last executing test programs:

5m1.046347878s ago: executing program 2 (id=105):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0xfffd, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001d80)='~', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000008400000008004000c9ac5a93a6690cee29ffd8af5b9cb85db3ab0e8305bf6ab4e0e45605045350c306400d6496033c4eb608b4b09fa79b0bbfa74c49797f9f174467aa1a40098c06d09f4c971ace2865d4c51dffa689291e0b13a9820933387ad660f39097fa1b170dfcd3ccbf4ac37e29bc345df0930fbe11162d9cb2558eac834e7ce493490b5e2ea5c6e7741bb3b58f658ced8c41972c8b9804bb0ad988a6296c65fcd5435800d0338321877cfe92420f096b2747da75c5b7ff0c6eda17d6ebb46f63930c4c2ec96df34d5f735781ce937739fa1aabf98b39d5"], 0x10}, 0x41)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x400000a, 0x811, r1, 0x100000000)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00')
readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', 0x0})
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bdf00000000010150000000b0014006372616d000000000800010062"], 0x28}, 0x1, 0x0, 0x0, 0x2000805}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r8)

5m0.510060377s ago: executing program 2 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r5 = socket(0x2a, 0x80003, 0x6)
ppoll(&(0x7f0000000040)=[{r5, 0x21}, {r1, 0x2002}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_targets\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
close_range(r5, 0xffffffffffffffff, 0x0)

4m59.604111782s ago: executing program 2 (id=134):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = creat(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r1, &(0x7f0000000900)="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", 0x45c)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

4m59.558568692s ago: executing program 2 (id=135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r3, 0x0, 0xffffffffffffffff, 0x0)

4m59.460010704s ago: executing program 2 (id=140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
fchdir(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x89}]}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

4m59.247357138s ago: executing program 2 (id=148):
r0 = socket$unix(0x1, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@private0, 0x20, r2})

4m59.179916218s ago: executing program 32 (id=148):
r0 = socket$unix(0x1, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@private0, 0x20, r2})

3m48.959196652s ago: executing program 0 (id=1826):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x860b, 0x1, 0x8, 0xf6}, &(0x7f0000000300), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x1f, 0x0, 0x0)

3m48.909147353s ago: executing program 0 (id=1827):
creat(&(0x7f0000000040)='./bus\x00', 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")

3m48.850356564s ago: executing program 0 (id=1831):
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18)
r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe})
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

3m48.557208598s ago: executing program 0 (id=1837):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000640)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@sysvgroups}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@i_version}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x9, r1, 0x10000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setrlimit(0x40000000000008, &(0x7f0000000000))
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
sendto$inet6(r3, 0x0, 0x0, 0x4c880, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="91", 0x1}], 0x1}}], 0x2, 0x404c484)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX=r6], 0x1, 0x522, &(0x7f0000000a80)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r10=>0x0)
io_submit(r10, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffe, r9, &(0x7f00000001c0)='m', 0x1}])

3m48.019780837s ago: executing program 0 (id=1847):
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

3m47.759837401s ago: executing program 0 (id=1851):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000380)={0x1})

3m47.755299542s ago: executing program 33 (id=1851):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000380)={0x1})

18.435610862s ago: executing program 4 (id=5967):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xfffffffffffffe3b}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010)

18.205638385s ago: executing program 4 (id=5970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8, @ANYRES16=r0], 0x48)
syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffc, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x601, 0x0, 0x0, {0x26}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x4040)
io_setup(0x30, &(0x7f0000000600))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)

18.003335769s ago: executing program 4 (id=5973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900d9fef3a9da7ef20ced289f7a000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$pptp(0x18, 0x1, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000010000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x14a)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r6, 0x2007ffc)
fallocate(r5, 0x20, 0x4000, 0x8000)

17.861070441s ago: executing program 4 (id=5975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040), 0xf)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000006c0)=""/215, 0xd7, <r1=>0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYBLOB="f8267d34f0a05d01f8fa99525f13cb8ba7fdf70c4947ccde7c421f51e354dbdd19d1e8872e39dfa0f0c50d9a730b7d115abf244eaa5395f6629dbc077dd1de1d7f130530dab8426af84a43bbaff703e98f3122fb3c2d2b6594ca9ef8c2eb11c3e7ca30bb5ac76fff2e05309fc471f382b80804a23f4215c4f61ceb35adb8f47097de0b3e18cbf2cf6e98f543468e4d4c00ae3c2067e9d61d889deb13c4a3a14d1446647097a7f7e82b94dc8ef030b512b96d4af891bec2c6e9dc67aea057e29a880b14867350c3b2749fd455b24881fb136b3d81", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2(&(0x7f0000001cc0), 0x800)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8002, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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")

17.640093475s ago: executing program 4 (id=5980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

17.582631506s ago: executing program 4 (id=5981):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

2.578985988s ago: executing program 34 (id=5981):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

2.289221843s ago: executing program 1 (id=6219):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)

2.212742534s ago: executing program 1 (id=6222):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000224e0000000000", 0x58}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYRES64=0x0], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10)
r8 = dup2(r6, r6)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36})
openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
ioctl$BLKTRACESETUP(r8, 0x1276, 0x0)

2.139453855s ago: executing program 6 (id=6225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000008510025d790a3790f8b51e6736001801fff520646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000067b97d6085122469000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='svcrdma_sq_post_err\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x514, &(0x7f0000000740)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x200000a0)
r3 = socket$kcm(0x10, 0x2, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x4, 0x4})
timer_create(0x3, 0x0, &(0x7f0000000300)=<r4=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r4, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x20083)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x8}, 0x8002, 0x4011, 0x2, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', <r12=>0x0, 0x2f, 0x8, 0x6, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x10, 0x81, 0x1da}})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8c57}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
syz_usbip_server_init(0x4)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xd39d69c038716716)

1.977050808s ago: executing program 1 (id=6228):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYRES64=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[], 0xcdc}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x20000000000001e0, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
readv(r5, &(0x7f00000007c0), 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000840)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@lazytime}, {@errors_continue}, {@quota}, {@init_itable}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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")
setuid(0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x1, 0xfffffff0, 0x9})
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)

1.551068375s ago: executing program 1 (id=6234):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1e, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x0, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000300), 0x6)
recvmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460480000307000000000000000200030006000000090300003800e700000000000e00000000002000010005"], 0x58)
close(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x2, 0x80805, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x8, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)

1.439530226s ago: executing program 3 (id=6235):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000dd06c329000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xe8}}, 0x1000)

1.359962757s ago: executing program 3 (id=6236):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='bridge0\x00')

1.279996509s ago: executing program 5 (id=6237):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000740)=ANY=[], 0x835, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8})

1.21819892s ago: executing program 3 (id=6238):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='bridge0\x00')

1.154961461s ago: executing program 3 (id=6239):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x45b, &(0x7f0000000640)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="cc0080101c02ff0f00000000010000807b030000060000000000000000000000906fc432939c87a870957cc098af90760d7519acf739b4661435c4a4222aec1e77e1ac02d7d3e2fe71797ae82d758fad3ed2cd87b0bd46059831fbfdfee072009a4e3eb4a359bd45767d99fb772164dab475e526ef2640ad50cf3b5448665f966f93365d8687c508f606439d5cab2bc98dc0daf37c2888b222986b43b4c5ed1fb82bc698930cd0280f90b89b873a2e3e39d1b741cae208e95f8d137ffb55c750a3ba82de065d954d"], 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

1.121609661s ago: executing program 6 (id=6240):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='svcrdma_sq_post_err\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x514, &(0x7f0000000740)="$eJzs3c9vG1kdAPDvOHZp2nSTBQ6wEsvCLkorqJ1s2N2Iw7JICE6VgHIvIXGiKE4cxU7bRBWk4g9AQgiQOMGFCxJ/AAhV4sIRIVWCMwgQCEELBw7QQbbHaX7Yidu6cRp/PtJk3nsz4+97jmY8b+ZpJoCh9VpEvBcRj9I0vRIR41l5LptipzU11nv44M58Y0oiTa//I4kkK2t/VpLNL2abnY+Ir3wx4uvJ4bi1re2VuUqlvJHlS/XV9VJta/vq8urcUnmpvDYzM/327Duzb81O9aWdlyLi3c//5Xvf/skX3v3lp2798cbfLn+jUa2xbPnedjyh/FELW00vNL+LvRtsPGWw0yjfbGFmtNMaI4dK7j7nOgEA0FnjHP/9EfHxiLgS4zFy9OksAAAA8AJKPzsW/00i0s7OdSkHAAAAXiC55hjYJFfMxgKMRS5XLLbG8H4wLuQq1Vr9k4vVzbWF1ljZiSjkFpcr5alsrPBEFJJGfrqZfpx/80B+JiJejojvjo8288X5amVh0Bc/AAAAYEhcPND///d4q/8PAAAAnDETg64AAAAA8Nzp/wMAAMDZp/8PAAAAZ9qXrl1rTGn7/dcLN7c2V6o3ry6UayvF1c354nx1Y724VK0uNZ/Zt3rc51Wq1fVPx9rm7VK9XKuXalvbN1arm2v1G8v7XoENAAAAnKCXP3rv90lE7HxmtDk1nOtt0x5XA06r/G4qyeYddus/vNSa//mEKgWciJFBVwAYmPygKwAMTGHQFQAGLjlmedfBO7/J5h/rb30AAID+m/xw9/v/uSO33Dl6MXDq2YlheLn/D8Oref+/15G8ThbgTCk4A4Ch98z3/4+Vpk9UIQAAoO/GmlOSK2aX98YilysWIy41XwtQSBaXK+WpiHgpIn43XnhfIz/d3DI5ts8AAAAAAAAAAAAAAAAAAAAAAAAAALSkaRIpAAAAcKZF5P6a/Kr1LP/J8TfGDl4fOJf8ZzyyV4Te+uH179+eq9c3phvl/9wtr/8gK39zEFcwAAAAYCg80Qv82/30dj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrp4YM78+3pJOP+/XMRMdEpfj7ON+fnoxARF/6VRH7PdklEjPQh/mjjz4c6xU8a1doN2Sn+aB/i79w9Mn5MZN9Cp/gX+xAfhtm9xvHnvU77Xy5ea84773/5iH35p9X9+Be7x7+RLvv/pR5jvHL/Z6Wu8e9GvJLvfPxpx0/a8X+xP/7rPcb/2le3t7stS38UMdnx9yfZF6tUX10v1ba2ry6vzi2Vl8prMzPTb8++M/vW7FRpcblSzv52jPGdj/z80VHtv9Al/sTB9sf+9r/RY/v/d//2gw+0koVO8S+/3iH+r3+crXE4fi777ftElm4sn2ynd1rpvV796W9fPar9C13af+j/f6D9l3ts/5Uvf+tPPa4KAJyA2tb2ylylUt44s4lGL/0UVEPiFCa+2dcPTNM0bexTz/A5SZyGr6WZGPSRCQAA6LfHJ/2DrgkAAAAAAAAAAAAAAAAAAAAMr5N4nNjBmDu7qaQfj9AGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiL/wcAAP//kVnaEQ==")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000a0a0101000000000700000900000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x200000a0)
r2 = socket$kcm(0x10, 0x2, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x4, 0x4})
timer_create(0x3, 0x0, &(0x7f0000000300)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x20083)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x8}, 0x8002, 0x4011, 0x2, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', <r11=>0x0, 0x2f, 0x8, 0x6, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x10, 0x81, 0x1da}})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8c57}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
syz_usbip_server_init(0x4)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xd39d69c038716716)

1.006218033s ago: executing program 5 (id=6241):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

953.918424ms ago: executing program 3 (id=6242):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7")

873.951376ms ago: executing program 5 (id=6243):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000007c0), 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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")

557.79644ms ago: executing program 1 (id=6244):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000e0000002000000000000000000000000ff020000000000000000000000000001fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001ac1414bb00"/36, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00000000000c001c00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x13c}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x801, &(0x7f0000000880)={[{@debug}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@restrict, @datasec={0x2, 0x1, 0x0, 0xf, 0x8e7f4f61086e7c8e, [{0x204, 0x0, 0x800}], "25ff"}, @datasec={0x0, 0x38, 0x0, 0xf, 0x2, [], "327f"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000540)=""/145, 0x50, 0x91, 0x1, 0x0, 0x0, @void, @value}, 0x20)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
unshare(0x40000280)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x29, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4080202)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
fsetxattr(r3, &(0x7f0000000940)=@known='trusted.overlay.impure\x00', &(0x7f0000000980)='pagemap\x00', 0x8, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000900)=0x3, 0x4)
io_uring_setup(0x3055, &(0x7f0000000500)={0x0, 0xcb0d, 0x20000, 0x2, 0x37b})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x6, 0x7, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x192}, 0x18)
setreuid(0xee00, 0x0)

493.015052ms ago: executing program 5 (id=6245):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7800000000800000080000000000"], 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

377.213793ms ago: executing program 5 (id=6246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7")

242.462985ms ago: executing program 6 (id=6247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28)

157.399377ms ago: executing program 5 (id=6248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x4080)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fspick(r3, &(0x7f0000000040)='./file1\x00', 0x1)

141.465967ms ago: executing program 6 (id=6249):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000)
r5 = fsopen(0x0, 0x0)
r6 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000005c0)={0x5, "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"})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES32=r7, @ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r9, 0x0, 0x0)
write$rfkill(r6, 0x0, 0x0)
fsmount(r5, 0x1, 0x4)

107.639488ms ago: executing program 6 (id=6250):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffff7}, 0x18)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000001280)="9f", 0x1}], 0x1)

75.171328ms ago: executing program 1 (id=6251):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x45b, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="cc0080101c02ff0f00000000010000807b030000060000000000000000000000906fc432939c87a870957cc098af90760d7519acf739b4661435c4a4222aec1e77e1ac02d7d3e2fe71797ae82d758fad3ed2cd87b0bd46059831fbfdfee072009a4e3eb4a359bd45767d99fb772164dab475e526ef2640ad50cf3b5448665f966f93365d8687c508f606439d5cab2bc98dc0daf37c2888b222986b43b4c5ed1fb82bc698930cd0280f90b89b873a2e3e39d1b741cae208e95f8d137ffb55c750a3ba82de065d954d"], 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

40.916359ms ago: executing program 3 (id=6252):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x200}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa3ef4f0cd65bd0dd, 0x4008031, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000980)=0xfffffffb, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001500010026bd7000fcdbdf250aea0000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x48}}, 0x240000a0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="380000001214020027bd7000fd43f750ffb1367e4c8baddbad6308004b0013000208004b000300000008004b00130000000800150005000000080001000200000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000804)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioperm(0x0, 0x5, 0x6)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_names='pim6reg\x00'})
bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 6 (id=6253):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36})
ioctl$BLKTRACESETUP(r1, 0x1276, 0x0)

kernel console output (not intermixed with test programs):

e
[  309.453458][T20099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.461322][T20099] Cannot create hsr debugfs directory
[  309.465749][T20150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.478150][T20154] loop3: detected capacity change from 0 to 512
[  309.496488][T20154] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5806: Failed to acquire dquot type 1
[  309.564271][T20154] EXT4-fs (loop3): 1 truncate cleaned up
[  309.578409][T20154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.591378][T20154] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.621409][T11646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.641774][T20162] loop6: detected capacity change from 0 to 512
[  309.678162][T20162] EXT4-fs: Ignoring removed orlov option
[  309.686228][T20164] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5809'.
[  309.712831][T20162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.716358][T20167] loop5: detected capacity change from 0 to 512
[  309.731806][T20162] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.767727][T20167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.792170][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.815255][T20167] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.860586][T20176] loop3: detected capacity change from 0 to 1024
[  309.867368][T20176] EXT4-fs: Ignoring removed bh option
[  309.881065][T20178] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  309.898246][T20176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.923524][T20178] SELinux: failed to load policy
[  309.929496][T20176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.940799][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.955046][T20099] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  309.970769][T20099] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  309.998491][T20099] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  310.016776][T20188] loop4: detected capacity change from 0 to 2048
[  310.033492][T20099] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  310.064929][T20188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.084893][T20191] loop6: detected capacity change from 0 to 512
[  310.097268][T20188] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.112119][T20188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5816: bg 0: block 345: padding at end of block bitmap is not set
[  310.126936][T20188] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  310.130102][T20195] support for the xor transformation has been removed.
[  310.139328][T20188] EXT4-fs (loop4): This should not happen!! Data will be lost
[  310.139328][T20188] 
[  310.157403][T10472] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28
[  310.170152][T10472] EXT4-fs (loop4): This should not happen!! Data will be lost
[  310.170152][T10472] 
[  310.180157][T10472] EXT4-fs (loop4): Total free blocks count 0
[  310.186192][T10472] EXT4-fs (loop4): Free/Dirty block details
[  310.192113][T10472] EXT4-fs (loop4): free_blocks=0
[  310.195549][T20197] loop5: detected capacity change from 0 to 1024
[  310.197130][T10472] EXT4-fs (loop4): dirty_blocks=16
[  310.206790][T20197] EXT4-fs: Ignoring removed oldalloc option
[  310.208517][T10472] EXT4-fs (loop4): Block reservation details
[  310.269645][T20191] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5817: Failed to acquire dquot type 1
[  310.298584][T20099] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.306006][T20197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  310.322364][T20204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5820'.
[  310.334458][T20099] 8021q: adding VLAN 0 to HW filter on device team0
[  310.368199][T10453] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.375295][T10453] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.383542][T20191] EXT4-fs (loop6): 1 truncate cleaned up
[  310.396860][T20191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.407091][T10453] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.414561][T20191] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.416571][T10453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.528451][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.581347][T20213] rdma_rxe: rxe_newlink: failed to add bond0
[  310.582966][T20197] team0: Port device batadv11 removed
[  310.594389][T20213] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5822'.
[  310.607049][T20197] team0: Port device batadv12 removed
[  310.733178][T20221] loop4: detected capacity change from 0 to 512
[  310.744779][T20099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.756949][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  310.793926][T20221] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5825: bg 0: block 35: padding at end of block bitmap is not set
[  310.850216][T20221] EXT4-fs (loop4): Remounting filesystem read-only
[  310.857099][T20221] EXT4-fs (loop4): 1 truncate cleaned up
[  310.863178][T20221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.885532][T20213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.898716][T20213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.910583][T20235] loop5: detected capacity change from 0 to 1024
[  310.913928][T20099] veth0_vlan: entered promiscuous mode
[  310.924731][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.954526][T20099] veth1_vlan: entered promiscuous mode
[  310.958137][T20235] EXT4-fs: Ignoring removed bh option
[  310.981000][T20099] veth0_macvtap: entered promiscuous mode
[  310.994918][T20235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.997810][T20099] veth1_macvtap: entered promiscuous mode
[  311.016014][T20240] rdma_rxe: rxe_newlink: failed to add bond0
[  311.020351][T20235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.026012][T20240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5829'.
[  311.086443][T20099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.097051][T20099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.106998][T20099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.117532][T20099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.175935][T20099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.196407][T20099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.206974][T20099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.216836][T20099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.227351][T20099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.260821][T20247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.269510][T20247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.272371][T20246] loop5: detected capacity change from 0 to 512
[  311.299374][T20246] EXT4-fs: Ignoring removed orlov option
[  311.319448][T20099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.328329][T20246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.338555][T20099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.349558][T20099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.358384][T20099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.367249][T20099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.378077][T20246] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.421088][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.504080][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5832'.
[  311.513298][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5832'.
[  311.558608][T20257] support for the xor transformation has been removed.
[  311.672031][T20259] rdma_rxe: rxe_newlink: failed to add bond0
[  311.707682][T20259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5834'.
[  311.989943][T20276] loop6: detected capacity change from 0 to 512
[  312.002195][T20272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.013720][T20275] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  312.024192][T20275] SELinux: failed to load policy
[  312.048283][T20276] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5836: Failed to acquire dquot type 1
[  312.083115][T20262] chnl_net:caif_netlink_parms(): no params data found
[  312.085550][T20276] EXT4-fs (loop6): 1 truncate cleaned up
[  312.109962][T20272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.118405][T20276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.133282][T20276] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.162926][T20289] rdma_rxe: rxe_newlink: failed to add bond0
[  312.169433][T20289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5840'.
[  312.216108][T20292] loop4: detected capacity change from 0 to 512
[  312.223735][T20262] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.230845][T20262] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.256240][T20292] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  312.265442][T20292] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  312.284766][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.294136][T20262] bridge_slave_0: entered allmulticast mode
[  312.305873][T20292] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  312.306959][T20262] bridge_slave_0: entered promiscuous mode
[  312.341604][T20292] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  312.356429][T20262] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.363860][T20262] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.373455][T20295] loop6: detected capacity change from 0 to 128
[  312.401552][T20292] System zones: 0-2, 18-18, 34-34
[  312.414244][T20262] bridge_slave_1: entered allmulticast mode
[  312.422997][T20292] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  312.442833][T20262] bridge_slave_1: entered promiscuous mode
[  312.466019][T20292] EXT4-fs (loop4): 1 truncate cleaned up
[  312.468135][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.472129][T20292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.499525][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.517526][T20262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.546407][T20262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.552598][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.584752][T20300] rdma_rxe: rxe_newlink: failed to add bond0
[  312.601445][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5845'.
[  312.602947][T20262] team0: Port device team_slave_0 added
[  312.629050][T20262] team0: Port device team_slave_1 added
[  312.654899][T20262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.661966][T20262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.687956][T20262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.731438][T20302] loop4: detected capacity change from 0 to 512
[  312.761625][T20262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.768646][T20262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.794617][T20262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.836771][T20302] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5844: Failed to acquire dquot type 1
[  312.877938][T20300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.887524][T20302] EXT4-fs (loop4): 1 truncate cleaned up
[  312.897124][T20300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.916267][T20302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.933899][T20262] hsr_slave_0: entered promiscuous mode
[  312.940507][T20302] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.952135][T20262] hsr_slave_1: entered promiscuous mode
[  312.952496][T20262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  312.952514][T20262] Cannot create hsr debugfs directory
[  313.096575][T20262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  313.106644][T20262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  313.118405][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.161612][   T29] kauditd_printk_skb: 560 callbacks suppressed
[  313.161695][   T29] audit: type=1326 audit(2000000049.850:26649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.198024][T20310] loop4: detected capacity change from 0 to 512
[  313.204505][T20308] loop5: detected capacity change from 0 to 2048
[  313.205582][T20310] EXT4-fs: Ignoring removed orlov option
[  313.217106][   T29] audit: type=1326 audit(2000000049.890:26650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.240767][   T29] audit: type=1326 audit(2000000049.890:26651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.256722][T20310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.264366][   T29] audit: type=1326 audit(2000000049.890:26652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.295475][T20310] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.300391][   T29] audit: type=1326 audit(2000000049.890:26653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.334445][   T29] audit: type=1326 audit(2000000049.890:26654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.358083][   T29] audit: type=1326 audit(2000000049.890:26655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.381726][   T29] audit: type=1326 audit(2000000049.890:26656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.405366][   T29] audit: type=1326 audit(2000000049.890:26657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.429048][   T29] audit: type=1326 audit(2000000049.890:26658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9566d169 code=0x7ffc0000
[  313.453315][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.493088][T20314] loop4: detected capacity change from 0 to 512
[  313.500825][T20308] Alternate GPT is invalid, using primary GPT.
[  313.507226][T20308]  loop5: p1 p2 p3
[  313.520456][T20317] loop1: detected capacity change from 0 to 512
[  313.529062][T20262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  313.539027][T20262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  313.550252][T20314] EXT4-fs (loop4): 1 orphan inode deleted
[  313.556442][T20314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.570388][T20314] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.570608][T10472] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:21: Failed to release dquot type 1
[  313.602133][T20317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.633377][T20317] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.644554][T20322] FAULT_INJECTION: forcing a failure.
[  313.644554][T20322] name failslab, interval 1, probability 0, space 0, times 0
[  313.657271][T20322] CPU: 1 UID: 0 PID: 20322 Comm: syz.5.5850 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  313.657302][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  313.657318][T20322] Call Trace:
[  313.657326][T20322]  <TASK>
[  313.657335][T20322]  dump_stack_lvl+0xf6/0x150
[  313.657405][T20322]  dump_stack+0x15/0x1a
[  313.657421][T20322]  should_fail_ex+0x261/0x270
[  313.657471][T20322]  should_failslab+0x8f/0xb0
[  313.657509][T20322]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  313.657539][T20322]  ? __alloc_skb+0x10d/0x320
[  313.657572][T20322]  __alloc_skb+0x10d/0x320
[  313.657598][T20322]  netlink_alloc_large_skb+0xad/0xe0
[  313.657621][T20322]  netlink_sendmsg+0x3da/0x720
[  313.657733][T20322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.657761][T20322]  __sock_sendmsg+0x140/0x180
[  313.657808][T20322]  ____sys_sendmsg+0x350/0x4e0
[  313.657846][T20322]  __sys_sendmsg+0x1a0/0x240
[  313.658011][T20322]  __x64_sys_sendmsg+0x46/0x50
[  313.658037][T20322]  x64_sys_call+0x26f3/0x2e10
[  313.658069][T20322]  do_syscall_64+0xc9/0x1c0
[  313.658098][T20322]  ? clear_bhb_loop+0x25/0x80
[  313.658125][T20322]  ? clear_bhb_loop+0x25/0x80
[  313.658224][T20322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.658251][T20322] RIP: 0033:0x7f30b8acd169
[  313.658269][T20322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.658287][T20322] RSP: 002b:00007f30b712f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  313.658305][T20322] RAX: ffffffffffffffda RBX: 00007f30b8ce5fa0 RCX: 00007f30b8acd169
[  313.658356][T20322] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  313.658371][T20322] RBP: 00007f30b712f090 R08: 0000000000000000 R09: 0000000000000000
[  313.658385][T20322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.658400][T20322] R13: 0000000000000000 R14: 00007f30b8ce5fa0 R15: 00007ffd1ce317b8
[  313.658421][T20322]  </TASK>
[  313.660758][T20262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  313.867020][T20262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  313.937025][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.997219][T20262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  314.007247][T20262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  314.043464][T20334] loop4: detected capacity change from 0 to 512
[  314.064453][T20317] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  314.079784][T20317] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28
[  314.092200][T20317] EXT4-fs (loop1): This should not happen!! Data will be lost
[  314.092200][T20317] 
[  314.101938][T20317] EXT4-fs (loop1): Total free blocks count 0
[  314.107975][T20317] EXT4-fs (loop1): Free/Dirty block details
[  314.109120][T20334] EXT4-fs (loop4): orphan cleanup on readonly fs
[  314.114067][T20317] EXT4-fs (loop1): free_blocks=65280
[  314.125984][T20317] EXT4-fs (loop1): dirty_blocks=31
[  314.131166][T20317] EXT4-fs (loop1): Block reservation details
[  314.137349][T20317] EXT4-fs (loop1): i_reserved_data_blocks=31
[  314.145397][T20334] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.5855: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  314.145720][T20337] tap0: tun_chr_ioctl cmd 1074025680
[  314.222817][T20334] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.5855: couldn't read orphan inode 13 (err -117)
[  314.270763][T20262] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  314.292572][T20344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5859'.
[  314.295804][T20334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  314.332005][T20262] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  314.353480][T20262] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  314.370864][T20346] loop5: detected capacity change from 0 to 512
[  314.372808][T20262] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  314.388122][T20346] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5860: bg 0: block 35: padding at end of block bitmap is not set
[  314.410871][T20334] 8021q: adding VLAN 0 to HW filter on device batadv12
[  314.419385][T20334] team0: Port device batadv12 added
[  314.435156][T20346] EXT4-fs (loop5): Remounting filesystem read-only
[  314.442271][T20346] EXT4-fs (loop5): 1 truncate cleaned up
[  314.448375][T20334] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  314.455007][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  314.462527][T20334] vhci_hcd vhci_hcd.0: Device attached
[  314.469674][T20334] netlink: 'syz.4.5855': attribute type 10 has an invalid length.
[  314.477702][T20346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.478592][T20334] team0: Device hsr_slave_0 failed to register rx_handler
[  314.525825][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.537300][T20262] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.543991][T20348] vhci_hcd: connection closed
[  314.544212][T10472] vhci_hcd: stop threads
[  314.553275][T10472] vhci_hcd: release socket
[  314.558329][T10472] vhci_hcd: disconnect device
[  314.571636][T20262] 8021q: adding VLAN 0 to HW filter on device team0
[  314.610312][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.617463][ T8967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.659363][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.666579][ T8967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.668227][T20353] rdma_rxe: rxe_newlink: failed to add bond0
[  314.718027][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5862'.
[  314.835918][T20262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.845432][T20099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.924826][T20262] veth0_vlan: entered promiscuous mode
[  314.951197][T20262] veth1_vlan: entered promiscuous mode
[  314.993089][T20353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.002699][T20262] veth0_macvtap: entered promiscuous mode
[  315.012504][T20353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.023241][T20262] veth1_macvtap: entered promiscuous mode
[  315.036174][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.046807][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.056675][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.067158][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.077169][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.087638][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.118254][T20375] loop6: detected capacity change from 0 to 2048
[  315.138233][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.172292][T20375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.194790][T20262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.208130][T20375] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.256499][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.267054][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.276972][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.287540][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.298828][T20262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.309361][T20262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.320437][T20262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.331064][T20262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.339953][T20262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.348749][T20262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.357667][T20262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.394585][T20381] loop4: detected capacity change from 0 to 2048
[  315.448382][T20381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.462911][T20388] loop3: detected capacity change from 0 to 512
[  315.470144][T20381] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.482670][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.492454][T20388] EXT4-fs (loop3): orphan cleanup on readonly fs
[  315.499421][T20388] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.5870: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  315.519848][T20388] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.5870: couldn't read orphan inode 13 (err -117)
[  315.535851][T20388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  315.567665][T20391] loop6: detected capacity change from 0 to 512
[  315.589906][T20388] 8021q: adding VLAN 0 to HW filter on device batadv1
[  315.598544][T20391] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5871: Failed to acquire dquot type 1
[  315.610426][T20388] team0: Port device batadv1 added
[  315.626333][T20391] EXT4-fs (loop6): 1 truncate cleaned up
[  315.634367][T20388] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  315.640993][T20388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  315.648560][T20388] vhci_hcd vhci_hcd.0: Device attached
[  315.652746][T20391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.663435][T20388] netlink: 'syz.3.5870': attribute type 10 has an invalid length.
[  315.678620][T12461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.688130][T20391] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.701209][T20388] team0: Device hsr_slave_0 failed to register rx_handler
[  315.720575][T20394] vhci_hcd: connection closed
[  315.721008][T10453] vhci_hcd: stop threads
[  315.730028][T10453] vhci_hcd: release socket
[  315.734469][T10453] vhci_hcd: disconnect device
[  315.741730][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.793472][T20401] loop4: detected capacity change from 0 to 1024
[  315.808664][T20401] EXT4-fs: Ignoring removed oldalloc option
[  315.842190][T20405] loop6: detected capacity change from 0 to 2048
[  315.871001][T20407] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  315.884830][T20407] SELinux: failed to load policy
[  315.895770][T20401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  315.925937][T20405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.938509][T20405] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.037691][T20405] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5876: bg 0: block 345: padding at end of block bitmap is not set
[  316.056855][T20419] loop1: detected capacity change from 0 to 2048
[  316.072655][T20401] team0: Port device batadv12 removed
[  316.083970][T20405] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  316.096582][T20405] EXT4-fs (loop6): This should not happen!! Data will be lost
[  316.096582][T20405] 
[  316.130600][T20424] loop5: detected capacity change from 0 to 512
[  316.131308][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.146201][T20424] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  316.146588][T20419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.155472][T20424] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  316.176992][T20419] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.188135][T20424] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  316.204983][T20424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  316.234619][T20424] System zones: 0-2, 18-18, 34-34
[  316.247400][T20424] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  316.262406][T20424] EXT4-fs (loop5): 1 truncate cleaned up
[  316.326200][T20430] SELinux: security policydb version 18 (MLS) not backwards compatible
[  316.334725][T20430] SELinux: failed to load policy
[  316.359618][T20436] loop4: detected capacity change from 0 to 764
[  316.404923][T20441] loop5: detected capacity change from 0 to 512
[  316.418059][T20441] EXT4-fs (loop5): orphan cleanup on readonly fs
[  316.422671][T20447] loop6: detected capacity change from 0 to 512
[  316.430799][T20436] rock: directory entry would overflow storage
[  316.437042][T20436] rock: sig=0x5850, size=36, remaining=7
[  316.437099][T20442] loop1: detected capacity change from 0 to 512
[  316.442898][T20442] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  316.458250][T20442] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  316.466926][T20441] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.5888: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  316.490347][T20441] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5888: couldn't read orphan inode 13 (err -117)
[  316.511691][T20441] 8021q: adding VLAN 0 to HW filter on device batadv13
[  316.520201][T20447] EXT4-fs (loop6): orphan cleanup on readonly fs
[  316.527194][T20442] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  316.537271][T20447] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.5892: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  316.548096][T20441] team0: Port device batadv13 added
[  316.561236][T20447] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5892: couldn't read orphan inode 13 (err -117)
[  316.573861][T20442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  316.583555][T20447] 8021q: adding VLAN 0 to HW filter on device batadv9
[  316.591821][T20447] team0: Port device batadv9 added
[  316.600083][T20442] System zones: 0-2, 18-18, 34-34
[  316.606051][T20447] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  316.612713][T20447] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  316.620368][T20447] vhci_hcd vhci_hcd.0: Device attached
[  316.627589][T20447] netlink: 'syz.6.5892': attribute type 10 has an invalid length.
[  316.629893][T20441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  316.637553][T20447] team0: Device hsr_slave_0 failed to register rx_handler
[  316.641996][T20441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  316.656730][T20441] vhci_hcd vhci_hcd.0: Device attached
[  316.662294][T20442] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  316.663452][T20456] vhci_hcd: connection closed
[  316.679496][T20442] EXT4-fs (loop1): 1 truncate cleaned up
[  316.705182][T20454] netlink: 'syz.5.5888': attribute type 10 has an invalid length.
[  316.706920][T10472] vhci_hcd: stop threads
[  316.713670][T20454] team0: Device hsr_slave_0 failed to register rx_handler
[  316.717702][T10472] vhci_hcd: release socket
[  316.729149][T10472] vhci_hcd: disconnect device
[  316.739350][T20462] loop4: detected capacity change from 0 to 2048
[  316.748261][T20458] vhci_hcd: connection closed
[  316.748494][T10472] vhci_hcd: stop threads
[  316.757526][T10472] vhci_hcd: release socket
[  316.761953][T10472] vhci_hcd: disconnect device
[  316.768413][T20462] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.791958][T20466] loop1: detected capacity change from 0 to 764
[  316.802382][T20462] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5894: bg 0: block 345: padding at end of block bitmap is not set
[  316.816770][T20466] rock: directory entry would overflow storage
[  316.817742][T20462] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  316.822984][T20466] rock: sig=0x5850, size=36, remaining=7
[  316.835330][T20462] EXT4-fs (loop4): This should not happen!! Data will be lost
[  316.835330][T20462] 
[  316.883562][T20468] loop1: detected capacity change from 0 to 512
[  316.896279][T20468] EXT4-fs (loop1): orphan cleanup on readonly fs
[  316.903049][T20468] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.5896: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  316.913539][T20470] loop4: detected capacity change from 0 to 2048
[  316.921689][T20468] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.5896: couldn't read orphan inode 13 (err -117)
[  316.951958][T20468] 8021q: adding VLAN 0 to HW filter on device batadv1
[  316.960299][T20468] team0: Port device batadv1 added
[  316.971377][T20468] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  316.978022][T20468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  316.985688][T20468] vhci_hcd vhci_hcd.0: Device attached
[  316.992808][T20470] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.007381][T20468] netlink: 'syz.1.5896': attribute type 10 has an invalid length.
[  317.008850][T20470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5897: bg 0: block 345: padding at end of block bitmap is not set
[  317.030279][T20470] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  317.031294][T20468] team0: Device hsr_slave_0 failed to register rx_handler
[  317.042769][T20470] EXT4-fs (loop4): This should not happen!! Data will be lost
[  317.042769][T20470] 
[  317.094945][T20474] vhci_hcd: connection closed
[  317.095307][  T295] vhci_hcd: stop threads
[  317.104358][  T295] vhci_hcd: release socket
[  317.107182][T20477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5898'.
[  317.108868][  T295] vhci_hcd: disconnect device
[  317.117953][T20477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5898'.
[  317.165172][ T1081] vhci_hcd: vhci_device speed not set
[  317.209531][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5902'.
[  317.218656][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5902'.
[  317.256560][T20485] gretap0: entered promiscuous mode
[  317.264801][T20485] batadv_slave_1: entered promiscuous mode
[  317.283589][T20485] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  317.291913][T20485] Cannot create hsr debugfs directory
[  317.297358][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5904'.
[  317.356332][T20496] loop6: detected capacity change from 0 to 2048
[  317.363117][T20496] EXT4-fs: Ignoring removed mblk_io_submit option
[  317.477688][T20496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  317.487328][T20512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5911'.
[  317.570212][T20516] loop5: detected capacity change from 0 to 512
[  317.590392][T20516] EXT4-fs (loop5): orphan cleanup on readonly fs
[  317.597615][T20516] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.5912: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  317.618925][T20516] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5912: couldn't read orphan inode 13 (err -117)
[  317.672622][T20516] 8021q: adding VLAN 0 to HW filter on device batadv14
[  317.682393][T20521] loop4: detected capacity change from 0 to 2048
[  317.690944][T20516] team0: Port device batadv14 added
[  317.704710][T20521] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.723694][T20523] loop1: detected capacity change from 0 to 512
[  317.748020][T20521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5915: bg 0: block 345: padding at end of block bitmap is not set
[  317.763694][T20516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  317.765416][T20523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  317.770299][T20516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  317.770399][T20516] vhci_hcd vhci_hcd.0: Device attached
[  317.785486][T20528] netlink: 'syz.5.5912': attribute type 10 has an invalid length.
[  317.805341][T20521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  317.817806][T20521] EXT4-fs (loop4): This should not happen!! Data will be lost
[  317.817806][T20521] 
[  317.818791][T20523] EXT4-fs (loop1): 1 truncate cleaned up
[  317.834964][T20528] team0: Device hsr_slave_0 failed to register rx_handler
[  317.866546][T20526] vhci_hcd: connection closed
[  317.866887][ T8958] vhci_hcd: stop threads
[  317.876076][ T8958] vhci_hcd: release socket
[  317.880509][ T8958] vhci_hcd: disconnect device
[  317.901058][T20523] EXT4-fs (loop1): shut down requested (0)
[  317.923343][T20535] loop6: detected capacity change from 0 to 512
[  317.938725][T20535] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5916: bg 0: block 35: padding at end of block bitmap is not set
[  317.972740][T20538] loop4: detected capacity change from 0 to 512
[  317.980744][T20535] EXT4-fs (loop6): Remounting filesystem read-only
[  317.987609][T20535] EXT4-fs (loop6): 1 truncate cleaned up
[  317.995308][T20538] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5918: Failed to acquire dquot type 1
[  318.009526][T20538] EXT4-fs (loop4): 1 truncate cleaned up
[  318.015778][T20538] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.067689][T20548] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.074865][T20548] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.086053][T20548] bridge_slave_1: left allmulticast mode
[  318.091735][T20548] bridge_slave_1: left promiscuous mode
[  318.097716][T20548] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.106150][T20548] bridge_slave_0: left allmulticast mode
[  318.111855][T20548] bridge_slave_0: left promiscuous mode
[  318.117789][T20548] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.164524][T20552] loop6: detected capacity change from 0 to 512
[  318.172132][   T29] kauditd_printk_skb: 838 callbacks suppressed
[  318.172147][   T29] audit: type=1326 audit(2000000054.860:27492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab7badbdca code=0x7ffc0000
[  318.172589][T20552] EXT4-fs: Ignoring removed orlov option
[  318.178444][   T29] audit: type=1326 audit(2000000054.860:27493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab7badbdca code=0x7ffc0000
[  318.202497][T20550] loop4: detected capacity change from 0 to 512
[  318.226469][   T29] audit: type=1326 audit(2000000054.860:27494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fab7badb9d7 code=0x7ffc0000
[  318.260950][   T29] audit: type=1326 audit(2000000054.860:27495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fab7bade90a code=0x7ffc0000
[  318.297815][T20552] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.309134][T20550] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  318.319285][T20550] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  318.329322][T20550] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5923: Failed to acquire dquot type 1
[  318.335780][   T29] audit: type=1326 audit(2000000055.030:27496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7badbad0 code=0x7ffc0000
[  318.364336][   T29] audit: type=1326 audit(2000000055.030:27497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fab7badbeb7 code=0x7ffc0000
[  318.373660][T20550] EXT4-fs (loop4): 1 truncate cleaned up
[  318.387906][   T29] audit: type=1326 audit(2000000055.030:27498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7badbad0 code=0x7ffc0000
[  318.394066][T20550] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.417308][   T29] audit: type=1326 audit(2000000055.030:27499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.6.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7badd169 code=0x7ffc0000
[  318.599876][T20570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5931'.
[  318.701939][T20582] loop5: detected capacity change from 0 to 512
[  318.735739][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5939'.
[  318.744786][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5939'.
[  318.775206][T20592] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  318.787692][T20582] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5937: Failed to acquire dquot type 1
[  318.788245][T20586] gretap0: entered promiscuous mode
[  318.815535][T20592] SELinux: failed to load policy
[  318.821398][T20582] EXT4-fs (loop5): 1 truncate cleaned up
[  318.840758][T20582] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.866417][T20586] batadv_slave_1: entered promiscuous mode
[  318.898584][T20586] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  318.943302][T20586] Cannot create hsr debugfs directory
[  319.038121][T20603] loop4: detected capacity change from 0 to 512
[  319.039170][T20605] loop6: detected capacity change from 0 to 512
[  319.063477][T20603] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  319.094504][T20605] EXT4-fs (loop6): orphan cleanup on readonly fs
[  319.114043][T20605] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.5944: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  319.134875][T20605] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5944: couldn't read orphan inode 13 (err -117)
[  319.148169][T20612] loop5: detected capacity change from 0 to 512
[  319.166764][T20614] loop1: detected capacity change from 0 to 512
[  319.174429][T20614] EXT4-fs: Ignoring removed orlov option
[  319.181160][T20605] 8021q: adding VLAN 0 to HW filter on device batadv10
[  319.189057][T20605] team0: Port device batadv10 added
[  319.190906][T20612] EXT4-fs (loop5): orphan cleanup on readonly fs
[  319.201434][T20612] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.5946: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  319.203791][T20605] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  319.219921][T20612] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5946: couldn't read orphan inode 13 (err -117)
[  319.225755][T20605] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  319.225911][T20605] vhci_hcd vhci_hcd.0: Device attached
[  319.258352][T20614] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.275833][T20605] netlink: 'syz.6.5944': attribute type 10 has an invalid length.
[  319.296195][T20612] 8021q: adding VLAN 0 to HW filter on device batadv15
[  319.304047][T20612] team0: Port device batadv15 added
[  319.316276][T20605] team0: Device hsr_slave_0 failed to register rx_handler
[  319.321924][T20612] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  319.330047][T20612] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  319.337548][T20612] vhci_hcd vhci_hcd.0: Device attached
[  319.345055][T20612] netlink: 'syz.5.5946': attribute type 10 has an invalid length.
[  319.353869][T20612] team0: Device hsr_slave_0 failed to register rx_handler
[  319.361373][T20616] vhci_hcd: connection closed
[  319.361491][T10472] vhci_hcd: stop threads
[  319.370698][T10472] vhci_hcd: release socket
[  319.375244][T10472] vhci_hcd: disconnect device
[  319.405236][T20622] vhci_hcd: connection closed
[  319.405775][   T51] vhci_hcd: stop threads
[  319.414835][   T51] vhci_hcd: release socket
[  319.419410][   T51] vhci_hcd: disconnect device
[  319.425204][ T3369] vhci_hcd: vhci_device speed not set
[  319.448522][T20629] loop1: detected capacity change from 0 to 512
[  319.473030][T20629] EXT4-fs: Ignoring removed oldalloc option
[  319.485325][T20629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  319.493564][T20629] System zones: 1-12
[  319.494728][T20632] siw: device registration error -23
[  319.497927][T20629] EXT4-fs (loop1): orphan cleanup on readonly fs
[  319.509859][T20629] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5952: Parent and EA inode have the same ino 15
[  319.523181][T20629] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5952: Parent and EA inode have the same ino 15
[  319.536297][T20629] EXT4-fs (loop1): 1 orphan inode deleted
[  319.567125][T20634] loop4: detected capacity change from 0 to 512
[  319.607822][T20634] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5954: Failed to acquire dquot type 1
[  319.621158][T20637] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.645724][T20634] EXT4-fs (loop4): 1 truncate cleaned up
[  319.657325][T20634] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.673485][T20639] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  319.695380][T20639] SELinux: failed to load policy
[  319.854478][T20648] loop3: detected capacity change from 0 to 512
[  319.879101][T20648] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  319.928614][T20652] loop6: detected capacity change from 0 to 512
[  319.969677][T20652] EXT4-fs (loop6): orphan cleanup on readonly fs
[  319.994314][T20652] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.5961: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  320.012924][T20652] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5961: couldn't read orphan inode 13 (err -117)
[  320.056510][T20668] loop5: detected capacity change from 0 to 512
[  320.066626][T20652] 8021q: adding VLAN 0 to HW filter on device batadv11
[  320.079010][T20652] team0: Port device batadv11 added
[  320.152536][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5967'.
[  320.157405][T20668] EXT4-fs (loop5): orphan cleanup on readonly fs
[  320.161815][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5967'.
[  320.175546][T20668] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.5966: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  320.195264][T20668] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5966: couldn't read orphan inode 13 (err -117)
[  320.207768][T20675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5967'.
[  320.209172][T20652] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[  320.223417][T20652] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  320.231047][T20652] vhci_hcd vhci_hcd.0: Device attached
[  320.265062][T20668] 8021q: adding VLAN 0 to HW filter on device batadv16
[  320.270287][T20652] netlink: 'syz.6.5961': attribute type 10 has an invalid length.
[  320.281092][T20668] team0: Port device batadv16 added
[  320.298295][T20652] team0: Device hsr_slave_0 failed to register rx_handler
[  320.307334][T20668] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  320.313972][T20668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  320.321702][T20668] vhci_hcd vhci_hcd.0: Device attached
[  320.329375][T20681] loop3: detected capacity change from 0 to 512
[  320.346934][T20677] vhci_hcd: connection closed
[  320.347028][T20668] netlink: 'syz.5.5966': attribute type 10 has an invalid length.
[  320.347220][ T8958] vhci_hcd: stop threads
[  320.360507][T20668] team0: Device hsr_slave_0 failed to register rx_handler
[  320.363952][ T8958] vhci_hcd: release socket
[  320.372263][T20681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  320.375700][ T8958] vhci_hcd: disconnect device
[  320.394431][T20686] loop1: detected capacity change from 0 to 512
[  320.401315][T20683] vhci_hcd: connection closed
[  320.402835][T10453] vhci_hcd: stop threads
[  320.411959][T10453] vhci_hcd: release socket
[  320.416429][T10453] vhci_hcd: disconnect device
[  320.421633][T20681] EXT4-fs (loop3): 1 truncate cleaned up
[  320.440731][T20686] EXT4-fs (loop1): orphan cleanup on readonly fs
[  320.462475][T20681] EXT4-fs (loop3): shut down requested (2)
[  320.476772][T20686] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.5972: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  320.494778][T20692] loop4: detected capacity change from 0 to 512
[  320.495146][T20686] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.5972: couldn't read orphan inode 13 (err -117)
[  320.521235][T20686] 8021q: adding VLAN 0 to HW filter on device batadv2
[  320.529082][T20686] team0: Port device batadv2 added
[  320.540467][T20686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  320.547167][T20686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  320.554675][T20686] vhci_hcd vhci_hcd.0: Device attached
[  320.563844][T20692] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.563841][T20686] netlink: 'syz.1.5972': attribute type 10 has an invalid length.
[  320.564475][T20686] team0: Device hsr_slave_0 failed to register rx_handler
[  320.601548][T20695] vhci_hcd: connection closed
[  320.602220][  T295] vhci_hcd: stop threads
[  320.611263][  T295] vhci_hcd: release socket
[  320.615737][  T295] vhci_hcd: disconnect device
[  320.627741][T20698] loop3: detected capacity change from 0 to 512
[  320.652618][T20698] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5974: bg 0: block 35: padding at end of block bitmap is not set
[  320.667465][T20698] EXT4-fs (loop3): Remounting filesystem read-only
[  320.674051][T20698] EXT4-fs (loop3): 1 truncate cleaned up
[  320.679872][T20701] loop4: detected capacity change from 0 to 512
[  320.708752][T20701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5975: bg 0: block 35: padding at end of block bitmap is not set
[  320.741292][T20701] EXT4-fs (loop4): Remounting filesystem read-only
[  320.748049][T20701] EXT4-fs (loop4): 1 truncate cleaned up
[  320.895256][T20718] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  320.905829][T20718] SELinux: failed to load policy
[  321.008100][T20724] loop6: detected capacity change from 0 to 512
[  321.036916][T20724] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.080146][T20729] No such timeout policy "syz0"
[  321.162922][T20734] loop6: detected capacity change from 0 to 2048
[  321.179450][T20734] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.414956][T20742] No such timeout policy "syz0"
[  321.425704][T20747] FAULT_INJECTION: forcing a failure.
[  321.425704][T20747] name failslab, interval 1, probability 0, space 0, times 0
[  321.438486][T20747] CPU: 1 UID: 0 PID: 20747 Comm: syz.1.5992 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  321.438515][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  321.438530][T20747] Call Trace:
[  321.438537][T20747]  <TASK>
[  321.438545][T20747]  dump_stack_lvl+0xf6/0x150
[  321.438624][T20747]  dump_stack+0x15/0x1a
[  321.438643][T20747]  should_fail_ex+0x261/0x270
[  321.438672][T20747]  should_failslab+0x8f/0xb0
[  321.438710][T20747]  kmem_cache_alloc_noprof+0x59/0x340
[  321.438772][T20747]  ? getname_flags+0x81/0x3b0
[  321.438799][T20747]  getname_flags+0x81/0x3b0
[  321.438889][T20747]  __x64_sys_linkat+0x73/0xa0
[  321.439007][T20747]  x64_sys_call+0x2a95/0x2e10
[  321.439074][T20747]  do_syscall_64+0xc9/0x1c0
[  321.439211][T20747]  ? clear_bhb_loop+0x25/0x80
[  321.439242][T20747]  ? clear_bhb_loop+0x25/0x80
[  321.439311][T20747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.439334][T20747] RIP: 0033:0x7f49ae28d169
[  321.439352][T20747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.439374][T20747] RSP: 002b:00007f49ac8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  321.439402][T20747] RAX: ffffffffffffffda RBX: 00007f49ae4a5fa0 RCX: 00007f49ae28d169
[  321.439415][T20747] RDX: ffffffffffffffff RSI: 0000200000000900 RDI: 0000000000000003
[  321.439427][T20747] RBP: 00007f49ac8f7090 R08: 0000000000001000 R09: 0000000000000000
[  321.439438][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.439452][T20747] R13: 0000000000000000 R14: 00007f49ae4a5fa0 R15: 00007ffedc567ec8
[  321.439476][T20747]  </TASK>
[  321.475310][   T38] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3
[  321.603056][T20750] loop6: detected capacity change from 0 to 512
[  321.683135][T20753] loop3: detected capacity change from 0 to 1024
[  321.691806][T20753] EXT4-fs: Ignoring removed oldalloc option
[  321.698465][T20750] EXT4-fs: Ignoring removed oldalloc option
[  321.706339][T20750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  321.714336][T20750] System zones: 1-12
[  321.719428][T20750] EXT4-fs (loop6): orphan cleanup on readonly fs
[  321.726611][T20750] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.5994: Parent and EA inode have the same ino 15
[  321.741543][T20750] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.5994: Parent and EA inode have the same ino 15
[  321.754425][T20750] EXT4-fs (loop6): 1 orphan inode deleted
[  321.764281][T20753] bridge_slave_0: left allmulticast mode
[  321.770016][T20753] bridge_slave_0: left promiscuous mode
[  321.775720][T20753] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.787632][T20753] bridge_slave_1: left allmulticast mode
[  321.793317][T20753] bridge_slave_1: left promiscuous mode
[  321.799125][T20753] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.810575][T20753] bond0: (slave bond_slave_0): Releasing backup interface
[  321.825152][T20753] bond0: (slave bond_slave_1): Releasing backup interface
[  321.865411][T20753] team0: Port device team_slave_0 removed
[  321.875897][T20753] team0: Port device team_slave_1 removed
[  321.883192][T20753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.890736][T20753] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.922945][T20764] loop1: detected capacity change from 0 to 512
[  321.931700][T20753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.939366][T20753] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.956299][T20764] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  321.974786][T20764] EXT4-fs (loop1): orphan cleanup on readonly fs
[  321.981368][T20767] loop5: detected capacity change from 0 to 512
[  321.987686][T20764] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5997: Failed to acquire dquot type 1
[  321.988651][T20764] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5997: bg 0: block 40: padding at end of block bitmap is not set
[  322.021085][T20764] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  322.046053][T20764] EXT4-fs (loop1): 1 truncate cleaned up
[  322.053441][T20753] team0: Port device batadv1 removed
[  322.102687][T20767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  322.120706][T20770] loop1: detected capacity change from 0 to 512
[  322.136999][T20767] EXT4-fs (loop5): 1 truncate cleaned up
[  322.143371][T20770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  322.154607][T20770] EXT4-fs (loop1): 1 truncate cleaned up
[  322.185459][T20767] EXT4-fs (loop5): shut down requested (2)
[  322.196022][T20776] loop3: detected capacity change from 0 to 512
[  322.216377][T20770] EXT4-fs (loop1): shut down requested (2)
[  322.259674][T20779] loop5: detected capacity change from 0 to 512
[  322.278124][T20779] EXT4-fs: Ignoring removed oldalloc option
[  322.300524][T20780] loop1: detected capacity change from 0 to 2048
[  322.301010][T20779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  322.315613][T20776] EXT4-fs (loop3): orphan cleanup on readonly fs
[  322.315955][T20780] EXT4-fs: Ignoring removed mblk_io_submit option
[  322.322381][T20779] System zones: 1-12
[  322.335396][T20779] EXT4-fs (loop5): orphan cleanup on readonly fs
[  322.342005][T20776] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.6000: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  322.361041][T20779] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6001: Parent and EA inode have the same ino 15
[  322.374046][T20776] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.6000: couldn't read orphan inode 13 (err -117)
[  322.387115][T20779] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6001: Parent and EA inode have the same ino 15
[  322.404726][T20780] siw: device registration error -23
[  322.433800][T20776] 8021q: adding VLAN 0 to HW filter on device batadv2
[  322.445951][T20779] EXT4-fs (loop5): 1 orphan inode deleted
[  322.467823][T20776] team0: Port device batadv2 added
[  322.478029][T20790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  322.481330][T20791] lo: entered promiscuous mode
[  322.484649][T20790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  322.484686][T20790] vhci_hcd vhci_hcd.0: Device attached
[  322.501204][T20791] xt_CT: You must specify a L4 protocol and not use inversions on it
[  322.504584][T20791] lo: entered allmulticast mode
[  322.535106][T20776] netlink: 'syz.3.6000': attribute type 10 has an invalid length.
[  322.544642][T20791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6004'.
[  322.563250][T20776] team0: Device hsr_slave_0 failed to register rx_handler
[  322.590837][T20791] lo: left allmulticast mode
[  322.595583][T20791] lo: left promiscuous mode
[  322.601575][T20792] vhci_hcd: connection closed
[  322.601853][ T8958] vhci_hcd: stop threads
[  322.611004][ T8958] vhci_hcd: release socket
[  322.615453][ T8958] vhci_hcd: disconnect device
[  322.675250][ T1081] vhci_hcd: vhci_device speed not set
[  322.946330][T20798] loop5: detected capacity change from 0 to 512
[  322.988122][T20798] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.061307][T20802] loop5: detected capacity change from 0 to 1024
[  323.082644][T20802] EXT4-fs: Ignoring removed bh option
[  323.182536][   T29] kauditd_printk_skb: 786 callbacks suppressed
[  323.182554][   T29] audit: type=1326 audit(2000000059.870:28280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab7bad4127 code=0x7ffc0000
[  323.215271][   T29] audit: type=1326 audit(2000000059.910:28281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab7ba79359 code=0x7ffc0000
[  323.238923][   T29] audit: type=1326 audit(2000000059.910:28282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab7bad4127 code=0x7ffc0000
[  323.262471][   T29] audit: type=1326 audit(2000000059.910:28283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab7ba79359 code=0x7ffc0000
[  323.286090][   T29] audit: type=1326 audit(2000000059.910:28284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fab7badd169 code=0x7ffc0000
[  323.315623][   T29] audit: type=1326 audit(2000000060.010:28285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab7bad4127 code=0x7ffc0000
[  323.339224][   T29] audit: type=1326 audit(2000000060.010:28286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab7ba79359 code=0x7ffc0000
[  323.362926][   T29] audit: type=1326 audit(2000000060.010:28287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fab7badd169 code=0x7ffc0000
[  323.393176][   T29] audit: type=1326 audit(2000000060.060:28288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab7bad4127 code=0x7ffc0000
[  323.416764][   T29] audit: type=1326 audit(2000000060.060:28289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.6.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab7ba79359 code=0x7ffc0000
[  323.594052][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6014'.
[  323.644532][T20822] loop3: detected capacity change from 0 to 1024
[  323.667652][T20824] rdma_rxe: rxe_newlink: failed to add bond0
[  323.668122][T20822] EXT4-fs: Ignoring removed oldalloc option
[  323.682321][T20824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6017'.
[  323.683531][T20826] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.819197][T20822] team0: Port device batadv2 removed
[  323.827401][T20826] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.833997][T20833] loop1: detected capacity change from 0 to 512
[  323.857567][T20833] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6012: Failed to acquire dquot type 1
[  323.869847][T20833] EXT4-fs (loop1): 1 truncate cleaned up
[  323.879747][T20833] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.892215][T20826] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.957071][T20840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.965924][T20840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.970799][T20841] loop3: detected capacity change from 0 to 1024
[  323.986572][T20826] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.021023][T20841] EXT4-fs: Ignoring removed bh option
[  324.177838][T20826] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.196855][T20826] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.209020][T20849] loop1: detected capacity change from 0 to 512
[  324.220151][T20826] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.233371][T20826] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.258406][T20849] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6022: Failed to acquire dquot type 1
[  324.277305][T20853] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  324.287575][T20853] SELinux: failed to load policy
[  324.288445][T20849] EXT4-fs (loop1): 1 truncate cleaned up
[  324.299056][T20849] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.396086][T20859] loop1: detected capacity change from 0 to 764
[  324.428020][T20859] rock: directory entry would overflow storage
[  324.434303][T20859] rock: sig=0x5850, size=36, remaining=7
[  324.498838][T20862] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  324.512159][T20862] SELinux: failed to load policy
[  324.539424][T20864] loop1: detected capacity change from 0 to 512
[  324.546462][T20864] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  324.555783][T20864] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  324.565423][T20864] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  324.574687][T20864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  324.583133][T20864] System zones: 0-2, 18-18, 34-34
[  324.589996][T20864] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  324.619155][T20867] loop6: detected capacity change from 0 to 512
[  324.621781][T20864] EXT4-fs (loop1): 1 truncate cleaned up
[  324.649503][T20867] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6029: bg 0: block 35: padding at end of block bitmap is not set
[  324.676974][T20867] EXT4-fs (loop6): Remounting filesystem read-only
[  324.683584][T20867] EXT4-fs (loop6): 1 truncate cleaned up
[  324.721897][T20870] loop1: detected capacity change from 0 to 1024
[  324.729353][T20870] EXT4-fs: Ignoring removed oldalloc option
[  324.770811][T20874] loop6: detected capacity change from 0 to 512
[  324.786800][T20878] loop5: detected capacity change from 0 to 1024
[  324.800903][T20870] bond0: (slave bond_slave_0): Releasing backup interface
[  324.810611][T20878] EXT4-fs: Ignoring removed bh option
[  324.812429][T20874] EXT4-fs: Ignoring removed orlov option
[  324.823048][T20870] bond0: (slave bond_slave_1): Releasing backup interface
[  324.847145][T20874] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.856094][T20870] team0: Port device team_slave_0 removed
[  324.871653][T20870] team0: Port device team_slave_1 removed
[  324.893728][T20870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.901332][T20870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.926059][T20870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.933649][T20870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.963649][T20892] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  324.964626][T20890] loop6: detected capacity change from 0 to 2048
[  324.988306][T20892] SELinux: failed to load policy
[  324.997815][T20870] team0: Port device batadv1 removed
[  325.025906][T20890] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.030529][T20870] team0: Port device batadv2 removed
[  325.108414][T20903] loop5: detected capacity change from 0 to 2048
[  325.114954][T20904] loop6: detected capacity change from 0 to 512
[  325.122236][T20904] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  325.131503][T20904] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  325.142046][T20903] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.166729][T20904] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  325.177526][T20904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  325.185657][T20904] System zones: 0-2, 18-18, 34-34
[  325.199498][T20904] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  325.237493][T20912] loop3: detected capacity change from 0 to 2048
[  325.244323][T20912] EXT4-fs: Ignoring removed mblk_io_submit option
[  325.250966][T20904] EXT4-fs (loop6): 1 truncate cleaned up
[  325.281877][T20912] siw: device registration error -23
[  325.292018][T20917] loop1: detected capacity change from 0 to 1024
[  325.298891][T20917] EXT4-fs: Ignoring removed bh option
[  325.354956][T20924] FAULT_INJECTION: forcing a failure.
[  325.354956][T20924] name failslab, interval 1, probability 0, space 0, times 0
[  325.367839][T20924] CPU: 0 UID: 0 PID: 20924 Comm: syz.3.6047 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  325.367891][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  325.367903][T20924] Call Trace:
[  325.367910][T20924]  <TASK>
[  325.367925][T20924]  dump_stack_lvl+0xf6/0x150
[  325.367950][T20924]  dump_stack+0x15/0x1a
[  325.367967][T20924]  should_fail_ex+0x261/0x270
[  325.367994][T20924]  should_failslab+0x8f/0xb0
[  325.368030][T20924]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[  325.368122][T20924]  ? security_context_to_sid_core+0x68/0x3b0
[  325.368153][T20924]  kmemdup_nul+0x35/0xc0
[  325.368182][T20924]  security_context_to_sid_core+0x68/0x3b0
[  325.368215][T20924]  security_context_to_sid+0x2f/0x40
[  325.368292][T20924]  selinux_lsm_setattr+0x2e5/0x670
[  325.368324][T20924]  selinux_setprocattr+0x4e/0x70
[  325.368355][T20924]  security_setprocattr+0x198/0x1c0
[  325.368413][T20924]  proc_pid_attr_write+0x1e7/0x220
[  325.368462][T20924]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  325.368512][T20924]  vfs_write+0x295/0x950
[  325.368599][T20924]  ? putname+0xe1/0x100
[  325.368624][T20924]  ? putname+0xe1/0x100
[  325.368649][T20924]  ksys_write+0xeb/0x1b0
[  325.368684][T20924]  __x64_sys_write+0x42/0x50
[  325.368713][T20924]  x64_sys_call+0x2a45/0x2e10
[  325.368828][T20924]  do_syscall_64+0xc9/0x1c0
[  325.368865][T20924]  ? clear_bhb_loop+0x25/0x80
[  325.368892][T20924]  ? clear_bhb_loop+0x25/0x80
[  325.368919][T20924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.368939][T20924] RIP: 0033:0x7fd4f56cd169
[  325.369028][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.369079][T20924] RSP: 002b:00007fd4f3d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  325.369101][T20924] RAX: ffffffffffffffda RBX: 00007fd4f58e5fa0 RCX: 00007fd4f56cd169
[  325.369149][T20924] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003
[  325.369161][T20924] RBP: 00007fd4f3d2f090 R08: 0000000000000000 R09: 0000000000000000
[  325.369172][T20924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.369184][T20924] R13: 0000000000000000 R14: 00007fd4f58e5fa0 R15: 00007ffc3fa6afa8
[  325.369201][T20924]  </TASK>
[  325.614534][T20927] loop5: detected capacity change from 0 to 512
[  325.664089][T20932] loop1: detected capacity change from 0 to 2048
[  325.664906][T20927] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.685456][T20927] EXT4-fs (loop5): shut down requested (0)
[  325.696833][T20932] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.913585][T20945] loop1: detected capacity change from 0 to 764
[  325.942118][T20943] loop5: detected capacity change from 0 to 512
[  325.955914][T20945] rock: directory entry would overflow storage
[  325.962125][T20945] rock: sig=0x5850, size=36, remaining=7
[  325.994044][T20946] loop3: detected capacity change from 0 to 512
[  326.027917][T20943] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6052: Failed to acquire dquot type 1
[  326.050800][T20946] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.074432][T20943] EXT4-fs (loop5): 1 truncate cleaned up
[  326.080539][T20952] loop1: detected capacity change from 0 to 764
[  326.083241][T20952] rock: directory entry would overflow storage
[  326.083250][T20952] rock: sig=0x5850, size=36, remaining=7
[  326.172567][T20943] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.247395][T20957] FAULT_INJECTION: forcing a failure.
[  326.247395][T20957] name failslab, interval 1, probability 0, space 0, times 0
[  326.260189][T20957] CPU: 0 UID: 0 PID: 20957 Comm: syz.1.6056 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  326.260249][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  326.260261][T20957] Call Trace:
[  326.260270][T20957]  <TASK>
[  326.260279][T20957]  dump_stack_lvl+0xf6/0x150
[  326.260308][T20957]  dump_stack+0x15/0x1a
[  326.260328][T20957]  should_fail_ex+0x261/0x270
[  326.260362][T20957]  should_failslab+0x8f/0xb0
[  326.260476][T20957]  __kmalloc_cache_noprof+0x55/0x320
[  326.260523][T20957]  ? do_signalfd4+0x103/0x2c0
[  326.260556][T20957]  do_signalfd4+0x103/0x2c0
[  326.260589][T20957]  __x64_sys_signalfd4+0xcf/0x100
[  326.260621][T20957]  x64_sys_call+0x29f5/0x2e10
[  326.260672][T20957]  do_syscall_64+0xc9/0x1c0
[  326.260701][T20957]  ? clear_bhb_loop+0x25/0x80
[  326.260723][T20957]  ? clear_bhb_loop+0x25/0x80
[  326.260744][T20957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.260770][T20957] RIP: 0033:0x7f49ae28d169
[  326.260812][T20957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.260895][T20957] RSP: 002b:00007f49ac8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121
[  326.260961][T20957] RAX: ffffffffffffffda RBX: 00007f49ae4a5fa0 RCX: 00007f49ae28d169
[  326.260975][T20957] RDX: 0000000000000008 RSI: 0000200000000080 RDI: ffffffffffffffff
[  326.260989][T20957] RBP: 00007f49ac8f7090 R08: 0000000000000000 R09: 0000000000000000
[  326.261001][T20957] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[  326.261013][T20957] R13: 0000000000000000 R14: 00007f49ae4a5fa0 R15: 00007ffedc567ec8
[  326.261061][T20957]  </TASK>
[  326.262680][T20958] loop6: detected capacity change from 0 to 512
[  326.450174][T20958] EXT4-fs: Ignoring removed oldalloc option
[  326.480522][T20958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  326.505171][T20958] System zones: 1-12
[  326.509314][T20958] EXT4-fs (loop6): orphan cleanup on readonly fs
[  326.518653][T20963] loop5: detected capacity change from 0 to 512
[  326.525782][T20958] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6057: Parent and EA inode have the same ino 15
[  326.538183][T20962] loop1: detected capacity change from 0 to 1024
[  326.555375][T20958] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6057: Parent and EA inode have the same ino 15
[  326.568427][T20962] EXT4-fs: Ignoring removed bh option
[  326.584501][T20958] EXT4-fs (loop6): 1 orphan inode deleted
[  326.591351][T20963] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.6058: corrupted in-inode xattr: invalid ea_ino
[  326.615428][T20963] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.6058: couldn't read orphan inode 15 (err -117)
[  326.791505][T20975] loop1: detected capacity change from 0 to 512
[  326.847654][T20978] loop5: detected capacity change from 0 to 512
[  326.861265][T20975] EXT4-fs (loop1): orphan cleanup on readonly fs
[  326.871899][T20978] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6063: bg 0: block 35: padding at end of block bitmap is not set
[  326.878297][T20975] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.6062: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  326.914515][T20978] EXT4-fs (loop5): Remounting filesystem read-only
[  326.931473][T20978] EXT4-fs (loop5): 1 truncate cleaned up
[  326.983693][T20975] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.6062: couldn't read orphan inode 13 (err -117)
[  327.090026][T20975] 8021q: adding VLAN 0 to HW filter on device batadv3
[  327.125597][T20975] team0: Port device batadv3 added
[  327.150382][T20975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  327.157032][T20975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  327.164500][T20975] vhci_hcd vhci_hcd.0: Device attached
[  327.178913][T20975] netlink: 'syz.1.6062': attribute type 10 has an invalid length.
[  327.187780][T20975] team0: Device hsr_slave_0 failed to register rx_handler
[  327.205529][T20987] vhci_hcd: connection closed
[  327.205731][T10453] vhci_hcd: stop threads
[  327.214784][T10453] vhci_hcd: release socket
[  327.219326][T10453] vhci_hcd: disconnect device
[  327.256275][T20997] loop6: detected capacity change from 0 to 512
[  327.274145][T20997] EXT4-fs (loop6): orphan cleanup on readonly fs
[  327.281393][T20997] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.6069: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  327.300898][T20997] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6069: couldn't read orphan inode 13 (err -117)
[  327.323513][T20997] 8021q: adding VLAN 0 to HW filter on device batadv12
[  327.357000][T20997] team0: Port device batadv12 added
[  327.363841][T20999] loop3: detected capacity change from 0 to 512
[  327.385188][T20997] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  327.391904][T20997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  327.399526][T20997] vhci_hcd vhci_hcd.0: Device attached
[  327.406616][T20997] netlink: 'syz.6.6069': attribute type 10 has an invalid length.
[  327.416929][T20997] team0: Device hsr_slave_0 failed to register rx_handler
[  327.439175][T21001] vhci_hcd: connection closed
[  327.439405][  T295] vhci_hcd: stop threads
[  327.445687][T20999] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6068: Failed to acquire dquot type 1
[  327.448509][  T295] vhci_hcd: release socket
[  327.448521][  T295] vhci_hcd: disconnect device
[  327.478096][T20999] EXT4-fs (loop3): 1 truncate cleaned up
[  327.491642][T20999] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.738556][T21006] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  327.749212][T21006] SELinux: failed to load policy
[  327.812657][T21012] loop1: detected capacity change from 0 to 512
[  327.820805][T21012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  327.832354][T21012] EXT4-fs (loop1): 1 truncate cleaned up
[  327.850307][T21012] EXT4-fs (loop1): shut down requested (0)
[  327.879685][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6074'.
[  327.916928][T21019] loop1: detected capacity change from 0 to 512
[  327.936792][T21019] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6075: Failed to acquire dquot type 1
[  327.949218][T21019] EXT4-fs (loop1): 1 truncate cleaned up
[  327.955488][T21019] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.000046][T21024] loop6: detected capacity change from 0 to 512
[  328.085519][T21024] EXT4-fs (loop6): orphan cleanup on readonly fs
[  328.092159][T21029] loop1: detected capacity change from 0 to 2048
[  328.119995][T21024] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.6077: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  328.126282][T21029] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.148434][T21024] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6077: couldn't read orphan inode 13 (err -117)
[  328.199652][T21039] loop5: detected capacity change from 0 to 512
[  328.213975][T21024] 8021q: adding VLAN 0 to HW filter on device batadv13
[  328.223846][T21039] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6081: bg 0: block 35: padding at end of block bitmap is not set
[  328.238977][T21024] team0: Port device batadv13 added
[  328.257546][T21039] EXT4-fs (loop5): Remounting filesystem read-only
[  328.264365][T21024] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[  328.265369][T21039] EXT4-fs (loop5): 1 truncate cleaned up
[  328.270970][T21024] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  328.284095][T21024] vhci_hcd vhci_hcd.0: Device attached
[  328.292782][T21024] netlink: 'syz.6.6077': attribute type 10 has an invalid length.
[  328.305754][T21048] loop1: detected capacity change from 0 to 512
[  328.312429][T21048] EXT4-fs: Ignoring removed oldalloc option
[  328.327107][T21024] team0: Device hsr_slave_0 failed to register rx_handler
[  328.343003][T21048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  328.351919][T21048] System zones: 1-12
[  328.352080][T21044] vhci_hcd: connection closed
[  328.356312][ T8967] vhci_hcd: stop threads
[  328.365405][ T8967] vhci_hcd: release socket
[  328.365510][T21048] EXT4-fs (loop1): orphan cleanup on readonly fs
[  328.369845][ T8967] vhci_hcd: disconnect device
[  328.408267][   T29] kauditd_printk_skb: 552 callbacks suppressed
[  328.408285][   T29] audit: type=1400 audit(2000000065.100:28832): avc:  granted  { setsecparam } for  pid=21050 comm="syz.5.6085" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  328.456455][T21048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6084: Parent and EA inode have the same ino 15
[  328.475460][T21057] loop5: detected capacity change from 0 to 512
[  328.495880][T21057] EXT4-fs: Ignoring removed orlov option
[  328.501879][   T29] audit: type=1326 audit(2000000065.160:28833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.525620][   T29] audit: type=1326 audit(2000000065.160:28834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.549312][   T29] audit: type=1326 audit(2000000065.160:28835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.555502][T21048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6084: Parent and EA inode have the same ino 15
[  328.573237][   T29] audit: type=1326 audit(2000000065.160:28836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.605799][T21048] EXT4-fs (loop1): 1 orphan inode deleted
[  328.609069][   T29] audit: type=1326 audit(2000000065.160:28837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.628335][T21057] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.638533][   T29] audit: type=1326 audit(2000000065.160:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.638638][   T29] audit: type=1326 audit(2000000065.160:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.638732][   T29] audit: type=1326 audit(2000000065.160:28840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  328.638780][   T29] audit: type=1326 audit(2000000065.160:28841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21056 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30b8acd1a3 code=0x7ffc0000
[  328.859443][T21070] SELinux:  policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c
[  328.888803][T21070] SELinux: failed to load policy
[  328.930152][T21075] program syz.5.6094 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  328.943456][T21073] loop6: detected capacity change from 0 to 2048
[  328.981667][T21073] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.997883][T21078] rdma_rxe: rxe_newlink: failed to add bond0
[  329.025551][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6095'.
[  329.092819][T21083] loop6: detected capacity change from 0 to 512
[  329.125816][T21083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  329.166157][T21083] EXT4-fs (loop6): 1 truncate cleaned up
[  329.186296][T21083] EXT4-fs (loop6): shut down requested (0)
[  329.254569][T21090] loop6: detected capacity change from 0 to 512
[  329.263455][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.265553][T21090] EXT4-fs: Ignoring removed orlov option
[  329.283226][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.293221][T21090] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.411489][T21101] loop6: detected capacity change from 0 to 512
[  329.419189][T21101] ext4: Unknown parameter 'measure'
[  329.591458][T21109] loop6: detected capacity change from 0 to 512
[  329.605586][T21112] netlink: 'syz.3.6108': attribute type 13 has an invalid length.
[  329.620750][T21109] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  329.708196][T21120] loop6: detected capacity change from 0 to 512
[  329.728474][T21120] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6110: bg 0: block 35: padding at end of block bitmap is not set
[  329.749483][T21120] EXT4-fs (loop6): Remounting filesystem read-only
[  329.761086][T21120] EXT4-fs (loop6): 1 truncate cleaned up
[  329.809383][T21124] loop6: detected capacity change from 0 to 512
[  329.818566][T21112] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.824340][T21124] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6111: bg 0: block 35: padding at end of block bitmap is not set
[  329.827764][T21112] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.851006][T21112] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.855672][T21124] EXT4-fs (loop6): Remounting filesystem read-only
[  329.860070][T21112] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.876102][T21124] EXT4-fs (loop6): 1 truncate cleaned up
[  329.941230][T21129] loop6: detected capacity change from 0 to 512
[  329.953262][T21129] EXT4-fs: Ignoring removed oldalloc option
[  329.963572][T21129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  330.063103][T21129] System zones: 1-12
[  330.069512][T21129] EXT4-fs (loop6): orphan cleanup on readonly fs
[  330.087122][T21129] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6113: Parent and EA inode have the same ino 15
[  330.106362][T21129] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6113: Parent and EA inode have the same ino 15
[  330.126867][T21129] EXT4-fs (loop6): 1 orphan inode deleted
[  330.226944][T21139] loop3: detected capacity change from 0 to 512
[  330.238692][T21138] loop5: detected capacity change from 0 to 512
[  330.276934][T21138] EXT4-fs (loop5): orphan cleanup on readonly fs
[  330.283569][T21138] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.6116: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  330.302487][T21139] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.420259][T21145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6117'.
[  330.421009][T21138] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.6116: couldn't read orphan inode 13 (err -117)
[  330.454574][T21138] 8021q: adding VLAN 0 to HW filter on device batadv17
[  330.462401][T21138] team0: Port device batadv17 added
[  330.482561][T21138] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  330.489228][T21138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  330.496713][T21138] vhci_hcd vhci_hcd.0: Device attached
[  330.534106][T21151] loop1: detected capacity change from 0 to 512
[  330.535287][T21152] netlink: 'syz.5.6116': attribute type 10 has an invalid length.
[  330.568560][T21151] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.583865][T21152] team0: Device hsr_slave_0 failed to register rx_handler
[  330.633879][T21156] loop1: detected capacity change from 0 to 1024
[  330.636888][T21146] vhci_hcd: connection closed
[  330.641925][T21156] EXT4-fs: Ignoring removed bh option
[  330.652240][   T51] vhci_hcd: stop threads
[  330.656617][   T51] vhci_hcd: release socket
[  330.661049][   T51] vhci_hcd: disconnect device
[  330.675120][ T3380] vhci_hcd: vhci_device speed not set
[  330.759647][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6124'.
[  330.807718][T21171] rdma_rxe: rxe_newlink: failed to add bond0
[  330.814865][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6125'.
[  330.886554][T21177] loop6: detected capacity change from 0 to 512
[  330.926060][T21177] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6128: Failed to acquire dquot type 1
[  330.945747][T21177] EXT4-fs (loop6): 1 truncate cleaned up
[  330.955569][T21177] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.044345][T21181] loop6: detected capacity change from 0 to 512
[  331.055649][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.064323][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.113191][T21181] EXT4-fs: Ignoring removed oldalloc option
[  331.135837][T21181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  331.219440][T21181] System zones: 1-12
[  331.223917][T21181] EXT4-fs (loop6): orphan cleanup on readonly fs
[  331.242129][T21185] loop5: detected capacity change from 0 to 512
[  331.251124][T21181] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6129: Parent and EA inode have the same ino 15
[  331.264447][T21181] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6129: Parent and EA inode have the same ino 15
[  331.282659][T21185] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6130: Failed to acquire dquot type 1
[  331.294518][T21181] EXT4-fs (loop6): 1 orphan inode deleted
[  331.301404][T21185] EXT4-fs (loop5): 1 truncate cleaned up
[  331.325690][T21185] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.560406][T21208] loop5: detected capacity change from 0 to 512
[  331.577695][T21208] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6138: bg 0: block 35: padding at end of block bitmap is not set
[  331.592700][T21208] EXT4-fs (loop5): Remounting filesystem read-only
[  331.599717][T21208] EXT4-fs (loop5): 1 truncate cleaned up
[  331.687796][T21219] loop3: detected capacity change from 0 to 128
[  331.717661][T21221] loop6: detected capacity change from 0 to 512
[  331.741722][T21221] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  331.753506][T21221] EXT4-fs (loop6): 1 truncate cleaned up
[  331.762321][T21225] loop5: detected capacity change from 0 to 512
[  331.804735][T21221] EXT4-fs (loop6): shut down requested (0)
[  331.839958][T21225] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6146: Failed to acquire dquot type 1
[  331.840808][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6148'.
[  331.860459][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6148'.
[  331.862282][T21225] EXT4-fs (loop5): 1 truncate cleaned up
[  331.875668][T21225] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.921727][T21237] loop1: detected capacity change from 0 to 512
[  331.930163][T21235] loop3: detected capacity change from 0 to 512
[  331.940199][T21237] EXT4-fs: Ignoring removed oldalloc option
[  331.968998][T21237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  331.982976][T21237] System zones: 1-12
[  331.990007][T21237] EXT4-fs (loop1): orphan cleanup on readonly fs
[  332.000328][T21235] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6147: Failed to acquire dquot type 1
[  332.015141][T21237] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6150: Parent and EA inode have the same ino 15
[  332.027770][T21237] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6150: Parent and EA inode have the same ino 15
[  332.040490][T21237] EXT4-fs (loop1): 1 orphan inode deleted
[  332.056133][T21235] EXT4-fs (loop3): 1 truncate cleaned up
[  332.073551][T21248] loop5: detected capacity change from 0 to 512
[  332.110941][T21235] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.126251][T21248] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6151: Failed to acquire dquot type 1
[  332.151242][T21255] loop6: detected capacity change from 0 to 1024
[  332.156530][T21248] EXT4-fs (loop5): 1 truncate cleaned up
[  332.163904][T21248] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.177410][T21255] EXT4-fs: Ignoring removed bh option
[  332.275351][T21262] FAULT_INJECTION: forcing a failure.
[  332.275351][T21262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.288581][T21262] CPU: 1 UID: 0 PID: 21262 Comm: syz.1.6155 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  332.288613][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  332.288657][T21262] Call Trace:
[  332.288663][T21262]  <TASK>
[  332.288671][T21262]  dump_stack_lvl+0xf6/0x150
[  332.288696][T21262]  dump_stack+0x15/0x1a
[  332.288713][T21262]  should_fail_ex+0x261/0x270
[  332.288787][T21262]  should_fail+0xb/0x10
[  332.288810][T21262]  should_fail_usercopy+0x1a/0x20
[  332.288866][T21262]  _copy_from_iter+0xd8/0xd10
[  332.288898][T21262]  ? alloc_pages_mpol+0x215/0x260
[  332.288968][T21262]  copy_page_from_iter+0x14f/0x280
[  332.288999][T21262]  tun_get_user+0x69d/0x2640
[  332.289027][T21262]  ? kfifo_copy_from_user+0x40/0x1f0
[  332.289076][T21262]  ? ref_tracker_alloc+0x1ff/0x310
[  332.289114][T21262]  tun_chr_write_iter+0x188/0x240
[  332.289137][T21262]  vfs_write+0x79b/0x950
[  332.289204][T21262]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  332.289266][T21262]  ksys_write+0xeb/0x1b0
[  332.289295][T21262]  __x64_sys_write+0x42/0x50
[  332.289322][T21262]  x64_sys_call+0x2a45/0x2e10
[  332.289345][T21262]  do_syscall_64+0xc9/0x1c0
[  332.289374][T21262]  ? clear_bhb_loop+0x25/0x80
[  332.289445][T21262]  ? clear_bhb_loop+0x25/0x80
[  332.289467][T21262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.289488][T21262] RIP: 0033:0x7f49ae28bc1f
[  332.289503][T21262] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  332.289521][T21262] RSP: 002b:00007f49ac8f7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  332.289621][T21262] RAX: ffffffffffffffda RBX: 00007f49ae4a5fa0 RCX: 00007f49ae28bc1f
[  332.289634][T21262] RDX: 000000000000008f RSI: 0000200000000b80 RDI: 00000000000000c8
[  332.289646][T21262] RBP: 00007f49ac8f7090 R08: 0000000000000000 R09: 0000000000000000
[  332.289657][T21262] R10: 000000000000008f R11: 0000000000000293 R12: 0000000000000001
[  332.289669][T21262] R13: 0000000000000000 R14: 00007f49ae4a5fa0 R15: 00007ffedc567ec8
[  332.289688][T21262]  </TASK>
[  332.544160][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6160'.
[  332.553243][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6160'.
[  332.711775][T21286] loop1: detected capacity change from 0 to 512
[  332.744411][T21288] loop6: detected capacity change from 0 to 512
[  332.755727][T21288] EXT4-fs: Ignoring removed oldalloc option
[  332.773871][T21286] EXT4-fs (loop1): 1 orphan inode deleted
[  332.780446][T21288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  332.788586][   T52] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1
[  332.802493][T21286] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.805167][T21288] System zones: 1-12
[  332.845205][T21288] EXT4-fs (loop6): orphan cleanup on readonly fs
[  332.852177][T21288] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6166: Parent and EA inode have the same ino 15
[  332.895316][T21288] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6166: Parent and EA inode have the same ino 15
[  332.915572][T21288] EXT4-fs (loop6): 1 orphan inode deleted
[  333.133654][T21298] loop6: detected capacity change from 0 to 512
[  333.147516][T21298] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6167: Failed to acquire dquot type 1
[  333.161043][T21298] EXT4-fs (loop6): 1 truncate cleaned up
[  333.175954][T21298] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.241321][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6168'.
[  333.563587][   T29] kauditd_printk_skb: 779 callbacks suppressed
[  333.563605][   T29] audit: type=1400 audit(2000000070.240:29608): avc:  denied  { ioctl } for  pid=21303 comm="syz.6.6169" path="socket:[68702]" dev="sockfs" ino=68702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  333.713541][T21311] loop3: detected capacity change from 0 to 764
[  333.724431][T21315] loop1: detected capacity change from 0 to 512
[  333.732545][T21315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  333.747140][T21315] EXT4-fs (loop1): 1 truncate cleaned up
[  333.753474][T21313] loop5: detected capacity change from 0 to 512
[  333.761872][T21311] rock: directory entry would overflow storage
[  333.768122][T21311] rock: sig=0x5850, size=36, remaining=7
[  333.788561][T21313] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  333.795908][T21315] EXT4-fs (loop1): shut down requested (0)
[  333.869695][T21321] loop3: detected capacity change from 0 to 2048
[  333.878592][T21321] EXT4-fs: Ignoring removed mblk_io_submit option
[  333.886532][T21325] loop5: detected capacity change from 0 to 512
[  333.893523][T21325] ext4: Unknown parameter 'measure'
[  333.903511][   T29] audit: type=1326 audit(2000000070.590:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  333.927375][   T29] audit: type=1326 audit(2000000070.590:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  333.951153][   T29] audit: type=1326 audit(2000000070.590:29611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  333.974841][   T29] audit: type=1326 audit(2000000070.590:29612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  333.999730][   T29] audit: type=1326 audit(2000000070.590:29613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  334.007390][T21328] FAULT_INJECTION: forcing a failure.
[  334.007390][T21328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.023332][   T29] audit: type=1326 audit(2000000070.590:29614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  334.036385][T21328] CPU: 1 UID: 0 PID: 21328 Comm: syz.1.6177 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  334.036423][T21328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  334.036466][T21328] Call Trace:
[  334.036476][T21328]  <TASK>
[  334.036486][T21328]  dump_stack_lvl+0xf6/0x150
[  334.036516][T21328]  dump_stack+0x15/0x1a
[  334.036563][T21328]  should_fail_ex+0x261/0x270
[  334.036599][T21328]  should_fail+0xb/0x10
[  334.036684][T21328]  should_fail_usercopy+0x1a/0x20
[  334.036724][T21328]  _copy_from_iter+0xd8/0xd10
[  334.036776][T21328]  ? kmalloc_reserve+0x16e/0x190
[  334.036839][T21328]  ? __build_skb_around+0x199/0x1f0
[  334.036869][T21328]  ? __alloc_skb+0x227/0x320
[  334.036912][T21328]  ? __virt_addr_valid+0x1ed/0x250
[  334.036940][T21328]  ? __check_object_size+0x367/0x510
[  334.036974][T21328]  netlink_sendmsg+0x492/0x720
[  334.037010][T21328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.037056][T21328]  __sock_sendmsg+0x140/0x180
[  334.037099][T21328]  ____sys_sendmsg+0x350/0x4e0
[  334.037138][T21328]  __sys_sendmsg+0x1a0/0x240
[  334.037250][T21328]  __x64_sys_sendmsg+0x46/0x50
[  334.037285][T21328]  x64_sys_call+0x26f3/0x2e10
[  334.037341][T21328]  do_syscall_64+0xc9/0x1c0
[  334.037379][T21328]  ? clear_bhb_loop+0x25/0x80
[  334.037405][T21328]  ? clear_bhb_loop+0x25/0x80
[  334.037433][T21328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.037460][T21328] RIP: 0033:0x7f49ae28d169
[  334.037479][T21328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.037560][T21328] RSP: 002b:00007f49ac8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.037584][T21328] RAX: ffffffffffffffda RBX: 00007f49ae4a5fa0 RCX: 00007f49ae28d169
[  334.037600][T21328] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  334.037616][T21328] RBP: 00007f49ac8f7090 R08: 0000000000000000 R09: 0000000000000000
[  334.037631][T21328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.037648][T21328] R13: 0000000000000000 R14: 00007f49ae4a5fa0 R15: 00007ffedc567ec8
[  334.037671][T21328]  </TASK>
[  334.230373][T21321] siw: device registration error -23
[  334.236187][   T29] audit: type=1326 audit(2000000070.590:29615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  334.300467][   T29] audit: type=1326 audit(2000000070.590:29616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  334.324202][   T29] audit: type=1326 audit(2000000070.590:29617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b8acd169 code=0x7ffc0000
[  334.342548][T21332] loop1: detected capacity change from 0 to 512
[  334.377270][T21332] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6178: Failed to acquire dquot type 1
[  334.381688][T21336] loop3: detected capacity change from 0 to 512
[  334.396888][T21332] EXT4-fs (loop1): 1 truncate cleaned up
[  334.403062][T21332] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.414075][T21336] EXT4-fs (loop3): orphan cleanup on readonly fs
[  334.420911][T21336] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.6179: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  334.465975][T21339] tap0: tun_chr_ioctl cmd 2147767520
[  334.482391][T21336] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.6179: couldn't read orphan inode 13 (err -117)
[  334.495931][T21341] rdma_rxe: rxe_newlink: failed to add bond0
[  334.502524][T21341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6181'.
[  334.584122][T21336] 8021q: adding VLAN 0 to HW filter on device batadv3
[  334.606377][T21336] team0: Port device batadv3 added
[  334.640075][T21336] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  334.646777][T21336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  334.654269][T21336] vhci_hcd vhci_hcd.0: Device attached
[  334.677293][T21336] netlink: 'syz.3.6179': attribute type 10 has an invalid length.
[  334.686589][T21336] team0: Device hsr_slave_0 failed to register rx_handler
[  334.708770][T21348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.717475][T21348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.718071][T21347] loop5: detected capacity change from 0 to 2048
[  334.738028][T21344] vhci_hcd: connection closed
[  334.738199][  T295] vhci_hcd: stop threads
[  334.747284][  T295] vhci_hcd: release socket
[  334.751730][  T295] vhci_hcd: disconnect device
[  334.776678][T21347] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.872644][T21353] loop5: detected capacity change from 0 to 512
[  334.911520][T21353] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  335.063086][T21363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6188'.
[  335.072206][T21363] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6188'.
[  335.165991][T21365] loop5: detected capacity change from 0 to 512
[  335.225864][T21365] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6189: bg 0: block 35: padding at end of block bitmap is not set
[  335.240402][T21365] EXT4-fs (loop5): Remounting filesystem read-only
[  335.247143][T21365] EXT4-fs (loop5): 1 truncate cleaned up
[  335.276800][T21370] loop5: detected capacity change from 0 to 512
[  335.359010][T21370] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6190: Failed to acquire dquot type 1
[  335.396193][T21370] EXT4-fs (loop5): 1 truncate cleaned up
[  335.402345][T21370] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.466181][T21380] loop3: detected capacity change from 0 to 1024
[  335.473635][T21380] EXT4-fs: Ignoring removed bh option
[  335.577563][T21396] loop1: detected capacity change from 0 to 512
[  335.615566][T21396] ext4: Unknown parameter 'measure'
[  335.654138][T21404] loop6: detected capacity change from 0 to 512
[  335.666329][T21405] loop3: detected capacity change from 0 to 764
[  335.684109][T21405] rock: directory entry would overflow storage
[  335.690481][T21405] rock: sig=0x5850, size=36, remaining=7
[  335.709636][T21404] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6203: Failed to acquire dquot type 1
[  335.721865][T21404] EXT4-fs (loop6): 1 truncate cleaned up
[  335.728452][T21404] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.770260][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6206'.
[  335.779354][T21412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6206'.
[  335.814281][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6205'.
[  335.833899][T21418] loop1: detected capacity change from 0 to 512
[  335.848141][T21418] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  335.857260][T21418] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  335.920879][T21426] loop6: detected capacity change from 0 to 764
[  335.930001][T21418] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  335.947809][T21426] rock: directory entry would overflow storage
[  335.954007][T21426] rock: sig=0x5850, size=36, remaining=7
[  335.989507][T21418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  336.012141][T21418] System zones: 0-2, 18-18, 34-34
[  336.045670][T21418] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  336.073805][T21442] loop6: detected capacity change from 0 to 512
[  336.094810][T21418] EXT4-fs (loop1): 1 truncate cleaned up
[  336.117394][T21442] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6216: Failed to acquire dquot type 1
[  336.144067][T21442] EXT4-fs (loop6): 1 truncate cleaned up
[  336.176309][T21442] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.270919][T21429] chnl_net:caif_netlink_parms(): no params data found
[  336.374835][T21466] loop6: detected capacity change from 0 to 512
[  336.398670][T21429] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.405900][T21429] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.424777][T21429] bridge_slave_0: entered allmulticast mode
[  336.440625][T21429] bridge_slave_0: entered promiscuous mode
[  336.445958][T21466] EXT4-fs (loop6): orphan cleanup on readonly fs
[  336.458306][T21429] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.465510][T21429] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.473118][T21429] bridge_slave_1: entered allmulticast mode
[  336.479968][T21429] bridge_slave_1: entered promiscuous mode
[  336.495536][T21466] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.6225: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  336.515132][T21466] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6225: couldn't read orphan inode 13 (err -117)
[  336.538276][T21475] loop5: detected capacity change from 0 to 512
[  336.583385][T21466] 8021q: adding VLAN 0 to HW filter on device batadv14
[  336.603114][T21466] team0: Port device batadv14 added
[  336.611838][T21429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.625130][T21482] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[  336.631767][T21482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  336.639248][T21482] vhci_hcd vhci_hcd.0: Device attached
[  336.653019][T21488] loop1: detected capacity change from 0 to 512
[  336.663933][T21429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.687208][T21488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  336.689924][T21475] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6227: Failed to acquire dquot type 1
[  336.694137][T21488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  336.717957][T21466] netlink: 'syz.6.6225': attribute type 10 has an invalid length.
[  336.729532][T21488] EXT4-fs (loop1): 1 truncate cleaned up
[  336.738189][T21466] team0: Device hsr_slave_0 failed to register rx_handler
[  336.746151][T21475] EXT4-fs (loop5): 1 truncate cleaned up
[  336.759226][T21475] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.787289][T21483] vhci_hcd: connection closed
[  336.787539][ T8967] vhci_hcd: stop threads
[  336.796618][ T8967] vhci_hcd: release socket
[  336.801091][ T8967] vhci_hcd: disconnect device
[  336.813256][T21429] team0: Port device team_slave_0 added
[  336.845417][   T23] vhci_hcd: vhci_device speed not set
[  336.851740][T21429] team0: Port device team_slave_1 added
[  336.853040][T21479] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  336.926230][T21429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.933232][T21429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.959307][T21429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.971456][T21429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.978555][T21429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.004589][T21429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.037942][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6235'.
[  337.149059][T21429] hsr_slave_0: entered promiscuous mode
[  337.149289][T21509] loop5: detected capacity change from 0 to 512
[  337.162162][T21509] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  337.171277][T21509] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  337.175728][T21429] hsr_slave_1: entered promiscuous mode
[  337.185991][T21429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  337.190324][T21509] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  337.193541][T21429] Cannot create hsr debugfs directory
[  337.215192][T21509] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  337.223238][T21509] System zones: 0-2, 18-18, 34-34
[  337.289843][T21509] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  337.311121][T21518] loop3: detected capacity change from 0 to 512
[  337.355818][T21509] EXT4-fs (loop5): 1 truncate cleaned up
[  337.365060][T21521] loop6: detected capacity change from 0 to 512
[  337.372847][T21518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  337.383139][T21521] EXT4-fs (loop6): orphan cleanup on readonly fs
[  337.398554][T21521] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.6240: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0)
[  337.424392][T21518] EXT4-fs (loop3): 1 truncate cleaned up
[  337.433020][T21521] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6240: couldn't read orphan inode 13 (err -117)
[  337.444921][T21429] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  337.464362][T21429] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  337.474062][T21429] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  337.487693][T21518] EXT4-fs (loop3): shut down requested (0)
[  337.525420][T21521] 8021q: adding VLAN 0 to HW filter on device batadv15
[  337.534071][T21521] team0: Port device batadv15 added
[  337.545657][T21429] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  337.553811][T21521] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[  337.560519][T21521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  337.568054][T21521] vhci_hcd vhci_hcd.0: Device attached
[  337.594948][T21521] netlink: 'syz.6.6240': attribute type 10 has an invalid length.
[  337.617046][T21521] team0: Device hsr_slave_0 failed to register rx_handler
[  337.624594][T21530] loop5: detected capacity change from 0 to 512
[  337.659600][T21534] loop3: detected capacity change from 0 to 512
[  337.681054][T21531] vhci_hcd: connection closed
[  337.681480][  T295] vhci_hcd: stop threads
[  337.690546][  T295] vhci_hcd: release socket
[  337.694981][  T295] vhci_hcd: disconnect device
[  337.716442][T21429] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.733801][T21530] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6243: Failed to acquire dquot type 1
[  337.752294][T21429] 8021q: adding VLAN 0 to HW filter on device team0
[  337.770392][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.777514][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.784766][T21534] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6242: Failed to acquire dquot type 1
[  337.799252][T21530] EXT4-fs (loop5): 1 truncate cleaned up
[  337.811034][T21530] EXT4-fs mount: 236 callbacks suppressed
[  337.811119][T21530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.831703][   T23] vhci_hcd: vhci_device speed not set
[  337.838375][T21530] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.851531][T21534] EXT4-fs (loop3): 1 truncate cleaned up
[  337.863866][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.871001][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.884663][T21534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.911970][T21534] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.932324][T21540] loop1: detected capacity change from 0 to 512
[  337.955141][T21540] EXT4-fs: Ignoring removed oldalloc option
[  337.967413][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.977924][T21540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  337.986493][T21540] System zones: 1-12
[  337.990730][T21540] EXT4-fs (loop1): orphan cleanup on readonly fs
[  337.997982][T21540] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6244: Parent and EA inode have the same ino 15
[  338.010849][T21540] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6244: Parent and EA inode have the same ino 15
[  338.029891][T21540] EXT4-fs (loop1): 1 orphan inode deleted
[  338.041969][T21429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.047166][T21540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  338.113886][T21551] loop5: detected capacity change from 0 to 512
[  338.203894][T21551] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6246: Failed to acquire dquot type 1
[  338.225897][T17356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.260282][T21551] EXT4-fs (loop5): 1 truncate cleaned up
[  338.266645][T21551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.279433][T21551] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.306234][T13509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.328980][T21429] veth0_vlan: entered promiscuous mode
[  338.355571][T21429] veth1_vlan: entered promiscuous mode
[  338.385059][T20099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.401275][T21429] veth0_macvtap: entered promiscuous mode
[  338.418908][T20262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.430627][T21429] veth1_macvtap: entered promiscuous mode
[  338.436885][T21573] loop5: detected capacity change from 0 to 764
[  338.450121][T21575] loop1: detected capacity change from 0 to 512
[  338.457692][T21575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  338.460839][T21429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.478296][T21429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.488140][T21429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.498594][T21429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.509242][ T3369] ==================================================================
[  338.517342][ T3369] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages
[  338.525312][ T3369] 
[  338.525321][ T3369] read-write to 0xffff8881004c11f0 of 8 bytes by task 21575 on cpu 1:
[  338.525341][ T3369]  __filemap_add_folio+0x5b5/0x7f0
[  338.525375][ T3369]  filemap_add_folio+0x9f/0x1b0
[  338.525401][ T3369]  __filemap_get_folio+0x340/0x6b0
[  338.535905][ T3369]  bdev_getblk+0x173/0x3b0
[  338.555408][T21575] EXT4-fs (loop1): 1 truncate cleaned up
[  338.555415][ T3369]  __ext4_get_inode_loc+0x328/0x9a0
[  338.561415][T21575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.566229][ T3369]  __ext4_iget+0x312/0x1e90
[  338.566256][ T3369]  ext4_fill_super+0x2b5f/0x3580
[  338.566286][ T3369]  get_tree_bdev_flags+0x2b4/0x330
[  338.566321][ T3369]  get_tree_bdev+0x1f/0x30
[  338.566351][ T3369]  ext4_get_tree+0x1c/0x30
[  338.566372][ T3369]  vfs_get_tree+0x56/0x1e0
[  338.566405][ T3369]  do_new_mount+0x246/0x6b0
[  338.566439][ T3369]  path_mount+0x49b/0xb30
[  338.566470][ T3369]  __se_sys_mount+0x28f/0x2e0
[  338.566503][ T3369]  __x64_sys_mount+0x67/0x80
[  338.566540][ T3369]  x64_sys_call+0xd11/0x2e10
[  338.566567][ T3369]  do_syscall_64+0xc9/0x1c0
[  338.566597][ T3369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.566621][ T3369] 
[  338.566629][ T3369] read to 0xffff8881004c11f0 of 8 bytes by task 3369 on cpu 0:
[  338.566647][ T3369]  nr_blockdev_pages+0x7c/0xd0
[  338.566670][ T3369]  si_meminfo+0x87/0xd0
[  338.566702][ T3369]  update_defense_level+0x4b/0x5c0
[  338.566737][ T3369]  defense_work_handler+0x1f/0x80
[  338.566769][ T3369]  process_scheduled_works+0x4de/0xa20
[  338.580057][T21573] rock: directory entry would overflow storage
[  338.583354][ T3369]  worker_thread+0x52c/0x710
[  338.588317][T21573] rock: sig=0x5850, size=36, remaining=7
[  338.593400][ T3369]  kthread+0x4b7/0x540
[  338.694414][ T3369]  ret_from_fork+0x4b/0x60
[  338.698859][ T3369]  ret_from_fork_asm+0x1a/0x30
[  338.703805][ T3369] 
[  338.706127][ T3369] value changed: 0x0000000000000001 -> 0x0000000000000002
[  338.713237][ T3369] 
[  338.715560][ T3369] Reported by Kernel Concurrency Sanitizer on:
[  338.721710][ T3369] CPU: 0 UID: 0 PID: 3369 Comm: kworker/0:2 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  338.733866][ T3369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  338.743929][ T3369] Workqueue: events_long defense_work_handler
[  338.750017][ T3369] ==================================================================
[  338.764065][T21429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.774941][T21575] EXT4-fs (loop1): shut down requested (0)
[  338.793282][T21429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.803974][T21429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.813971][T21429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.824461][T21429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.842577][T21429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.852921][T21580] rdma_rxe: rxe_newlink: failed to add bond0
[  338.855661][T21429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.867802][T21429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.876402][T21580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6252'.
[  338.885664][T21429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.894452][T21429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.915758][T20099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.031934][T21580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.041355][T21580] misc raw-gadget: fail, usb_gadget_register_driver returned -16