290:38404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.785393][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12633'.
[  852.786829][   T29] audit: type=1326 audit(2000000001.290:38405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.786862][   T29] audit: type=1326 audit(2000000001.290:38406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.868797][   T29] audit: type=1326 audit(2000000001.290:38407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.893358][   T29] audit: type=1326 audit(2000000001.290:38408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.917937][   T29] audit: type=1326 audit(2000000001.290:38409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.941807][   T29] audit: type=1326 audit(2000000001.290:38410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.966216][   T29] audit: type=1326 audit(2000000001.290:38411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  852.990613][   T29] audit: type=1326 audit(2000000001.300:38412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  853.000881][T21421] loop5: detected capacity change from 0 to 1024
[  853.014972][   T29] audit: type=1326 audit(2000000001.300:38413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.5.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  853.023710][T21421] EXT4-fs: Ignoring removed orlov option
[  853.078219][T21421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.104261][T15756] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  853.169333][T21430] loop0: detected capacity change from 0 to 512
[  853.179597][T21428] loop1: detected capacity change from 0 to 256
[  853.200208][T21430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.207030][T21428] FAT-fs (loop1): codepage cp866 not found
[  853.214368][T21430] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  853.232255][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.258370][T21435] loop5: detected capacity change from 0 to 512
[  853.284796][T21435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.303295][T21435] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  853.318538][T21435] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12639: corrupted inode contents
[  853.330931][T21435] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12639: mark_inode_dirty error
[  853.344837][T21435] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12639: corrupted inode contents
[  853.360065][T21435] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12639: mark_inode_dirty error
[  853.400568][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.425293][T21353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.442426][T21353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.453974][T21353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.467649][T21353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.535752][T16987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.588261][T21450] lo speed is unknown, defaulting to 1000
[  853.607707][T21444] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.649153][T21450] lo speed is unknown, defaulting to 1000
[  853.657456][T21450] lo speed is unknown, defaulting to 1000
[  853.664370][T21444] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.699264][T21457] netlink: 'syz.0.12646': attribute type 39 has an invalid length.
[  853.714486][T21455] loop5: detected capacity change from 0 to 1024
[  853.724911][T21444] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.749132][T21455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  853.765169][T21444] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.784649][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12645'.
[  853.793806][T21462] 
: renamed from bond0 (while UP)
[  853.851884][T21444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.911878][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.912864][T21444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.939197][T21444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.960176][T21444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.980830][T21468] loop5: detected capacity change from 0 to 512
[  854.020326][T21468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.040170][T21468] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  854.056384][T21464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12647'.
[  854.091820][T21468] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12649: corrupted inode contents
[  854.104061][T21468] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12649: mark_inode_dirty error
[  854.116222][T21464] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  854.126818][T21468] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12649: corrupted inode contents
[  854.126959][T21468] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12649: mark_inode_dirty error
[  854.157549][T21464] bond0: (slave ip6gre1): Error -95 calling set_mac_address
[  854.673790][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12651'.
[  854.870658][T21482] pim6reg1: entered promiscuous mode
[  854.876124][T21482] pim6reg1: entered allmulticast mode
[  854.883776][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.948584][T21487] team0: No ports can be present during mode change
[  854.984067][T21493] loop5: detected capacity change from 0 to 512
[  854.998294][T21493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  855.011637][T21493] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  855.024171][T21493] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12657: corrupted inode contents
[  855.037236][T21493] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12657: mark_inode_dirty error
[  855.048830][T21493] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12657: corrupted inode contents
[  855.061443][T21493] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12657: mark_inode_dirty error
[  855.089875][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.114323][T21497] loop5: detected capacity change from 0 to 2048
[  855.128273][T21497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.144396][T21497] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  855.160008][T21497] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  855.172540][T21497] EXT4-fs (loop5): This should not happen!! Data will be lost
[  855.172540][T21497] 
[  855.182785][T21497] EXT4-fs (loop5): Total free blocks count 0
[  855.188792][T21497] EXT4-fs (loop5): Free/Dirty block details
[  855.194697][T21497] EXT4-fs (loop5): free_blocks=2415919104
[  855.201041][T21497] EXT4-fs (loop5): dirty_blocks=32
[  855.206158][T21497] EXT4-fs (loop5): Block reservation details
[  855.212162][T21497] EXT4-fs (loop5): i_reserved_data_blocks=2
[  855.219595][T21500] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  855.447769][T21505] loop5: detected capacity change from 0 to 512
[  855.454450][T21505] EXT4-fs: Ignoring removed i_version option
[  855.460701][T21505] EXT4-fs: Ignoring removed mblk_io_submit option
[  855.467704][T21505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  855.489559][T21505] EXT4-fs (loop5): 1 truncate cleaned up
[  855.495660][T21505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.691030][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.837483][T21519] lo speed is unknown, defaulting to 1000
[  855.892389][T21519] lo speed is unknown, defaulting to 1000
[  855.899538][T21519] lo speed is unknown, defaulting to 1000
[  856.077183][T21519] loop2: detected capacity change from 0 to 128
[  856.129626][T21519] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  856.143289][T21519] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  856.181398][T21516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  856.187964][T21516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  856.195853][T21516] vhci_hcd vhci_hcd.0: Device attached
[  856.259439][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12664'.
[  856.295536][T21531] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.348099][T21531] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.362399][T21532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.370966][T21532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.381960][T21532] rdma_rxe: rxe_newlink: failed to add lo
[  856.400455][T21531] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.438088][T21531] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.466466][ T3494] usb 6-1: SetAddress Request (32) to port 0
[  856.467016][T21523] vhci_hcd: connection closed
[  856.473548][ T1931] vhci_hcd: stop threads
[  856.482637][ T1931] vhci_hcd: release socket
[  856.487165][ T1931] vhci_hcd: disconnect device
[  856.494239][ T3494] usb 6-1: new SuperSpeed USB device number 32 using vhci_hcd
[  856.513064][T21531] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.521402][ T3494] usb 6-1: enqueue for inactive port 0
[  856.531453][ T3494] usb 6-1: enqueue for inactive port 0
[  856.539098][T21531] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.539853][ T3494] usb 6-1: enqueue for inactive port 0
[  856.559063][T21531] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.575503][T21531] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.666455][ T3494] usb 6-1: new SuperSpeed USB device number 32 using vhci_hcd
[  856.686502][ T3494] usb 6-1: enqueue for inactive port 0
[  856.692056][ T3494] usb 6-1: enqueue for inactive port 0
[  856.697590][ T3494] usb 6-1: enqueue for inactive port 0
[  856.756041][T21534] loop5: detected capacity change from 0 to 1024
[  856.767774][T21534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.780701][T21534] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  856.793203][T21534] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  856.802275][T21534] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  856.817910][T21534] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  856.830310][T21534] EXT4-fs (loop5): This should not happen!! Data will be lost
[  856.830310][T21534] 
[  856.840511][T21534] EXT4-fs (loop5): Total free blocks count 0
[  856.846603][T21534] EXT4-fs (loop5): Free/Dirty block details
[  856.852516][T21534] EXT4-fs (loop5): free_blocks=4293918720
[  856.858873][T21534] EXT4-fs (loop5): dirty_blocks=80
[  856.863999][T21534] EXT4-fs (loop5): Block reservation details
[  856.870021][T21534] EXT4-fs (loop5): i_reserved_data_blocks=5
[  856.888759][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.938366][T21540] loop4: detected capacity change from 0 to 2048
[  856.948219][T21540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.963499][T21540] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  856.979851][T21540] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  856.992257][T21540] EXT4-fs (loop4): This should not happen!! Data will be lost
[  856.992257][T21540] 
[  857.002693][T21540] EXT4-fs (loop4): Total free blocks count 0
[  857.008757][T21540] EXT4-fs (loop4): Free/Dirty block details
[  857.014749][T21540] EXT4-fs (loop4): free_blocks=2415919104
[  857.021173][T21540] EXT4-fs (loop4): dirty_blocks=32
[  857.026292][T21540] EXT4-fs (loop4): Block reservation details
[  857.032310][T21540] EXT4-fs (loop4): i_reserved_data_blocks=2
[  857.052672][T13851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  857.067201][T21544] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  857.167504][T21546] loop2: detected capacity change from 0 to 4096
[  857.177366][T21548] loop4: detected capacity change from 0 to 1024
[  857.184537][T21548] EXT4-fs: Ignoring removed orlov option
[  857.254537][T21546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.278009][T21548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.278192][T21546] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002
[  857.316856][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.321464][T21559] lo speed is unknown, defaulting to 1000
[  857.369130][T21559] lo speed is unknown, defaulting to 1000
[  857.375144][T21561] loop2: detected capacity change from 0 to 512
[  857.375275][T21559] lo speed is unknown, defaulting to 1000
[  857.428973][T21561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.443438][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.455111][T21561] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.534965][T21570] netlink: 'syz.5.12680': attribute type 39 has an invalid length.
[  857.646270][T21576] loop5: detected capacity change from 0 to 512
[  857.683712][T21576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.701950][T21576] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.731614][T21576] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12682: corrupted inode contents
[  857.752661][ T3494] usb usb6-port1: attempt power cycle
[  857.761897][T21576] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12682: mark_inode_dirty error
[  857.801158][   T29] kauditd_printk_skb: 388 callbacks suppressed
[  857.801173][   T29] audit: type=1326 audit(2000000006.320:38802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  857.838427][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.850383][T21576] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12682: corrupted inode contents
[  857.864276][T21581] lo speed is unknown, defaulting to 1000
[  857.876711][   T29] audit: type=1326 audit(2000000006.360:38803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  857.890479][T21576] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12682: mark_inode_dirty error
[  857.901259][   T29] audit: type=1326 audit(2000000006.360:38804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  857.936247][   T29] audit: type=1326 audit(2000000006.360:38805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  857.978902][T21581] lo speed is unknown, defaulting to 1000
[  857.985269][T21581] lo speed is unknown, defaulting to 1000
[  858.166712][T21582] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  858.173321][T21582] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  858.181127][T21582] vhci_hcd vhci_hcd.0: Device attached
[  858.224624][T21587] loop2: detected capacity change from 0 to 2048
[  858.246462][   T29] audit: type=1326 audit(2000000006.400:38806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  858.270713][   T29] audit: type=1326 audit(2000000006.400:38807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  858.295116][   T29] audit: type=1326 audit(2000000006.400:38808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  858.300541][T21587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  858.319579][   T29] audit: type=1326 audit(2000000006.400:38809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41ec8abc1f code=0x7ffc0000
[  858.355332][   T29] audit: type=1326 audit(2000000006.400:38810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  858.379700][   T29] audit: type=1326 audit(2000000006.400:38811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.5.12682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec8ad169 code=0x7ffc0000
[  858.413017][T21583] vhci_hcd: connection closed
[  858.437346][T11359] vhci_hcd: stop threads
[  858.446391][T11359] vhci_hcd: release socket
[  858.450942][T11359] vhci_hcd: disconnect device
[  858.466417][ T5449] usb 2-1: enqueue for inactive port 0
[  858.512976][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.549023][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.564461][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12686'.
[  858.602770][T21595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21595 comm=syz.2.12685
[  858.677789][ T5449] usb 2-1: enqueue for inactive port 0
[  858.727867][T21601] loop2: detected capacity change from 0 to 1024
[  858.742393][T21601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  858.754908][T21601] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  858.775460][T21601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  858.809669][T21601] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  858.822120][T21601] EXT4-fs (loop2): This should not happen!! Data will be lost
[  858.822120][T21601] 
[  858.831826][T21601] EXT4-fs (loop2): Total free blocks count 0
[  858.837849][T21601] EXT4-fs (loop2): Free/Dirty block details
[  858.843769][T21601] EXT4-fs (loop2): free_blocks=4293918720
[  858.849620][T21601] EXT4-fs (loop2): dirty_blocks=80
[  858.854749][T21601] EXT4-fs (loop2): Block reservation details
[  858.860866][T21601] EXT4-fs (loop2): i_reserved_data_blocks=5
[  858.964926][T21609] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12684'.
[  859.038388][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.214380][T21617] program syz.0.12694 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  859.315799][T21621] loop2: detected capacity change from 0 to 512
[  859.370419][T21625] FAULT_INJECTION: forcing a failure.
[  859.370419][T21625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  859.384365][T21625] CPU: 1 UID: 0 PID: 21625 Comm: syz.4.12697 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  859.384472][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  859.384484][T21625] Call Trace:
[  859.384491][T21625]  <TASK>
[  859.384500][T21625]  dump_stack_lvl+0xf2/0x150
[  859.384533][T21625]  dump_stack+0x15/0x1a
[  859.384560][T21625]  should_fail_ex+0x24a/0x260
[  859.384594][T21625]  should_fail+0xb/0x10
[  859.384673][T21625]  should_fail_usercopy+0x1a/0x20
[  859.384707][T21625]  _copy_from_user+0x1c/0xa0
[  859.384727][T21625]  copy_msghdr_from_user+0x54/0x2a0
[  859.384767][T21625]  ? __fget_files+0x17c/0x1c0
[  859.384847][T21625]  __sys_sendmmsg+0x1e8/0x4b0
[  859.384972][T21625]  __x64_sys_sendmmsg+0x57/0x70
[  859.385002][T21625]  x64_sys_call+0x29aa/0x2dc0
[  859.385036][T21625]  do_syscall_64+0xc9/0x1c0
[  859.385072][T21625]  ? clear_bhb_loop+0x55/0xb0
[  859.385105][T21625]  ? clear_bhb_loop+0x55/0xb0
[  859.385190][T21625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.385224][T21625] RIP: 0033:0x7f779184d169
[  859.385242][T21625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  859.385332][T21625] RSP: 002b:00007f778feb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  859.385354][T21625] RAX: ffffffffffffffda RBX: 00007f7791a65fa0 RCX: 00007f779184d169
[  859.385369][T21625] RDX: 0400000000000172 RSI: 0000400000003cc0 RDI: 0000000000000003
[  859.385383][T21625] RBP: 00007f778feb1090 R08: 0000000000000000 R09: 0000000000000000
[  859.385397][T21625] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[  859.385409][T21625] R13: 0000000000000000 R14: 00007f7791a65fa0 R15: 00007ffd17f4a0f8
[  859.385427][T21625]  </TASK>
[  859.578460][T21629] netlink: 'syz.0.12698': attribute type 39 has an invalid length.
[  859.578516][T21621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  859.578584][T21621] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  859.633231][T21621] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.12695: corrupted inode contents
[  859.638707][T21633] loop4: detected capacity change from 0 to 512
[  859.652868][T21621] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.12695: mark_inode_dirty error
[  859.665834][T21621] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.12695: corrupted inode contents
[  859.697721][T21632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12699'.
[  859.731666][T21636] loop5: detected capacity change from 0 to 2048
[  859.731780][T21633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  859.739131][T21636] EXT4-fs: Ignoring removed mblk_io_submit option
[  859.758045][T21621] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.12695: mark_inode_dirty error
[  859.779611][T21633] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  859.804039][T21636] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  859.813143][ T3494] usb usb6-port1: unable to enumerate USB device
[  860.014170][T21636] loop5: detected capacity change from 0 to 8192
[  860.038243][ T5449] usb usb2-port1: attempt power cycle
[  860.124526][T21636]  loop5: p1 < > p2 < p5 > p3 p4
[  860.152247][T21636] loop5: p3 start 83890176 is beyond EOD, truncated
[  860.157497][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.158978][T21636] loop5: p4 size 16776960 extends beyond EOD, truncated
[  860.180876][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12706'.
[  860.191871][T21636] loop5: p5 size 16776960 extends beyond EOD, truncated
[  860.239567][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.294212][T21664] loop1: detected capacity change from 0 to 1024
[  860.301879][T21664] EXT4-fs: Ignoring removed orlov option
[  860.302723][T21667] netlink: 'syz.5.12710': attribute type 39 has an invalid length.
[  860.333259][T21664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  860.351736][T21671] netlink: 'syz.0.12715': attribute type 1 has an invalid length.
[  860.438172][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12717'.
[  860.450288][T21676] usb usb1: usbfs: process 21676 (syz.5.12717) did not claim interface 0 before use
[  860.466544][T15756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.472367][T21676] loop5: detected capacity change from 0 to 2048
[  860.500728][T21681] loop4: detected capacity change from 0 to 2048
[  860.509861][T21676] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002]
[  860.518053][T21676] System zones: 0-7
[  860.522717][T21676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  860.539574][T21685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12711'.
[  860.554363][T21676] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[p³@: bg 0: block 234: padding at end of block bitmap is not set
[  860.573962][T21676] EXT4-fs (loop5): Remounting filesystem read-only
[  860.608588][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12720'.
[  860.664579][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.803275][T21681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  860.895497][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.944700][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12725'.
[  860.970239][T21697] usb usb1: usbfs: process 21697 (syz.1.12725) did not claim interface 0 before use
[  861.013355][T21697] loop1: detected capacity change from 0 to 2048
[  861.055585][T21697] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002]
[  861.067995][T21702] loop5: detected capacity change from 0 to 512
[  861.074775][T21697] System zones: 0-7
[  861.082589][T21697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  861.117959][T21697] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[p³@: bg 0: block 234: padding at end of block bitmap is not set
[  861.137640][T21702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  861.152347][T21697] EXT4-fs (loop1): Remounting filesystem read-only
[  861.159073][T21702] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  861.182150][T15756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.202558][T21702] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12721: corrupted inode contents
[  861.221701][T21711] netlink: 'syz.1.12727': attribute type 39 has an invalid length.
[  861.235551][T21702] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.12721: mark_inode_dirty error
[  861.280865][T21702] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.12721: corrupted inode contents
[  861.321861][T21702] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12721: mark_inode_dirty error
[  861.335639][T21722] FAULT_INJECTION: forcing a failure.
[  861.335639][T21722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  861.349551][T21722] CPU: 1 UID: 0 PID: 21722 Comm: syz.2.12730 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  861.349579][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  861.349623][T21722] Call Trace:
[  861.349632][T21722]  <TASK>
[  861.349641][T21722]  dump_stack_lvl+0xf2/0x150
[  861.349674][T21722]  dump_stack+0x15/0x1a
[  861.349732][T21722]  should_fail_ex+0x24a/0x260
[  861.349805][T21722]  should_fail+0xb/0x10
[  861.349832][T21722]  should_fail_usercopy+0x1a/0x20
[  861.349863][T21722]  _copy_to_user+0x20/0xa0
[  861.349882][T21722]  simple_read_from_buffer+0xa0/0x110
[  861.349977][T21722]  proc_fail_nth_read+0xf9/0x140
[  861.350016][T21722]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  861.350052][T21722]  vfs_read+0x19b/0x6f0
[  861.350144][T21722]  ? __rcu_read_unlock+0x4e/0x70
[  861.350172][T21722]  ? __fget_files+0x17c/0x1c0
[  861.350215][T21722]  ksys_read+0xe8/0x1b0
[  861.350311][T21722]  __x64_sys_read+0x42/0x50
[  861.350341][T21722]  x64_sys_call+0x2874/0x2dc0
[  861.350374][T21722]  do_syscall_64+0xc9/0x1c0
[  861.350408][T21722]  ? clear_bhb_loop+0x55/0xb0
[  861.350523][T21722]  ? clear_bhb_loop+0x55/0xb0
[  861.350550][T21722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.350578][T21722] RIP: 0033:0x7f6f1082bb7c
[  861.350597][T21722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  861.350619][T21722] RSP: 002b:00007f6f0ee91030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  861.350641][T21722] RAX: ffffffffffffffda RBX: 00007f6f10a45fa0 RCX: 00007f6f1082bb7c
[  861.350780][T21722] RDX: 000000000000000f RSI: 00007f6f0ee910a0 RDI: 0000000000000004
[  861.350791][T21722] RBP: 00007f6f0ee91090 R08: 0000000000000000 R09: 0000000000000000
[  861.350803][T21722] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000001
[  861.350814][T21722] R13: 0000000000000000 R14: 00007f6f10a45fa0 R15: 00007ffc3aaa2d38
[  861.350835][T21722]  </TASK>
[  861.357139][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12732'.
[  861.680946][T21730] loop2: detected capacity change from 0 to 2048
[  861.728197][T21731] loop4: detected capacity change from 0 to 2048
[  861.737376][T21730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  861.772330][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12737'.
[  861.782917][T21731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  861.819439][T21736] usb usb1: usbfs: process 21736 (syz.0.12737) did not claim interface 0 before use
[  861.847190][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.863312][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.934368][T21742] loop2: detected capacity change from 0 to 512
[  861.967161][T21742] EXT4-fs: Ignoring removed oldalloc option
[  861.976204][T21742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  862.014520][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.025922][T21742] EXT4-fs (loop2): 1 truncate cleaned up
[  862.040505][T21760] netlink: 'syz.4.12746': attribute type 39 has an invalid length.
[  862.051007][T21758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21758 comm=syz.0.12744
[  862.064099][T21742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.106597][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12745'.
[  862.179765][T21769] loop4: detected capacity change from 0 to 2048
[  862.196944][ T5449] usb usb2-port1: unable to enumerate USB device
[  862.197279][T21742] loop2: detected capacity change from 512 to 64
[  862.221724][T21769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  862.262550][T21780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.298415][T21781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12741'.
[  862.312607][T16119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.348132][T16112] tipc: Resetting bearer <eth:syzkaller0>
[  862.366166][T17678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.420143][T21786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  862.432115][T21786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  862.469490][T16112] tipc: Disabling bearer <eth:syzkaller0>
[  862.480742][T21780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.507800][T21784] rdma_rxe: rxe_newlink: failed to add lo
[  862.521074][T21788] loop5: detected capacity change from 0 to 512
[  862.553368][T21788] EXT4-fs (loop5): 1 orphan inode deleted
[  862.568405][ T3413] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1
[  862.582134][T21780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.597038][T21788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.618569][T21788] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  862.646064][T21794] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[  862.665388][T21794] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  862.700810][T11246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.704430][T21794] lo speed is unknown, defaulting to 1000
[  862.725894][T21796] netlink: 'syz.5.12757': attribute type 39 has an invalid length.
[  862.762456][T21780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.800453][ T3413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.845506][T21794] lo speed is unknown, defaulting to 1000
[  862.856691][T21780] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  862.865626][T21794] lo speed is unknown, defaulting to 1000
[  862.899614][T21780] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  862.919522][ T3413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.971531][T21780] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  862.994476][T21780] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  863.008528][ T3413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.092532][ T3413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.149218][   T29] kauditd_printk_skb: 389 callbacks suppressed
[  863.149233][   T29] audit: type=1107 audit(2000000002.450:39200): pid=21815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='À'
[  863.223907][ T3413] bridge_slave_1: left allmulticast mode
[  863.229756][ T3413] bridge_slave_1: left promiscuous mode
[  863.235551][ T3413] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.245098][ T3413] bridge_slave_0: left allmulticast mode
[  863.250851][ T3413] bridge_slave_0: left promiscuous mode
[  863.256567][ T3413] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.305469][ T3413] 1ªX¹¦D (unregistering): left promiscuous mode
[  863.322286][T21821] loop1: detected capacity change from 0 to 512
[  863.330640][T21821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  863.339218][T21821] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  863.351729][ T3413] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.362841][ T3413] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.371846][ T3413] 
 (unregistering): Released all slaves
[  863.380912][ T3413] bond0 (unregistering): Released all slaves
[  863.388996][T21817] lo speed is unknown, defaulting to 1000
[  863.426267][T21804] lo speed is unknown, defaulting to 1000
[  863.433476][T21817] lo speed is unknown, defaulting to 1000
[  863.442900][ T3413] tipc: Left network mode
[  863.443274][T21817] lo speed is unknown, defaulting to 1000
[  863.526490][T21804] lo speed is unknown, defaulting to 1000
[  863.563475][T21804] lo speed is unknown, defaulting to 1000
[  863.642486][   T29] audit: type=1326 audit(2000000002.930:39201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  863.666291][   T29] audit: type=1326 audit(2000000002.930:39202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  863.690422][   T29] audit: type=1326 audit(2000000002.930:39203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  863.699902][T21838] FAULT_INJECTION: forcing a failure.
[  863.699902][T21838] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  863.714412][   T29] audit: type=1326 audit(2000000002.930:39204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  863.727941][T21838] CPU: 1 UID: 0 PID: 21838 Comm: syz.4.12770 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  863.727976][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  863.727992][T21838] Call Trace:
[  863.728002][T21838]  <TASK>
[  863.728012][T21838]  dump_stack_lvl+0xf2/0x150
[  863.728049][T21838]  dump_stack+0x15/0x1a
[  863.728147][T21838]  should_fail_ex+0x24a/0x260
[  863.728250][T21838]  should_fail+0xb/0x10
[  863.728325][T21838]  should_fail_usercopy+0x1a/0x20
[  863.728446][T21838]  _copy_from_iter+0xd5/0xd00
[  863.728486][T21838]  ? kmalloc_reserve+0x16e/0x190
[  863.728518][T21838]  ? __build_skb_around+0x196/0x1f0
[  863.728544][T21838]  ? __alloc_skb+0x21f/0x310
[  863.728568][T21838]  ? __virt_addr_valid+0x1ed/0x250
[  863.728600][T21838]  ? __check_object_size+0x364/0x520
[  863.728659][T21838]  netlink_sendmsg+0x460/0x6e0
[  863.728705][T21838]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.728747][T21838]  __sock_sendmsg+0x140/0x180
[  863.728787][T21838]  ____sys_sendmsg+0x326/0x4b0
[  863.728841][T21838]  __sys_sendmsg+0x19d/0x230
[  863.728888][T21838]  __x64_sys_sendmsg+0x46/0x50
[  863.728921][T21838]  x64_sys_call+0x2734/0x2dc0
[  863.729028][T21838]  do_syscall_64+0xc9/0x1c0
[  863.729129][T21838]  ? clear_bhb_loop+0x55/0xb0
[  863.729165][T21838]  ? clear_bhb_loop+0x55/0xb0
[  863.729199][T21838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.729233][T21838] RIP: 0033:0x7f779184d169
[  863.729253][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.729296][T21838] RSP: 002b:00007f778feb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.729326][T21838] RAX: ffffffffffffffda RBX: 00007f7791a65fa0 RCX: 00007f779184d169
[  863.729342][T21838] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003
[  863.729357][T21838] RBP: 00007f778feb1090 R08: 0000000000000000 R09: 0000000000000000
[  863.729373][T21838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.729388][T21838] R13: 0000000000000000 R14: 00007f7791a65fa0 R15: 00007ffd17f4a0f8
[  863.729410][T21838]  </TASK>
[  863.795545][T21836] loop1: detected capacity change from 0 to 512
[  863.796746][   T29] audit: type=1326 audit(2000000002.930:39205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  863.968558][T21836] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  863.968838][   T29] audit: type=1326 audit(2000000002.930:39206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  864.004772][T21858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.026537][   T29] audit: type=1326 audit(2000000002.930:39207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  864.026582][   T29] audit: type=1326 audit(2000000002.930:39208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  864.026616][   T29] audit: type=1326 audit(2000000002.930:39209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.0.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e4b4d169 code=0x7ffc0000
[  864.028758][T21836] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.12769: corrupted inode contents
[  864.035777][T21858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.069738][T21836] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.12769: mark_inode_dirty error
[  864.106613][ T3413] batadv_slave_1: left promiscuous mode
[  864.131684][T21836] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.12769: corrupted inode contents
[  864.158065][ T3413] hsr_slave_0: left promiscuous mode
[  864.176616][T21836] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.12769: mark_inode_dirty error
[  864.202722][ T3413] hsr_slave_1: left promiscuous mode
[  864.208760][ T3413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  864.216295][ T3413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  864.257529][ T3413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  864.265036][ T3413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  864.273675][T21869] loop4: detected capacity change from 0 to 8192
[  864.285608][ T3413] veth1_macvtap: left promiscuous mode
[  864.291508][ T3413] veth0_macvtap: left promiscuous mode
[  864.297485][ T3413] veth1_vlan: left promiscuous mode
[  864.302815][ T3413] veth0_vlan: left promiscuous mode
[  864.438345][T21906] netlink: 'syz.0.12776': attribute type 39 has an invalid length.
[  864.448407][ T3413] team0 (unregistering): Port device team_slave_1 removed
[  864.460003][ T3413] team0 (unregistering): Port device team_slave_0 removed
[  864.512566][T17308] tipc: Resetting bearer <eth:syzkaller0>
[  864.534245][T17308] tipc: Disabling bearer <eth:syzkaller0>
[  864.575496][T21928] loop1: detected capacity change from 0 to 512
[  864.610856][T21928] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  864.642909][T21804] chnl_net:caif_netlink_parms(): no params data found
[  864.785209][T21804] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.792709][T21804] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.812827][T21804] bridge_slave_0: entered allmulticast mode
[  864.839857][T21804] bridge_slave_0: entered promiscuous mode
[  864.878867][T21804] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.886083][T21804] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.920613][T21804] bridge_slave_1: entered allmulticast mode
[  864.929218][T21804] bridge_slave_1: entered promiscuous mode
[  864.972198][T21927] ==================================================================
[  864.980329][T21927] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault
[  864.987377][T21927] 
[  864.989705][T21927] write to 0xffff88812e4b02d8 of 8 bytes by task 21943 on cpu 0:
[  864.997429][T21927]  shmem_fallocate+0x22e/0x860
[  865.002214][T21927]  vfs_fallocate+0x368/0x3b0
[  865.006823][T21927]  do_madvise+0x14da/0x2ad0
[  865.011331][T21927]  __x64_sys_madvise+0x61/0x70
[  865.016102][T21927]  x64_sys_call+0x23ab/0x2dc0
[  865.020793][T21927]  do_syscall_64+0xc9/0x1c0
[  865.025315][T21927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.031227][T21927] 
[  865.033551][T21927] read to 0xffff88812e4b02d8 of 8 bytes by task 21927 on cpu 1:
[  865.041184][T21927]  shmem_fault+0x97/0x250
[  865.045526][T21927]  __do_fault+0xb6/0x200
[  865.049774][T21927]  handle_mm_fault+0xc7d/0x2ac0
[  865.054632][T21927]  __get_user_pages+0xf6a/0x2350
[  865.059579][T21927]  faultin_page_range+0x352/0x5d0
[  865.064613][T21927]  do_madvise+0x42b/0x2ad0
[  865.069039][T21927]  __x64_sys_madvise+0x61/0x70
[  865.073815][T21927]  x64_sys_call+0x23ab/0x2dc0
[  865.078508][T21927]  do_syscall_64+0xc9/0x1c0
[  865.083034][T21927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.088947][T21927] 
[  865.091271][T21927] value changed: 0x0000000000000000 -> 0xffffc90002043ca8
[  865.098464][T21927] 
[  865.100786][T21927] Reported by Kernel Concurrency Sanitizer on:
[  865.106934][T21927] CPU: 1 UID: 0 PID: 21927 Comm: syz.0.12779 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  865.117789][T21927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  865.127852][T21927] ==================================================================
[  865.142862][T21804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.161828][T21804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  865.180700][T21973] loop1: detected capacity change from 0 to 512
[  865.205674][T14460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.307014][T14460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.379236][T14460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.413957][T16513] tipc: Resetting bearer <eth:syzkaller0>
[  865.440449][T16513] tipc: Disabling bearer <eth:syzkaller0>
[  865.458714][T14460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.472027][T17011] tipc: Resetting bearer <eth:syzkaller0>
[  865.489297][T17011] tipc: Disabling bearer <eth:syzkaller0>
[  865.518594][T14460] bridge_slave_1: left allmulticast mode
[  865.524268][T14460] bridge_slave_1: left promiscuous mode
[  865.530123][T14460] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.539189][T14460] bridge_slave_0: left allmulticast mode
[  865.544869][T14460] bridge_slave_0: left promiscuous mode
[  865.550847][T14460] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.679688][T14460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.691526][T14460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.701848][T14460] bond0 (unregistering): Released all slaves
[  865.759369][T14460] tipc: Left network mode
[  865.866075][T14460] hsr_slave_0: left promiscuous mode
[  865.871787][T14460] hsr_slave_1: left promiscuous mode
[  865.878195][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.885612][T14460] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.893359][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.901327][T14460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.911038][T14460] veth1_macvtap: left promiscuous mode
[  865.916638][T14460] veth0_macvtap: left promiscuous mode
[  865.922195][T14460] veth1_vlan: left promiscuous mode
[  865.927470][T14460] veth0_vlan: left promiscuous mode
[  865.988192][T14460] team0 (unregistering): Port device team_slave_1 removed
[  865.998227][T14460] team0 (unregistering): Port device team_slave_0 removed
[  866.027893][T14456] smc: removing ib device s
z1
[  866.033166][ T9445] lo speed is unknown, defaulting to 1000
[  866.288407][T14460] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.348141][T14460] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.407765][T14460] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.458007][T14460] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.529595][T14460] bridge_slave_1: left allmulticast mode
[  866.535285][T14460] bridge_slave_1: left promiscuous mode
[  866.541043][T14460] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.548673][T14460] bridge_slave_0: left allmulticast mode
[  866.554398][T14460] bridge_slave_0: left promiscuous mode
[  866.560064][T14460] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.718658][T14460] bond0 (unregistering): Released all slaves
[  866.727398][T14460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.737452][T14460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.746683][T14460] bond0 (unregistering): Released all slaves
[  866.768084][T14460] tipc: Left network mode
[  866.807283][T14460] veth1_vlan: left promiscuous mode
[  866.813136][T14460] veth0_vlan: left promiscuous mode
[  867.318928][T14460] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.378417][T14460] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.438520][T14460] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.487625][T14460] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.559784][T14460] bridge_slave_1: left allmulticast mode
[  867.565450][T14460] bridge_slave_1: left promiscuous mode
[  867.571138][T14460] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.578997][T14460] bridge_slave_0: left allmulticast mode
[  867.584781][T14460] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.699203][T14460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.709255][T14460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.718286][T14460] bond0 (unregistering): Released all slaves
[  867.777774][T14460] tipc: Left network mode
[  867.799449][T14460] hsr_slave_0: left promiscuous mode
[  867.805091][T14460] hsr_slave_1: left promiscuous mode
[  867.810795][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  867.818931][T14460] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.826658][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  867.834084][T14460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.844136][T14460] veth1_macvtap: left promiscuous mode
[  867.849732][T14460] veth0_macvtap: left promiscuous mode
[  867.855288][T14460] veth1_vlan: left promiscuous mode
[  867.862781][T14460] veth0_vlan: left promiscuous mode
[  867.923761][T14460] team0 (unregistering): Port device team_slave_1 removed
[  867.933999][T14460] team0 (unregistering): Port device team_slave_0 removed
[  868.188366][T14460] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.238273][T14460] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.278603][T14460] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.338227][T14460] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.399427][T14460] bridge_slave_1: left allmulticast mode
[  868.405092][T14460] bridge_slave_1: left promiscuous mode
[  868.410800][T14460] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.418810][T14460] bridge_slave_0: left allmulticast mode
[  868.424454][T14460] bridge_slave_0: left promiscuous mode
[  868.430157][T14460] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.508791][T14460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  868.518588][T14460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  868.527687][T14460] bond0 (unregistering): Released all slaves
[  868.567820][T14460] tipc: Left network mode
[  868.589890][T14460] hsr_slave_0: left promiscuous mode
[  868.595536][T14460] hsr_slave_1: left promiscuous mode
[  868.601801][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.609310][T14460] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.617850][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  868.625273][T14460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.634523][T14460] veth1_macvtap: left promiscuous mode
[  868.640576][T14460] veth0_macvtap: left promiscuous mode
[  868.646096][T14460] veth1_vlan: left promiscuous mode
[  868.651346][T14460] veth0_vlan: left promiscuous mode
[  868.711635][T14460] team0 (unregistering): Port device team_slave_1 removed
[  868.721595][T14460] team0 (unregistering): Port device team_slave_0 removed