last executing test programs:

5.64484038s ago: executing program 4 (id=440):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x400001, 0xffffffffffffffff, 0x0)

5.64374578s ago: executing program 4 (id=441):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x4, 0x4)
listen(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0xf6, @local, 0x751}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000002c0)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff, 0x4, 0x1}, 0x48)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000900)={[{@fat=@time_offset={'time_offset', 0x3d, 0x11e}}, {@fat=@debug}, {@fat=@check_strict}, {@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@dmask={'dmask', 0x3d, 0x651}}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@nodots}], [{@fowner_gt={'fowner>', 0xee00}}, {@uid_lt}, {@uid_eq}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@measure}]}, 0xfd, 0x1d8, &(0x7f0000000d80)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r3, r2, 0x0, 0x80000000)

5.568521877s ago: executing program 4 (id=445):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1b08450, &(0x7f00000001c0)=ANY=[], 0x2, 0x593, &(0x7f0000000d40)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28)
sendfile(r0, r1, &(0x7f0000000100), 0x10001)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x4, 0x8146)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x9c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x9, 0x10001, 0x0, 0x1}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x3}}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x4}}]}}}]}, 0x9c}}, 0x0)
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/89, 0x128000, 0x800}, 0x20)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r11=>0x0})
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000240)=0x20, 0x4)
bind$xdp(r9, &(0x7f00000002c0)={0x2c, 0x0, r11}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf250b000000680001800800030002000000140002006970366772657461703000000000000008000300020000001400020076657468305f746f5f626f6e640000000800030001000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="140002007866726d3000000000000000000000000c00018008000100", @ANYRESHEX=r6, @ANYBLOB="58000180080003000200000014000200697036677265746171300000000000001400020065727370616e3000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000500000c04d494006d616305b5030c30000000000000000034000180140002007665746850845ca7b9a6315f746f5f7465616d000000080003000300000014000200766972745f776966693007d3a0f4e5f25c30646b0aa14d54d4e995e72229dfdfae4f2bf8281a1da485f487fa674f9dccb1e805d5a274b6d75e8d8643ff477bee198bb0b6707e692ab923d92c5057bdf2e0858a45fa1a27f585c2009570d1"], 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x4008000)

5.324425477s ago: executing program 4 (id=451):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r3=>0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r3, &(0x7f0000000300)='./file0\x00')
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0))
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x0, 0x0, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r4, 0x2007ffb)
preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000200)={0xe, {0x7, 0x4, 0x6, 0xd9, "ab04de453cc8fb6c38fd9efdc7bf5dee549c4a043a7ab76a8d7a3b41f9577c37d407d951f1ccd9d642948be5beb721923aa74465a350f675bf0223b0e1f5127928f954c73723172f7f20e2caa6ec34c21e65f51ee785c0aeb21d2e4cfffcf73689ec4fd527a4a59fb47766c1be4375e7b1fb9b10ffd6959b93a7cc9d65457a19f562f75e2798b67c7e33f5230866cb8a48ef920c74bc6d37c02e2924a569ea3cbd16c5bff8656cc7d57f3bee68c674bc207bad7f0ab755a7336c70684759f14fe1cbcbbc3f7ff5f6eed52d85121b93c563bbf6a07ff73dbb33"}}, 0xe5)
r6 = getpid()
prlimit64(r6, 0xd, &(0x7f0000000040)={0x9, 0x1000}, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.251306334s ago: executing program 2 (id=458):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect)

4.128778004s ago: executing program 2 (id=459):
set_mempolicy(0x6, &(0x7f0000000000)=0x5, 0xff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.128565614s ago: executing program 2 (id=460):
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") (async)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0)

4.05913373s ago: executing program 2 (id=461):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fffffff}}, {@discard}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080))

3.904151962s ago: executing program 2 (id=462):
prctl$PR_SET_PTRACER(0x17, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)

3.489034486s ago: executing program 2 (id=465):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xa, 0x9, 0x0, 0x8, 0x0, 0x0, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in=@private, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}]}, 0x40}, 0x1, 0x300}, 0x0)

2.20564078s ago: executing program 0 (id=477):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001200)={0x0, 0x4}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37}, 0x90)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r3, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xffffffff})
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x40505331, &(0x7f0000000500))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0x80045300, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r6}, 0x10)
prctl$PR_SET_THP_DISABLE(0x35, 0x1)
tkill(r2, 0x7)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000009a0000004100733300066f000000000000000000000000000040185b0dadff2abbc359e4e6cc761f8b11095791485b8cc01873f7f94f575fd928f93fc746b195fb7662404025c2b9b9dced683aed3ab438d24a313737173fdfb056dddb968b067865"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r7], 0x7c}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)

1.281397376s ago: executing program 0 (id=484):
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000003c0100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.281059926s ago: executing program 0 (id=485):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r7, 0x0, r6, 0x0, 0x6, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setpipe(r6, 0x407, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

927.525045ms ago: executing program 3 (id=490):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x32)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)
r1 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300))
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001000111868090707a640000f0021ff3f04000000170a00170000000004003700100003003a6325640000000011e6a933f44dc48f57", 0x39}], 0x1)

844.400821ms ago: executing program 3 (id=491):
prctl$PR_GET_TSC(0x19, &(0x7f0000000380))
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x3]}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000480))
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x68, @remote}, {0xa, 0x4e22, 0x0, @loopback, 0x9}, 0x1, {[0xfc3, 0x100, 0x1, 0x0, 0x0, 0x80, 0x8a1, 0xfffffffe]}}, 0x5c)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000780)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000]}}, 0x5c)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="bb5c97abc30abccbc14f46e957965fa268d885b8c0b042bed1723c67d6223315fbf5eb5f67fab3390b862ea40118fd2a3796947ffd0228f50164cbaa2d072a3e42af8c2af6d2e9bfb424283d52b6c2b277d8489703d503320a110b2b751569811cf6f33e1043139529851cfa3ca1992155f0c68acf6d657f9b1f4e30f582112bdf0ee12098918892dc3531c5b2d0809d85699f85e5838ee05844f8717dab4ba0bebc28ea0e4513ccd70fa4f77839f5570bb27e91b5276ef6158ad0819cb0acc654e91bc0e3d718a9bdd7c95ba94c32355a2884c2be8816ad3cc268b6cb1ecd0cab8475b6cd", @ANYBLOB="01000000000000000000160000002000018008000100", @ANYRES64, @ANYBLOB], 0x34}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0x6, 0x8, 0x9, 0x38a, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x90)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf2514000000080006000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', <r6=>0x0, 0x29, 0x8, 0xac, 0xffff, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x8, 0x8000, 0x80, 0x3}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x8, r6, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r7=>0x0}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00')
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r9=>0x0, 0x4, 0x1, 0x7, 0xfff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x40, 0x400, 0x10000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0x2, 0x7, 0x3831, r5, 0x80000005, '\x00', r9, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x1}, 0x48)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="aa396e00040050ec00dd3d9507120851b7720c0cf11775e2a0e00e57351e22dd02fc6829425a69bec2add15239d044db840e00", @ANYRES16=r10, @ANYRESDEC=r7, @ANYRES16=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x894}, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xad745bccf68cc1c)

756.155889ms ago: executing program 3 (id=492):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0800001800110100000000000000000a00400000000006"], 0x1c}}, 0x20000000)

754.386289ms ago: executing program 3 (id=493):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0x1)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

753.983059ms ago: executing program 3 (id=494):
r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0x1, 0x1c7, &(0x7f0000001480)="$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") (async)
sched_setaffinity(0x0, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r0, 0x0) (async)
r1 = socket(0x28, 0x803, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="48000000100105070000000000000000000000007386169f50af20766b1eed8f9e3b513553fba9e2df7631f4b57f00754f995d81c2b9afaf716f144fcc35f6291271e2424f52b9b9627bde4c8f3e15f46e000000429b0000000000f04f485f5c6791c16415ea5fb5804c925e7765e7213136c7f47ad30abc610ce98b79c702cdfc965f34f4b041235071726f510e6d927b17fed7933e700a139d34edd5544b1761c52b1bdf0b1de2a30eeefc873accf515ee200db9ef0eaa5e6f2f906d6306c9d5dadf555410dc72b2d04eb1c144370d32ab6ed227feab1336bfa028b3516f2cfc10c1222c4efded0d00af80e3f8a71a813b4e768f60af4d1a9ac498b0028cf37d9b02214ee131b47699cf1792842188893eb29ed8e0b8f2b3b7012c1774591af46d2b21df95f15520b4c86a16a034e6437d73c11b4ad90fec13b2d4db3a562051344044b2a2af450cc46716c4b498bbb580988230f332ae55211763", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=@newtclass={0x58, 0x28, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xd}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x32}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_red={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@deltclass={0x54, 0x29, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {0xf, 0xffff}, {0x10, 0xf}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000003, &(0x7f0000001280)={[], [{@fowner_gt}, {@fsname={'fsname', 0x3d, '@#\\.@,/}X{$'}}, {@fowner_gt}]}, 0x1, 0x4c3, &(0x7f0000000a00)="$eJzs3V9rW28dAPDvOW1+7k9/NlOROXAON+mGLmlXtxWROUH0aqDO+1rbtJSmTWnSbS1DO3wBgogKXnnljeALEGQvQYSB3ouKIrrphRe6I0lO5tYla2Vpz2g/H3iW5zlPku/3yZqTPOc8nARwbF2IiNsRMRIRVyJiPN+e5mW23djp3u/Z04fz7ZJElt39WxJJvq33XO32aESc7j4kTkTE178S8a3k9bjNre2VuXq9tpG3q63V9Wpza/vq8urcUm2ptjY9PXVj5ubM9ZnJLPdW4yxHxK0v/emH3/vZl2/96jP3fz/7l8vfbqf1+Y92+18exzB1h17qvBY97ddo4yCCFWAkH0+p6EQAANi3D0XEJzvf/8djpPNtDgAAADhKsi+Mxb+TiAwAAAA4stKIGIskreTrfcciTSuV7hrej8SptN5otj692NhcW2j3RZSjlC4u12uT+VrhcpSSdnsqX2Pba1/b1Z6OiDMR8YPxk512Zb5RXyj64AcAAAAcE6d3zf//OZ526gAAAMARUy46AQAAAODAmf8DAADA0Wf+DwAAAEfaV+/caZes9/vXC/e2Nlca964u1JorldXN+cp8Y2O9stRoLHWu2be61/PVG431z8ba5oNqq9ZsVZtb27Orjc211uzyKz+BDQAAAByiM594/LskInY+d7JTIr8OIMAr/lh0AsAwjRSdAFCY0aITAApTKjoBoHDJHv0DF+/8evi5AAAAB2PiY6+f/38v73NsAI42a30A4Phx/h+Or5IVgHDsfXCP/rc//59l/1dCAADA0I11SpJW8nOBY5GmlUrE+52fBSgli8v12mQ+P/jteOkD7fZU55HJnmuGAQAAAAAAAAAAAAAAAAAAAAAAAICuLEsiAwAAAI60iPTPSedq/hET45fGdh8feC/513jnNiLu/+Tujx7MtVobU+3tf3+xvfXjfPu1Io5gAAAAALv15um9eTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNOzpw/ne+Uw4/71ixFR7hd/NE50bk9EKSJO/SOJ0Zcel0TEyBDi7zyKiLP94ifxPMuycp5Fv/gnDzh+ufPS9I+fRsTpIcSH4+xxe/9zu9/7L40Lndv+77/RvLytwfu/9MX+b2TA/uf9fcY49+QX1YHxH0WcG+2//+nFTwbEv7jP+N/8xvb2oL7spxETfT9/kldiVVur69Xm1vbV5dW5pdpSbW16eurGzM2Z6zOT1cXlei3/t2+M73/8l8/fNP5TA+KX9xj/pX2O/z9PHjz9cLda6hf/8sX+n79nB8RP88++T+X1dv9Er77Trb/s/M9/c/5N418YMP69/v8v73P8V7723T/s864AwCFobm2vzNXrtQ0VlQIr2Xe6f4/vSj7dSvZupFFIpeg9EwAAMGz/+9JfdCYAAAAAAAAAAAAAAAAAAABwfB3G5cR2x9wpZqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/03wAAAP//swPfow==") (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67a}]}, 0x10) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
shmctl$IPC_SET(0x0, 0x1, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000100)={0x0, "22c9aaea98c89ead332afcf36060bc80"})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000001b00)=ANY=[@ANYBLOB="18f9ff00000000004000b3a75d302000000000000e00001f03ff0400e10000009570cb179bd022cdf59dc0e978c28173ad265fbe43dd196ded50df74b77e0738d7ff1cd7aee87a87d76cce8b67f6dbe3bafa52aa9905007b62a07f9b2ef48094cb16d3b84ad463c143a30f4ab952e7a94f6c01b383bffdf63afc0b6f82a055c50fab5be8c267a621cf76565fe25252ae25001c51ee72776e8f50d94fb8f33ca530a26f74f3b62b01cc90ab98ed2d506e9f3cd28bc35985046d96f8cac9a69f673a1827651478b9c2e8f94b8ab36fa976d224dfce0589d634e014abc57e5e3e6981a67b5355153fd6ada191ae57887f914153ad5e3183197523e10565a86d0e0ec248ed8a0801d0ba10b3601bbc3d9e9786d3896e14a81e89c04a7dd4"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10)

715.929832ms ago: executing program 3 (id=495):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a4, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x0, "e3630dde215f3da533f861c33b10bf7dcb03d1e0dc304addd2f5580dc9771195"}}]}, 0x1a4}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1, 0x1}, 0x48)
mkdir(0x0, 0xd3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
timer_settime(0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000240), 0x4001)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240))
ioctl$TCSETSW(r6, 0x5403, &(0x7f00000002c0)={0xfffffd4a, 0x0, 0x0, 0x3, 0x0, "10120dfe0ef7f0200000ff490a0180002ae9ff"})
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000018c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r7, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0], 0x0, 0xd, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x72, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000500000003000000000000010000000060007801040000000000000e0400000000000000040000000000000a04000000000000000000000e0000000001000000440000000000f70d03000000010000000000000000000003000000000300000000000000ff0000000000005f00"], &(0x7f0000001580)=""/172, 0x81, 0xac, 0x1}, 0x20)

555.857045ms ago: executing program 1 (id=496):
set_mempolicy(0x6, &(0x7f0000000000)=0x5, 0xff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

476.629072ms ago: executing program 1 (id=497):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

385.140679ms ago: executing program 1 (id=498):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = open(0x0, 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r3 = socket(0x2b, 0x1, 0x1)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, &(0x7f0000000280))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x95c0, 0x3ff}, 0x48)

372.88595ms ago: executing program 4 (id=452):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1004000, 0xffffffffffffffff, 0x0)

345.418492ms ago: executing program 0 (id=499):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, 0x0, 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect)

300.954306ms ago: executing program 4 (id=500):
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2050a0c)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x2000000b)
read(r3, 0x0, 0x0) (async)
close(r3) (async)
close(r2)
connect$vsock_stream(r0, &(0x7f0000000040), 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/206, 0xce}}], 0x1, 0x0, 0x0) (async)
setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f0000839000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x5, 0x1}}}, 0x24}}, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (rerun: 64)

299.782486ms ago: executing program 1 (id=501):
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './bus\x00'})
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0xa, 0x2, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26}, 0x34}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth1\x00'})
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b00), 0x200030, 0x0)
mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000880)={[{@subsystem='net_cls'}, {@subsystem='blkio'}], [{@euid_gt}, {@audit}, {@subj_role={'subj_role', 0x3d, '/proc/bus/input/devices\x00'}}]})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0xa, 0x1}, 0x7, 0x0, &(0x7f0000000180)="83e609e6d090788f6d220d213d7d2d0f03aa056ba6f6b94ae20c02c2dcd5a483226f1e43c426d64da40b565667b62b314321909b662ebeb2270c15de647189f74bfd2ef1de6ad6e7eaf67a3c367e29e739d52e7f01b77809ceaf0bf2ac63574c0698d46e18ef3123333d694f000e46c049c92e45f01d5767", 0x78, 0x2, 0x0, 0xa, 0xaf40, 0x400, &(0x7f0000000340)="1410781207aecb5beaf38e0f7ab8797df1b81ea91a825d50e6fb06bc", [{0x5, 0xb}, {0x87c2, 0x6, 0x8}, {0x3, 0x5}, {0x255, 0x2}, {0x6, 0x2, 0x8}, {0x25b, 0x8, 0x5}, {0xfffffffc, 0x9}, {0x6, 0xc}, {0x0, 0x636639b7}, {0x200, 0x8, 0x4}]})
sched_setscheduler(0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0)

136.732279ms ago: executing program 0 (id=502):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0x9b}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000040)={@remote, @remote, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "21ae1043b1ac3135"}}}}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000240)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

136.024899ms ago: executing program 1 (id=503):
syz_clone3(&(0x7f0000000240)={0x40000000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, {0x23}, &(0x7f00000000c0)=""/215, 0xd7, &(0x7f00000001c0)=""/22, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58)
r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/icmp6\x00')
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x8, 0x2})
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000340))
r4 = socket$kcm(0x29, 0x5, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x65765000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x40010, r4, 0x502000)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
write$selinux_validatetrans(r3, &(0x7f00000003c0)={'system_u:object_r:systemd_systemctl_exec_t:s0', 0x20, 'system_u:object_r:event_device_t:s0', 0x20, 0x6, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x7e)
uname(&(0x7f0000000440)=""/185)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000540)=0x1c, 0x4)
sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x4)
r5 = openat$cgroup_ro(r3, &(0x7f00000005c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
getsockopt$sock_int(r5, 0x1, 0x26, &(0x7f0000000600), &(0x7f0000000640)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
r6 = accept4$tipc(r3, 0x0, &(0x7f0000000680), 0x80000)
getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000740), &(0x7f0000000780)=0x4)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000008c0)=0x5, 0x4)
r7 = open(&(0x7f0000000900)='./file0\x00', 0x200200, 0xc0)
getpeername(r7, &(0x7f0000000940)=@ethernet={0x0, @multicast}, &(0x7f00000009c0)=0x80)
r8 = socket$netlink(0x10, 0x3, 0x6)
uname(&(0x7f0000000a00)=""/19)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{0x2, 0x8, 0x4, 0x80000000}]})
openat$zero(0xffffffffffffff9c, &(0x7f0000000c00), 0x395c00, 0x0)

82.403684ms ago: executing program 0 (id=504):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=[@sndinfo={0x20, 0x84, 0x2, {0x300, 0x41, 0x2, 0x3}}], 0x20, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000005000000000000000018040000", @ANYBLOB="fe22694e145cc5952c38edc7713f531c39cbd64b7cbac8c697478f9669723a3aa5cb3905047a2e3c25bab692f3667a8f34f75468484f2ca3f2650daf3de62215129918edd65bacbafd5f8ddb6f59bdd42eb96b93b2b6c261b4787c7f8895a3cb524a669b281780c63da0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x5f8, &(0x7f00000012c0)={@multicast, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '=.R', 0x0, "b09809"}, "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"}}}}}, 0x0)

0s ago: executing program 1 (id=505):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000800)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0)
r5 = syz_io_uring_setup(0xf3b, &(0x7f0000000480), &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r0, 0x47fa, 0x400000, 0x0, 0x0, 0x0)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
statx(r8, &(0x7f0000000040)='./bus\x00', 0x100, 0x800, &(0x7f0000000940))

kernel console output (not intermixed with test programs):

89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.413999][ T3542] RSP: 002b:00007f92b5057048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   36.422515][ T3542] RAX: ffffffffffffffda RBX: 00007f92b6565f80 RCX: 00007f92b63d73b9
[   36.430532][ T3542] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005
[   36.438498][ T3542] RBP: 00007f92b50570a0 R08: 0000000000000000 R09: 0000000000000000
[   36.446602][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   36.454615][ T3542] R13: 000000000000000b R14: 00007f92b6565f80 R15: 00007ffe8c38a228
[   36.462620][ T3542]  </TASK>
[   36.469684][ T3533] bridge_slave_1: left allmulticast mode
[   36.475434][ T3533] bridge_slave_1: left promiscuous mode
[   36.481379][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.492580][ T3533] bridge_slave_0: left allmulticast mode
[   36.498507][ T3533] bridge_slave_0: left promiscuous mode
[   36.504204][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.513660][ T3545] loop0: detected capacity change from 0 to 2048
[   36.536291][ T3545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.559629][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[   36.708076][ T3565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3565 comm=syz.3.49
[   36.823942][   T28] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   36.838976][   T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   36.851534][   T28] EXT4-fs (loop0): This should not happen!! Data will be lost
[   36.851534][   T28] 
[   36.861231][   T28] EXT4-fs (loop0): Total free blocks count 0
[   36.867290][   T28] EXT4-fs (loop0): Free/Dirty block details
[   36.873200][   T28] EXT4-fs (loop0): free_blocks=2415919104
[   36.879012][   T28] EXT4-fs (loop0): dirty_blocks=8192
[   36.884409][   T28] EXT4-fs (loop0): Block reservation details
[   36.890407][   T28] EXT4-fs (loop0): i_reserved_data_blocks=512
[   36.907730][   T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   36.950165][ T3567] hub 6-0:1.0: USB hub found
[   36.954839][ T3567] hub 6-0:1.0: 8 ports detected
[   36.973968][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.981208][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.003135][ T3570] bridge0: entered allmulticast mode
[   37.106548][ T3582] FAULT_INJECTION: forcing a failure.
[   37.106548][ T3582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   37.119680][ T3582] CPU: 0 UID: 0 PID: 3582 Comm: syz.3.54 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   37.130202][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   37.140330][ T3582] Call Trace:
[   37.143694][ T3582]  <TASK>
[   37.146639][ T3582]  dump_stack_lvl+0xf2/0x150
[   37.151313][ T3582]  dump_stack+0x15/0x20
[   37.155573][ T3582]  should_fail_ex+0x229/0x230
[   37.160343][ T3582]  should_fail+0xb/0x10
[   37.164531][ T3582]  should_fail_usercopy+0x1a/0x20
[   37.169589][ T3582]  _copy_to_user+0x1e/0xa0
[   37.174034][ T3582]  simple_read_from_buffer+0xa0/0x110
[   37.179493][ T3582]  proc_fail_nth_read+0xfc/0x140
[   37.184519][ T3582]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   37.190123][ T3582]  vfs_read+0x1a2/0x6e0
[   37.194363][ T3582]  ? __rcu_read_unlock+0x4e/0x70
[   37.199343][ T3582]  ? __fget_files+0x1da/0x210
[   37.204050][ T3582]  ksys_read+0xeb/0x1b0
[   37.208278][ T3582]  __x64_sys_read+0x42/0x50
[   37.212820][ T3582]  x64_sys_call+0x2a36/0x2e00
[   37.217521][ T3582]  do_syscall_64+0xc9/0x1c0
[   37.222075][ T3582]  ? clear_bhb_loop+0x55/0xb0
[   37.225696][ T3588] loop4: detected capacity change from 0 to 2048
[   37.226787][ T3582]  ? clear_bhb_loop+0x55/0xb0
[   37.226856][ T3582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.226889][ T3582] RIP: 0033:0x7f92b63d5dfc
[   37.226907][ T3582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[   37.267879][ T3582] RSP: 002b:00007f92b5057040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   37.276377][ T3582] RAX: ffffffffffffffda RBX: 00007f92b6565f80 RCX: 00007f92b63d5dfc
[   37.284352][ T3582] RDX: 000000000000000f RSI: 00007f92b50570b0 RDI: 0000000000000006
[   37.292326][ T3582] RBP: 00007f92b50570a0 R08: 0000000000000000 R09: 0000000000000000
[   37.300374][ T3582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   37.308439][ T3582] R13: 000000000000000b R14: 00007f92b6565f80 R15: 00007ffe8c38a228
[   37.316419][ T3582]  </TASK>
[   37.337963][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.399311][ T3599] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   37.425360][   T55] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   37.441256][   T55] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   37.453495][   T55] EXT4-fs (loop4): This should not happen!! Data will be lost
[   37.453495][   T55] 
[   37.463238][   T55] EXT4-fs (loop4): Total free blocks count 0
[   37.469286][   T55] EXT4-fs (loop4): Free/Dirty block details
[   37.475195][   T55] EXT4-fs (loop4): free_blocks=2415919104
[   37.481001][   T55] EXT4-fs (loop4): dirty_blocks=16
[   37.486179][   T55] EXT4-fs (loop4): Block reservation details
[   37.492174][   T55] EXT4-fs (loop4): i_reserved_data_blocks=1
[   37.500463][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.568501][ T3603] loop4: detected capacity change from 0 to 128
[   37.593051][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.600432][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.635248][ T3608] bridge0: entered allmulticast mode
[   37.883855][ T3617] loop0: detected capacity change from 0 to 2048
[   37.897057][ T3617] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.66: bad orphan inode 8192
[   37.907799][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.934369][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.517576][ T3624] bond0: entered promiscuous mode
[   38.522726][ T3624] bond_slave_0: entered promiscuous mode
[   38.528574][ T3624] bond_slave_1: entered promiscuous mode
[   38.534786][ T3624] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   38.542714][ T3624] bond0: left promiscuous mode
[   38.548127][ T3624] bond_slave_0: left promiscuous mode
[   38.553838][ T3624] bond_slave_1: left promiscuous mode
[   38.682846][ T3639] netlink: 'syz.4.72': attribute type 6 has an invalid length.
[   38.713074][ T3643] loop4: detected capacity change from 0 to 128
[   38.721976][ T3643] xt_ecn: cannot match TCP bits for non-tcp packets
[   38.730525][   T29] kauditd_printk_skb: 94 callbacks suppressed
[   38.730537][   T29] audit: type=1400 audit(1722604611.978:229): avc:  denied  { read } for  pid=3642 comm="syz.4.73" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.822351][ T3645] proc: Bad value for 'gid'
[   38.822352][   T29] audit: type=1400 audit(1722604612.058:230): avc:  denied  { remount } for  pid=3644 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   38.848160][ T3645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   38.854685][ T3645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   38.862691][ T3645] vhci_hcd vhci_hcd.0: Device attached
[   38.868696][ T3646] vhci_hcd: cannot find the pending unlink 53665
[   38.871202][   T29] audit: type=1400 audit(1722604612.108:231): avc:  denied  { setopt } for  pid=3644 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.875191][ T3646] vhci_hcd: connection closed
[   38.894671][   T29] audit: type=1400 audit(1722604612.108:232): avc:  denied  { write } for  pid=3644 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.897170][   T55] vhci_hcd: stop threads
[   38.899542][   T29] audit: type=1400 audit(1722604612.108:233): avc:  denied  { connect } for  pid=3644 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.899566][   T29] audit: type=1400 audit(1722604612.108:234): avc:  denied  { name_connect } for  pid=3644 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   38.918828][   T55] vhci_hcd: release socket
[   38.967668][   T55] vhci_hcd: disconnect device
[   39.035964][ T3573] bridge_slave_1: left allmulticast mode
[   39.041735][ T3573] bridge_slave_1: left promiscuous mode
[   39.047687][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.057152][ T3573] bridge_slave_0: left allmulticast mode
[   39.062880][ T3573] bridge_slave_0: left promiscuous mode
[   39.068668][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.140074][ T3650] syzkaller0: entered promiscuous mode
[   39.145580][ T3650] syzkaller0: entered allmulticast mode
[   39.155048][   T29] audit: type=1400 audit(1722604612.398:235): avc:  denied  { relabelfrom } for  pid=3648 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   39.174832][   T29] audit: type=1400 audit(1722604612.398:236): avc:  denied  { relabelto } for  pid=3648 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   39.202661][ T3612] bridge_slave_1: left allmulticast mode
[   39.208506][ T3612] bridge_slave_1: left promiscuous mode
[   39.214230][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.228334][ T3612] bridge_slave_0: left allmulticast mode
[   39.234022][ T3612] bridge_slave_0: left promiscuous mode
[   39.239744][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.400678][ T3661] loop2: detected capacity change from 0 to 2048
[   39.407469][   T29] audit: type=1400 audit(1722604612.648:237): avc:  denied  { read } for  pid=3659 comm="iou-wrk-3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.433378][   T29] audit: type=1400 audit(1722604612.678:238): avc:  denied  { create } for  pid=3659 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   39.477403][ T3661]  loop2: p1 < > p4
[   39.481095][ T3666] bond0: entered promiscuous mode
[   39.486424][ T3666] bond_slave_0: entered promiscuous mode
[   39.492205][ T3666] bond_slave_1: entered promiscuous mode
[   39.499406][ T3666] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   39.503216][ T3661] loop2: p4 size 8388608 extends beyond EOD, truncated
[   39.519891][ T3666] bond0: left promiscuous mode
[   39.524778][ T3666] bond_slave_0: left promiscuous mode
[   39.530340][ T3666] bond_slave_1: left promiscuous mode
[   39.987382][ T3694] hub 6-0:1.0: USB hub found
[   39.993347][ T3694] hub 6-0:1.0: 8 ports detected
[   40.382683][ T3701] loop0: detected capacity change from 0 to 512
[   40.408907][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.421818][ T3701] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.852144][ T3722] loop2: detected capacity change from 0 to 2048
[   40.860887][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.868214][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.892711][ T3722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.908167][ T3725] bridge0: entered allmulticast mode
[   40.930835][ T3720] bridge_slave_1: left allmulticast mode
[   40.937597][ T3720] bridge_slave_1: left promiscuous mode
[   40.945174][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.964098][   T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   40.979462][   T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   40.979556][ T3720] bridge_slave_0: left allmulticast mode
[   40.991692][   T28] EXT4-fs (loop2): This should not happen!! Data will be lost
[   40.991692][   T28] 
[   40.991712][   T28] EXT4-fs (loop2): Total free blocks count 0
[   40.991727][   T28] EXT4-fs (loop2): Free/Dirty block details
[   40.997389][ T3720] bridge_slave_0: left promiscuous mode
[   40.997567][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.007047][   T28] EXT4-fs (loop2): free_blocks=2415919104
[   41.037326][   T28] EXT4-fs (loop2): dirty_blocks=16
[   41.042487][   T28] EXT4-fs (loop2): Block reservation details
[   41.048482][   T28] EXT4-fs (loop2): i_reserved_data_blocks=1
[   41.056454][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.239137][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.298808][ T3750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'.
[   41.411113][ T3758] loop4: detected capacity change from 0 to 764
[   41.628990][ T3768] loop0: detected capacity change from 0 to 2048
[   41.679130][ T3768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.843991][ T3774] loop4: detected capacity change from 0 to 2048
[   41.867683][ T3774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.885593][   T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   41.903999][   T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   41.916571][   T11] EXT4-fs (loop0): This should not happen!! Data will be lost
[   41.916571][   T11] 
[   41.926293][   T11] EXT4-fs (loop0): Total free blocks count 0
[   41.932319][   T11] EXT4-fs (loop0): Free/Dirty block details
[   41.938262][   T11] EXT4-fs (loop0): free_blocks=2415919104
[   41.944038][   T11] EXT4-fs (loop0): dirty_blocks=16
[   41.949214][   T11] EXT4-fs (loop0): Block reservation details
[   41.955200][   T11] EXT4-fs (loop0): i_reserved_data_blocks=1
[   41.963124][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.992228][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   42.010728][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   42.022976][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   42.022976][   T11] 
[   42.032666][   T11] EXT4-fs (loop4): Total free blocks count 0
[   42.038697][   T11] EXT4-fs (loop4): Free/Dirty block details
[   42.044598][   T11] EXT4-fs (loop4): free_blocks=2415919104
[   42.050373][   T11] EXT4-fs (loop4): dirty_blocks=16
[   42.055493][   T11] EXT4-fs (loop4): Block reservation details
[   42.061498][   T11] EXT4-fs (loop4): i_reserved_data_blocks=1
[   42.069878][ T3779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   42.071222][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.091064][ T3779] netlink: 'syz.0.109': attribute type 3 has an invalid length.
[   42.098858][ T3779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.109'.
[   42.412141][ T3794] hub 6-0:1.0: USB hub found
[   42.416959][ T3794] hub 6-0:1.0: 8 ports detected
[   42.736503][ T3806] bond0: entered promiscuous mode
[   42.741615][ T3806] bond_slave_0: entered promiscuous mode
[   42.747533][ T3806] bond_slave_1: entered promiscuous mode
[   42.759560][ T3806] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   42.774116][ T3806] bond0: left promiscuous mode
[   42.775547][ T3814] loop3: detected capacity change from 0 to 2048
[   42.778943][ T3806] bond_slave_0: left promiscuous mode
[   42.778998][ T3806] bond_slave_1: left promiscuous mode
[   42.795551][ T3816] loop1: detected capacity change from 0 to 2048
[   42.818830][ T3816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.819438][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.857656][   T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   42.872587][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   42.873892][   T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, 
[   42.884806][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[   42.884806][   T28] 
[   42.884812][   T11] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   42.886222][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   42.893175][   T28] EXT4-fs (loop3): Total free blocks count 0
[   42.902839][   T11] EXT4-fs (loop1): This should not happen!! Data will be lost
[   42.902839][   T11] 
[   42.911600][   T28] EXT4-fs (loop3): Free/Dirty block details
[   42.923735][   T11] EXT4-fs (loop1): Total free blocks count 0
[   42.929718][   T28] EXT4-fs (loop3): free_blocks=2415919104
[   42.929735][   T28] EXT4-fs (loop3): dirty_blocks=16
[   42.939363][   T11] EXT4-fs (loop1): Free/Dirty block details
[   42.939377][   T11] EXT4-fs (loop1): free_blocks=2415919104
[   42.945247][   T28] EXT4-fs (loop3): Block reservation details
[   42.951221][   T11] EXT4-fs (loop1): dirty_blocks=16
[   42.951237][   T11] EXT4-fs (loop1): Block reservation details
[   42.951249][   T11] EXT4-fs (loop1): i_reserved_data_blocks=1
[   42.956963][   T28] EXT4-fs (loop3): i_reserved_data_blocks=1
[   42.958721][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.967405][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.107569][ T3828] bond0: (slave bond_slave_0): Releasing backup interface
[   43.129696][ T3828] bond0: (slave bond_slave_1): Releasing backup interface
[   43.136114][ T3839] loop4: detected capacity change from 0 to 2048
[   43.161211][ T3839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.176103][ T3828] team0: Port device team_slave_0 removed
[   43.199326][ T3828] team0: Port device team_slave_1 removed
[   43.219468][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.227060][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.270748][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.278282][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.340267][ T3828] loop1: detected capacity change from 0 to 512
[   43.351187][ T3828] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.364284][ T3828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.376374][ T3828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   43.390929][ T3828] System zones: 1-12
[   43.400487][ T3828] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.425040][ T3828] EXT4-fs (loop1): 1 truncate cleaned up
[   43.441633][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.448924][ T3837] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   43.454477][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.610568][ T3855] loop0: detected capacity change from 0 to 2048
[   43.628562][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.753788][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.899690][ T3871] loop4: detected capacity change from 0 to 2048
[   43.947807][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.009049][ T3882] bond0: entered promiscuous mode
[   44.014150][ T3882] bond_slave_0: entered promiscuous mode
[   44.019900][ T3882] bond_slave_1: entered promiscuous mode
[   44.028894][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.036316][ T3882] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   44.048364][ T3882] bond0: left promiscuous mode
[   44.053145][ T3882] bond_slave_0: left promiscuous mode
[   44.058706][ T3882] bond_slave_1: left promiscuous mode
[   44.107778][   T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   44.127300][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   44.139563][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[   44.139563][   T50] 
[   44.149346][   T50] EXT4-fs (loop4): Total free blocks count 0
[   44.155393][   T50] EXT4-fs (loop4): Free/Dirty block details
[   44.161390][   T50] EXT4-fs (loop4): free_blocks=2415919104
[   44.167218][   T50] EXT4-fs (loop4): dirty_blocks=16
[   44.172340][   T50] EXT4-fs (loop4): Block reservation details
[   44.178387][   T50] EXT4-fs (loop4): i_reserved_data_blocks=1
[   44.187585][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.304592][ T3903] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   44.351998][   T29] kauditd_printk_skb: 24 callbacks suppressed
[   44.352012][   T29] audit: type=1400 audit(1722604617.588:263): avc:  denied  { connect } for  pid=3911 comm="syz.1.144" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.379037][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   44.388056][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'.
[   44.407499][   T29] audit: type=1400 audit(1722604617.648:264): avc:  denied  { create } for  pid=3911 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.427437][   T29] audit: type=1400 audit(1722604617.668:265): avc:  denied  { connect } for  pid=3911 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.446957][   T29] audit: type=1400 audit(1722604617.668:266): avc:  denied  { setopt } for  pid=3911 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.474054][   T29] audit: type=1400 audit(1722604617.668:267): avc:  denied  { write } for  pid=3911 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.493845][ T3916] loop4: detected capacity change from 0 to 1024
[   44.498251][ T3929] loop3: detected capacity change from 0 to 2048
[   44.500689][ T3916] EXT4-fs: Ignoring removed orlov option
[   44.529362][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.544868][   T29] audit: type=1400 audit(1722604617.778:268): avc:  denied  { write } for  pid=3901 comm="syz.4.142" name="memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.562891][ T3929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.656380][   T55] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   44.677019][ T3930] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   44.690425][   T55] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   44.702677][   T55] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.702677][   T55] 
[   44.712351][   T55] EXT4-fs (loop3): Total free blocks count 0
[   44.712865][ T3942] bond0: entered promiscuous mode
[   44.718349][   T55] EXT4-fs (loop3): Free/Dirty block details
[   44.718363][   T55] EXT4-fs (loop3): free_blocks=2415919104
[   44.718380][   T55] EXT4-fs (loop3): dirty_blocks=16
[   44.718394][   T55] EXT4-fs (loop3): Block reservation details
[   44.723417][ T3942] bond_slave_0: entered promiscuous mode
[   44.723482][ T3942] bond_slave_1: entered promiscuous mode
[   44.729345][   T55] EXT4-fs (loop3): i_reserved_data_blocks=1
[   44.740173][ T3942] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   44.772767][ T3942] bond0: left promiscuous mode
[   44.773219][ T3925] loop1: detected capacity change from 0 to 512
[   44.777587][ T3942] bond_slave_0: left promiscuous mode
[   44.777685][ T3942] bond_slave_1: left promiscuous mode
[   44.785510][ T3925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.800285][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.806043][ T3925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   44.822013][ T3925] System zones: 1-12
[   44.826839][ T3925] EXT4-fs (loop1): 1 truncate cleaned up
[   44.833280][ T3925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.914107][   T29] audit: type=1400 audit(1722604618.148:269): avc:  denied  { create } for  pid=3950 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   44.934927][   T29] audit: type=1400 audit(1722604618.148:270): avc:  denied  { write } for  pid=3950 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   44.942864][ T3951] loop2: detected capacity change from 0 to 512
[   44.983597][ T3955] loop2: detected capacity change from 0 to 136
[   45.144026][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.185369][ T3965] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   45.277917][ T3967] loop4: detected capacity change from 0 to 2048
[   45.288001][ T3967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.305690][ T3967] FAULT_INJECTION: forcing a failure.
[   45.305690][ T3967] name failslab, interval 1, probability 0, space 0, times 0
[   45.318458][ T3967] CPU: 1 UID: 0 PID: 3967 Comm: syz.4.158 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   45.329060][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   45.339118][ T3967] Call Trace:
[   45.342399][ T3967]  <TASK>
[   45.345334][ T3967]  dump_stack_lvl+0xf2/0x150
[   45.349978][ T3967]  dump_stack+0x15/0x20
[   45.354150][ T3967]  should_fail_ex+0x229/0x230
[   45.358852][ T3967]  should_failslab+0x8f/0xb0
[   45.363460][ T3967]  kmem_cache_alloc_bulk_noprof+0x58/0x440
[   45.369283][ T3967]  ? _raw_spin_unlock+0x26/0x50
[   45.374151][ T3967]  ? xa_store+0x3f/0x50
[   45.378314][ T3967]  io_provide_buffers+0x2e0/0x720
[   45.383439][ T3967]  io_issue_sqe+0x150/0xcc0
[   45.387957][ T3967]  ? io_provide_buffers_prep+0x1a4/0x1d0
[   45.393752][ T3967]  io_submit_sqes+0x6c5/0x1080
[   45.398659][ T3967]  ? __rcu_read_unlock+0x4e/0x70
[   45.403636][ T3967]  ? xa_load+0xb9/0xe0
[   45.407862][ T3967]  __se_sys_io_uring_enter+0x1c6/0x15a0
[   45.413493][ T3967]  ? perf_trace_sys_enter+0x6c/0x2d0
[   45.418796][ T3967]  __x64_sys_io_uring_enter+0x78/0x90
[   45.424281][ T3967]  x64_sys_call+0x26d0/0x2e00
[   45.429026][ T3967]  do_syscall_64+0xc9/0x1c0
[   45.433667][ T3967]  ? clear_bhb_loop+0x55/0xb0
[   45.438370][ T3967]  ? clear_bhb_loop+0x55/0xb0
[   45.443058][ T3967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.449069][ T3967] RIP: 0033:0x7fcd939073b9
[   45.453615][ T3967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.473308][ T3967] RSP: 002b:00007fcd92587048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   45.481790][ T3967] RAX: ffffffffffffffda RBX: 00007fcd93a95f80 RCX: 00007fcd939073b9
[   45.489767][ T3967] RDX: 0000000000400000 RSI: 00000000000047fa RDI: 0000000000000004
[   45.497818][ T3967] RBP: 00007fcd925870a0 R08: 0000000000000000 R09: 0000000000000000
[   45.505811][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.513799][ T3967] R13: 000000000000000b R14: 00007fcd93a95f80 R15: 00007ffc45575b18
[   45.521777][ T3967]  </TASK>
[   45.547437][ T3926] syz.0.146 (3926) used greatest stack depth: 11368 bytes left
[   45.579938][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.644270][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.686237][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'.
[   45.686615][ T3981] loop4: detected capacity change from 0 to 2048
[   45.752892][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.795306][ T3992] bond0: entered promiscuous mode
[   45.800456][ T3992] bond_slave_0: entered promiscuous mode
[   45.806240][ T3992] bond_slave_1: entered promiscuous mode
[   45.812283][ T3992] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   45.820512][ T3992] bond0: left promiscuous mode
[   45.825397][ T3992] bond_slave_0: left promiscuous mode
[   45.831057][ T3992] bond_slave_1: left promiscuous mode
[   45.845481][   T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   45.861129][   T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   45.873535][   T28] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.873535][   T28] 
[   45.883215][   T28] EXT4-fs (loop4): Total free blocks count 0
[   45.889244][   T28] EXT4-fs (loop4): Free/Dirty block details
[   45.895152][   T28] EXT4-fs (loop4): free_blocks=2415919104
[   45.900877][   T28] EXT4-fs (loop4): dirty_blocks=16
[   45.906096][   T28] EXT4-fs (loop4): Block reservation details
[   45.912078][   T28] EXT4-fs (loop4): i_reserved_data_blocks=1
[   45.919040][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.970231][ T3992] syz.3.163 (3992) used greatest stack depth: 11072 bytes left
[   46.013483][ T4011] bond0: (slave bond_slave_0): Releasing backup interface
[   46.033440][ T4011] bond0: (slave bond_slave_1): Releasing backup interface
[   46.042302][   T29] audit: type=1400 audit(1722604619.288:271): avc:  denied  { bind } for  pid=4006 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   46.061737][   T29] audit: type=1400 audit(1722604619.288:272): avc:  denied  { name_bind } for  pid=4006 comm="syz.0.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   46.071754][ T4019] loop1: detected capacity change from 0 to 4096
[   46.092728][ T4019] EXT4-fs: Ignoring removed nobh option
[   46.098448][ T4019] EXT4-fs: Ignoring removed i_version option
[   46.106494][ T4019] EXT4-fs: quotafile must be on filesystem root
[   46.109470][ T4011] team0: Port device team_slave_0 removed
[   46.130396][ T4011] team0: Port device team_slave_1 removed
[   46.139356][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.146890][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_0
[   46.171515][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.179108][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.190236][ T4022] loop2: detected capacity change from 0 to 512
[   46.199414][ T4022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   46.221861][ T4022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   46.230036][ T4022] System zones: 1-12
[   46.247192][ T4022] EXT4-fs (loop2): 1 truncate cleaned up
[   46.251939][ T4013] bond0: entered promiscuous mode
[   46.256592][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.257944][ T4013] bond_slave_0: entered promiscuous mode
[   46.276120][ T4013] bond_slave_1: entered promiscuous mode
[   46.283885][ T4013] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   46.291794][ T4013] bond0: left promiscuous mode
[   46.296861][ T4013] bond_slave_0: left promiscuous mode
[   46.302469][ T4013] bond_slave_1: left promiscuous mode
[   46.327704][ T4020] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   46.337102][ T4027] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   46.351733][ T4032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.361861][ T4032] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.375683][ T4038] loop3: detected capacity change from 0 to 2048
[   46.377136][ T4035] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   46.397346][ T4038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.476156][   T28] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   46.523284][   T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   46.542621][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   46.554890][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[   46.554890][   T11] 
[   46.564581][   T11] EXT4-fs (loop3): Total free blocks count 0
[   46.570691][   T11] EXT4-fs (loop3): Free/Dirty block details
[   46.576658][   T11] EXT4-fs (loop3): free_blocks=2415919104
[   46.582461][   T11] EXT4-fs (loop3): dirty_blocks=16
[   46.587656][   T11] EXT4-fs (loop3): Block reservation details
[   46.593735][   T11] EXT4-fs (loop3): i_reserved_data_blocks=1
[   46.599673][   T28] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   46.601334][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.819697][ T4011] syz.2.170 (4011) used greatest stack depth: 10776 bytes left
[   46.850451][ T4061] bond0: entered promiscuous mode
[   46.855992][ T4061] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   46.876159][ T4061] bond0: left promiscuous mode
[   46.998423][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.063717][ T4073] loop2: detected capacity change from 0 to 2048
[   47.088866][ T4073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.146644][   T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   47.164745][   T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   47.177043][   T50] EXT4-fs (loop2): This should not happen!! Data will be lost
[   47.177043][   T50] 
[   47.186795][   T50] EXT4-fs (loop2): Total free blocks count 0
[   47.192783][   T50] EXT4-fs (loop2): Free/Dirty block details
[   47.198714][   T50] EXT4-fs (loop2): free_blocks=2415919104
[   47.204492][   T50] EXT4-fs (loop2): dirty_blocks=16
[   47.209695][   T50] EXT4-fs (loop2): Block reservation details
[   47.215708][   T50] EXT4-fs (loop2): i_reserved_data_blocks=1
[   47.222897][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.328701][ T4101] bond0: entered promiscuous mode
[   47.334659][ T4101] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   47.342491][ T4101] bond0: left promiscuous mode
[   47.369671][ T4104] bond0: (slave bond_slave_0): Releasing backup interface
[   47.383368][ T4104] bond0: (slave bond_slave_1): Releasing backup interface
[   47.400413][ T4104] team0: Port device team_slave_0 removed
[   47.409745][ T4104] team0: Port device team_slave_1 removed
[   47.421267][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.428897][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.437336][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[   47.449822][ T4110] loop1: detected capacity change from 0 to 2048
[   47.461221][ T4111] loop4: detected capacity change from 0 to 512
[   47.468396][ T4111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   47.469978][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.480794][ T4110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.485667][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.506074][ T4111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   47.514092][ T4111] System zones: 1-12
[   47.536662][ T4111] EXT4-fs (loop4): 1 truncate cleaned up
[   47.542725][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.559212][ T4107] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   47.572316][ T4120] loop3: detected capacity change from 0 to 2048
[   47.588697][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.603698][ T3422] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   47.618871][ T3422] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   47.631178][ T3422] EXT4-fs (loop1): This should not happen!! Data will be lost
[   47.631178][ T3422] 
[   47.640893][ T3422] EXT4-fs (loop1): Total free blocks count 0
[   47.646897][ T3422] EXT4-fs (loop1): Free/Dirty block details
[   47.652798][ T3422] EXT4-fs (loop1): free_blocks=2415919104
[   47.658582][ T3422] EXT4-fs (loop1): dirty_blocks=16
[   47.663736][ T3422] EXT4-fs (loop1): Block reservation details
[   47.672000][ T3422] EXT4-fs (loop1): i_reserved_data_blocks=1
[   47.683289][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.704116][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.754914][ T4132] loop3: detected capacity change from 0 to 2048
[   47.783116][ T4132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.811046][ T4131] lo speed is unknown, defaulting to 1000
[   47.817292][ T4131] lo speed is unknown, defaulting to 1000
[   47.823366][ T4131] lo speed is unknown, defaulting to 1000
[   47.850697][   T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   47.866814][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   47.867415][ T4131] infiniband syz0: set down
[   47.879036][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[   47.879036][   T28] 
[   47.883521][ T4131] infiniband syz0: added lo
[   47.883546][ T1049] lo speed is unknown, defaulting to 1000
[   47.890387][ T4131] RDS/IB: syz0: added
[   47.893289][   T28] EXT4-fs (loop3): Total free blocks count 0
[   47.899115][ T4131] smc: adding ib device syz0 with port count 1
[   47.903487][   T28] EXT4-fs (loop3): Free/Dirty block details
[   47.907904][ T4131] smc:    ib device syz0 port 1 has pnetid 
[   47.913443][   T28] EXT4-fs (loop3): free_blocks=2415919104
[   47.919657][ T1049] lo speed is unknown, defaulting to 1000
[   47.925511][   T28] EXT4-fs (loop3): dirty_blocks=16
[   47.948266][   T28] EXT4-fs (loop3): Block reservation details
[   47.954257][   T28] EXT4-fs (loop3): i_reserved_data_blocks=1
[   47.961793][ T4131] lo speed is unknown, defaulting to 1000
[   47.970180][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.997448][ T4131] lo speed is unknown, defaulting to 1000
[   48.041747][ T4131] lo speed is unknown, defaulting to 1000
[   48.084508][ T4131] lo speed is unknown, defaulting to 1000
[   48.118332][ T4131] lo speed is unknown, defaulting to 1000
[   48.143083][ T4164] loop3: detected capacity change from 0 to 2048
[   48.153358][ T4131] lo speed is unknown, defaulting to 1000
[   48.191712][ T4164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.207213][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.251150][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[   48.290279][ T3422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   48.311239][ T4181] loop1: detected capacity change from 0 to 4096
[   48.319914][ T4181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.332349][ T3422] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   48.332388][ T3422] EXT4-fs (loop3): This should not happen!! Data will be lost
[   48.332388][ T3422] 
[   48.332404][ T3422] EXT4-fs (loop3): Total free blocks count 0
[   48.332484][ T3422] EXT4-fs (loop3): Free/Dirty block details
[   48.332498][ T3422] EXT4-fs (loop3): free_blocks=2415919104
[   48.332513][ T3422] EXT4-fs (loop3): dirty_blocks=16
[   48.332528][ T3422] EXT4-fs (loop3): Block reservation details
[   48.332541][ T3422] EXT4-fs (loop3): i_reserved_data_blocks=1
[   48.333351][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.409155][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.440180][ T4187] loop1: detected capacity change from 0 to 2048
[   48.455683][ T4187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.472378][ T4191] loop4: detected capacity change from 0 to 512
[   48.481354][ T4191] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   48.500667][ T4193] loop3: detected capacity change from 0 to 512
[   48.501448][   T55] smc: removing ib device syz0
[   48.518209][ T4193] loop3: detected capacity change from 0 to 512
[   48.524595][ T4193] =======================================================
[   48.524595][ T4193] WARNING: The mand mount option has been deprecated and
[   48.524595][ T4193]          and is ignored by this kernel. Remove the mand
[   48.524595][ T4193]          option from the mount to silence this warning.
[   48.524595][ T4193] =======================================================
[   48.559857][   T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   48.577664][   T28] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   48.585880][ T4193] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.217: bad orphan inode 15
[   48.589904][   T28] EXT4-fs (loop1): This should not happen!! Data will be lost
[   48.589904][   T28] 
[   48.609506][   T28] EXT4-fs (loop1): Total free blocks count 0
[   48.615623][   T28] EXT4-fs (loop1): Free/Dirty block details
[   48.621607][   T28] EXT4-fs (loop1): free_blocks=2415919104
[   48.627364][   T28] EXT4-fs (loop1): dirty_blocks=16
[   48.632493][   T28] EXT4-fs (loop1): Block reservation details
[   48.638352][ T4193] ext4_test_bit(bit=14, block=5) = 0
[   48.638557][   T28] EXT4-fs (loop1): i_reserved_data_blocks=1
[   48.651441][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.664944][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.681288][ T4193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.694863][ T4200] loop2: detected capacity change from 0 to 256
[   48.705233][ T4193] vhci_hcd: invalid port number 32
[   48.857793][ T4215] loop4: detected capacity change from 0 to 512
[   48.860804][ T4217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.864298][ T4215] ext4: Bad value for 'commit'
[   48.899210][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'.
[   48.904987][ T4224] loop4: detected capacity change from 0 to 2048
[   48.918189][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   48.921532][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'.
[   48.936127][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   48.937384][ T4224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.056137][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.195219][ T4239] loop4: detected capacity change from 0 to 2048
[   49.227929][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.444434][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   49.559977][   T29] kauditd_printk_skb: 40 callbacks suppressed
[   49.559993][   T29] audit: type=1400 audit(1722604622.528:313): avc:  denied  { create } for  pid=4237 comm="syz.4.229" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.564373][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   49.566253][   T29] audit: type=1400 audit(1722604622.528:314): avc:  denied  { read append open } for  pid=4237 comm="syz.4.229" path="/60/file1/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.587550][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   49.587550][   T11] 
[   49.587568][   T11] EXT4-fs (loop4): Total free blocks count 0
[   49.587583][   T11] EXT4-fs (loop4): Free/Dirty block details
[   49.587596][   T11] EXT4-fs (loop4): free_blocks=2415919104
[   49.587611][   T11] EXT4-fs (loop4): dirty_blocks=16
[   49.587624][   T11] EXT4-fs (loop4): Block reservation details
[   49.587637][   T11] EXT4-fs (loop4): i_reserved_data_blocks=1
[   49.670237][   T29] audit: type=1400 audit(1722604622.538:315): avc:  denied  { map } for  pid=4237 comm="syz.4.229" path="/60/file1/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.693934][   T29] audit: type=1400 audit(1722604622.768:316): avc:  denied  { unlink } for  pid=3258 comm="syz-executor" name="file0" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.726707][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.776672][ T4249] loop4: detected capacity change from 0 to 2048
[   49.790822][ T4249] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   49.843130][   T29] audit: type=1400 audit(1722604623.028:317): avc:  denied  { write } for  pid=4250 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   49.880518][ T4254] hub 6-0:1.0: USB hub found
[   49.885302][ T4254] hub 6-0:1.0: 8 ports detected
[   49.903411][ T4249] loop4: detected capacity change from 0 to 512
[   49.931255][ T4249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.062031][ T4249] EXT4-fs (loop4): orphan cleanup on readonly fs
[   50.080288][   T29] audit: type=1400 audit(1722604623.288:318): avc:  denied  { write } for  pid=4255 comm="syz.0.235" path="socket:[5938]" dev="sockfs" ino=5938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.131061][ T4249] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.231: bg 0: block 248: padding at end of block bitmap is not set
[   50.149925][ T4249] Quota error (device loop4): write_blk: dquota write failed
[   50.157409][ T4249] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   50.167351][ T4249] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.231: Failed to acquire dquot type 1
[   50.168378][ T4259] loop0: detected capacity change from 0 to 4096
[   50.186826][ T4249] EXT4-fs (loop4): 1 truncate cleaned up
[   50.188152][ T4259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.193733][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.223082][ T4249] syz.4.231 (4249) used greatest stack depth: 9632 bytes left
[   50.231968][   T29] audit: type=1326 audit(1722604623.468:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.4.231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd939073b9 code=0x0
[   50.254764][   T29] audit: type=1400 audit(1722604623.468:320): avc:  denied  { write } for  pid=4258 comm="syz.0.236" path="/38/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   50.406699][ T4271] loop0: detected capacity change from 0 to 512
[   50.415372][ T4271] ext4: Unknown parameter 'euid<00000000000000000000'
[   50.450125][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   50.461974][ T4276] ipvlan2: entered allmulticast mode
[   50.467311][ T4276] vlan0: entered allmulticast mode
[   50.472639][ T4276] veth0_vlan: entered allmulticast mode
[   50.499834][ T4284] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   50.683140][ T4305] loop0: detected capacity change from 0 to 256
[   50.690641][ T4305] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.716296][ T4309] loop3: detected capacity change from 0 to 2048
[   50.722880][ T4309] ext4: Unknown parameter 'subj_type'
[   50.745794][ T4305] loop0: detected capacity change from 256 to 0
[   50.753211][ T4305] syz.0.248: attempt to access beyond end of device
[   50.753211][ T4305] loop0: rw=0, sector=176, nr_sectors = 4 limit=0
[   50.768233][ T4305] FAT-fs (loop0): Directory bread(block 44) failed
[   50.774831][ T4305] syz.0.248: attempt to access beyond end of device
[   50.774831][ T4305] loop0: rw=0, sector=176, nr_sectors = 4 limit=0
[   50.787859][ T4305] FAT-fs (loop0): Directory bread(block 44) failed
[   50.794413][ T4305] syz.0.248: attempt to access beyond end of device
[   50.794413][ T4305] loop0: rw=0, sector=176, nr_sectors = 4 limit=0
[   50.807716][ T4305] FAT-fs (loop0): Directory bread(block 44) failed
[   50.814607][ T4305] syz.0.248: attempt to access beyond end of device
[   50.814607][ T4305] loop0: rw=0, sector=128, nr_sectors = 4 limit=0
[   50.827916][ T4305] FAT-fs (loop0): FAT read failed (blocknr 32)
[   50.831880][ T4320] loop4: detected capacity change from 0 to 512
[   50.982433][ T3259] syz-executor: attempt to access beyond end of device
[   50.982433][ T3259] loop0: rw=0, sector=160, nr_sectors = 4 limit=0
[   50.995756][ T3259] FAT-fs (loop0): Directory bread(block 40) failed
[   51.002434][ T3259] syz-executor: attempt to access beyond end of device
[   51.002434][ T3259] loop0: rw=0, sector=164, nr_sectors = 4 limit=0
[   51.015932][ T3259] FAT-fs (loop0): Directory bread(block 41) failed
[   51.022614][ T3259] syz-executor: attempt to access beyond end of device
[   51.022614][ T3259] loop0: rw=0, sector=168, nr_sectors = 4 limit=0
[   51.035966][ T3259] FAT-fs (loop0): Directory bread(block 42) failed
[   51.042548][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888115403e00: rx timeout, send abort
[   51.054173][ T3259] syz-executor: attempt to access beyond end of device
[   51.054173][ T3259] loop0: rw=0, sector=144, nr_sectors = 4 limit=0
[   51.069913][ T3259] FAT-fs (loop0): Directory bread(block 36) failed
[   51.100879][ T4327] hub 6-0:1.0: USB hub found
[   51.105680][ T4327] hub 6-0:1.0: 8 ports detected
[   51.124915][ T3422] kworker/u8:7: attempt to access beyond end of device
[   51.124915][ T3422] loop0: rw=0, sector=4, nr_sectors = 4 limit=0
[   51.138754][ T3422] FAT-fs (loop0): bread failed in fat_clusters_flush
[   51.542598][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888115403e00: abort rx timeout. Force session deactivation
[   51.625323][ T4340] chnl_net:caif_netlink_parms(): no params data found
[   51.651626][ T4359] loop3: detected capacity change from 0 to 512
[   51.673182][ T4359] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   51.689490][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.696612][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.753761][ T4359] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.259: iget: bad i_size value: -67835469387268086
[   51.755372][ T4340] bridge_slave_0: entered allmulticast mode
[   51.773555][ T4340] bridge_slave_0: entered promiscuous mode
[   51.781735][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.788881][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.796203][ T4340] bridge_slave_1: entered allmulticast mode
[   51.802644][ T4340] bridge_slave_1: entered promiscuous mode
[   51.808146][ T4359] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.259: couldn't read orphan inode 15 (err -117)
[   51.823436][ T4371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'.
[   51.834802][ T4359] ext2 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.852179][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.861500][ T4359] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.259: Directory hole found for htree leaf block 0
[   51.878098][ T4373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.889241][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.898840][ T4373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.913703][ T4359] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.259: Directory hole found for htree leaf block 0
[   51.942797][ T4373] loop2: detected capacity change from 0 to 2048
[   51.951353][ T4340] team0: Port device team_slave_0 added
[   51.958040][ T4340] team0: Port device team_slave_1 added
[   51.965425][ T4378] netlink: 'syz.4.264': attribute type 4 has an invalid length.
[   51.986695][ T4373] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.262: bad orphan inode 8192
[   52.045213][ T4383] netlink: 'syz.4.264': attribute type 4 has an invalid length.
[   52.058059][ T4385] loop3: detected capacity change from 0 to 512
[   52.064605][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.071651][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.097576][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.110190][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.118947][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.128417][ T4385] EXT4-fs (loop3): orphan cleanup on readonly fs
[   52.136515][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.137780][ T4385] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   52.143537][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.153177][ T4385] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.265: invalid indirect mapped block 2683928664 (level 1)
[   52.177829][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.203874][ T4385] EXT4-fs (loop3): Remounting filesystem read-only
[   52.217958][ T4385] EXT4-fs (loop3): 1 truncate cleaned up
[   52.264836][ T4340] hsr_slave_0: entered promiscuous mode
[   52.276280][ T4385] SELinux: (dev loop3, type ext4) getxattr errno 5
[   52.276437][ T4340] hsr_slave_1: entered promiscuous mode
[   52.291057][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.314233][ T4393] loop4: detected capacity change from 0 to 2048
[   52.315684][ T4340] Cannot create hsr debugfs directory
[   52.349824][ T4400] netlink: 'syz.3.265': attribute type 10 has an invalid length.
[   52.353454][ T4393] Alternate GPT is invalid, using primary GPT.
[   52.364106][ T4393]  loop4: p2 p3 p7
[   52.391847][ T4403] loop1: detected capacity change from 0 to 512
[   52.399213][ T4403] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.408423][ T4403] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (800)
[   52.428304][ T4403] loop1: detected capacity change from 0 to 512
[   52.435017][ T4403] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.443116][ T4403] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   52.443937][ T4340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.452678][ T4403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[   52.470859][ T4403] System zones: 1-12
[   52.475129][ T4403] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.269: corrupted in-inode xattr: e_value size too large
[   52.490243][ T4403] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.269: couldn't read orphan inode 15 (err -117)
[   52.601991][ T4340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.652530][ T4340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.716248][ T4340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.764148][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'.
[   52.826640][ T4421] hub 6-0:1.0: USB hub found
[   52.831470][ T4421] hub 6-0:1.0: 8 ports detected
[   52.892122][ T4340] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.922858][ T4340] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.956601][ T4340] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.004816][ T4340] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.053110][ T4427] netlink: 64 bytes leftover after parsing attributes in process `syz.3.274'.
[   53.116343][ T4429] loop4: detected capacity change from 0 to 2048
[   53.203377][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.218195][   T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   53.223387][ T4340] 8021q: adding VLAN 0 to HW filter on device team0
[   53.239712][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   53.252002][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[   53.252002][   T50] 
[   53.262048][   T50] EXT4-fs (loop4): Total free blocks count 0
[   53.268125][   T50] EXT4-fs (loop4): Free/Dirty block details
[   53.274175][   T50] EXT4-fs (loop4): free_blocks=2415919104
[   53.280027][   T50] EXT4-fs (loop4): dirty_blocks=16
[   53.285181][   T50] EXT4-fs (loop4): Block reservation details
[   53.291206][   T50] EXT4-fs (loop4): i_reserved_data_blocks=1
[   53.304407][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.311547][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.328339][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.335638][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.390804][ T4442] x_tables: duplicate underflow at hook 2
[   53.435816][ T4453] loop4: detected capacity change from 0 to 512
[   53.445274][ T4453] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   53.461142][ T4453] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.280: iget: bad i_size value: -67835469387268086
[   53.474414][ T4453] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.280: couldn't read orphan inode 15 (err -117)
[   53.501930][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.506661][ T4453] ext2 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.525900][ T4456] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   53.538451][ T4460] loop3: detected capacity change from 0 to 512
[   53.545984][ T4453] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.280: Directory hole found for htree leaf block 0
[   53.547641][ T4460] EXT4-fs (loop3): orphan cleanup on readonly fs
[   53.561167][ T4453] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.280: Directory hole found for htree leaf block 0
[   53.566130][ T4460] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   53.587645][ T4460] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.282: invalid indirect mapped block 2683928664 (level 1)
[   53.602254][ T4460] EXT4-fs (loop3): Remounting filesystem read-only
[   53.610528][ T4460] EXT4-fs (loop3): 1 truncate cleaned up
[   53.617885][ T4460] SELinux: (dev loop3, type ext4) getxattr errno 5
[   53.675005][ T4340] veth0_vlan: entered promiscuous mode
[   53.684751][ T4340] veth1_vlan: entered promiscuous mode
[   53.723052][ T4340] veth0_macvtap: entered promiscuous mode
[   53.738186][ T4340] veth1_macvtap: entered promiscuous mode
[   53.749260][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.760279][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.770203][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.780902][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.792073][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.801203][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.811732][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.821741][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.832381][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.846659][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.856405][ T4340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.865144][ T4340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.874051][ T4340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.882819][ T4340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.084711][ T4475] netlink: 'syz.3.282': attribute type 10 has an invalid length.
[   54.232100][ T4482] hub 6-0:1.0: USB hub found
[   54.237250][ T4482] hub 6-0:1.0: 8 ports detected
[   54.276723][ T4486] loop0: detected capacity change from 0 to 512
[   54.289757][ T4486] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.558301][ T4504] loop4: detected capacity change from 0 to 2048
[   54.643939][   T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   54.663180][   T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   54.675765][   T28] EXT4-fs (loop4): This should not happen!! Data will be lost
[   54.675765][   T28] 
[   54.685707][   T28] EXT4-fs (loop4): Total free blocks count 0
[   54.692020][   T28] EXT4-fs (loop4): Free/Dirty block details
[   54.698143][   T28] EXT4-fs (loop4): free_blocks=2415919104
[   54.704050][   T28] EXT4-fs (loop4): dirty_blocks=16
[   54.709373][   T28] EXT4-fs (loop4): Block reservation details
[   54.715522][   T28] EXT4-fs (loop4): i_reserved_data_blocks=1
[   54.740538][ T4512] loop4: detected capacity change from 0 to 128
[   54.754683][ T4515] syz.4.293: attempt to access beyond end of device
[   54.754683][ T4515] loop4: rw=2049, sector=145, nr_sectors = 56 limit=128
[   54.768802][   T29] kauditd_printk_skb: 65 callbacks suppressed
[   54.768818][   T29] audit: type=1400 audit(1722604628.008:386): avc:  denied  { sqpoll } for  pid=4518 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   54.809832][   T29] audit: type=1400 audit(1722604628.028:387): avc:  denied  { setopt } for  pid=4508 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   54.852541][   T29] audit: type=1400 audit(1722604628.078:388): avc:  denied  { ioctl } for  pid=4527 comm="syz.4.296" path="socket:[7491]" dev="sockfs" ino=7491 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   54.887568][ T4529] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   54.894912][ T4529] vhci_hcd: invalid port number 23
[   54.908505][ T4534] loop1: detected capacity change from 0 to 128
[   54.915265][ T4534] vfat: Unknown parameter '00000000000000000000007'
[   54.950722][ T4529] hub 6-0:1.0: USB hub found
[   54.956077][ T4529] hub 6-0:1.0: 8 ports detected
[   54.995321][ T4555] netlink: 6 bytes leftover after parsing attributes in process `syz.2.300'.
[   55.014588][ T4555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   55.028743][ T4557] loop1: detected capacity change from 0 to 2048
[   55.111333][ T4563] bridge_slave_0: left allmulticast mode
[   55.117155][ T4563] bridge_slave_0: left promiscuous mode
[   55.120563][ T4565] loop4: detected capacity change from 0 to 512
[   55.123456][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.137454][ T4565] EXT4-fs: Ignoring removed i_version option
[   55.144056][ T4565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   55.144556][   T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   55.157413][ T4565] EXT4-fs (loop4): 1 truncate cleaned up
[   55.170706][ T4563] bridge_slave_1: left allmulticast mode
[   55.177213][   T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   55.180553][ T4563] bridge_slave_1: left promiscuous mode
[   55.192892][   T50] EXT4-fs (loop1): This should not happen!! Data will be lost
[   55.192892][   T50] 
[   55.198538][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.208248][   T50] EXT4-fs (loop1): Total free blocks count 0
[   55.221644][   T50] EXT4-fs (loop1): Free/Dirty block details
[   55.227751][   T50] EXT4-fs (loop1): free_blocks=2415919104
[   55.233720][   T50] EXT4-fs (loop1): dirty_blocks=16
[   55.239085][   T50] EXT4-fs (loop1): Block reservation details
[   55.245223][   T50] EXT4-fs (loop1): i_reserved_data_blocks=1
[   55.254822][ T4563] bond0: (slave bond_slave_0): Releasing backup interface
[   55.274935][ T4563] bond0: (slave bond_slave_1): Releasing backup interface
[   55.303386][ T4563] team0: Port device team_slave_0 removed
[   55.343297][ T4563] team0: Port device team_slave_1 removed
[   55.412370][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.420112][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.435907][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.436282][ T4580] loop1: detected capacity change from 0 to 164
[   55.443447][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.493283][ T4583] loop3: detected capacity change from 0 to 512
[   55.500445][ T4568] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   55.573666][ T4563] loop0: detected capacity change from 0 to 512
[   55.581434][ T4563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   55.593525][ T4563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   55.602738][ T4563] System zones: 1-12
[   55.607438][ T4592] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   55.615326][ T4563] EXT4-fs (loop0): 1 truncate cleaned up
[   55.622846][ T4592] vhci_hcd: invalid port number 23
[   55.679242][ T4592] hub 6-0:1.0: USB hub found
[   55.683987][ T4592] hub 6-0:1.0: 8 ports detected
[   55.795237][ T4589] team0: Device bridge0 is up. Set it down before adding it as a team port
[   55.813098][ T4610] bond0: entered promiscuous mode
[   55.818818][ T4610] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.827140][ T4610] bond0: left promiscuous mode
[   55.883495][ T4619] loop1: detected capacity change from 0 to 512
[   55.894330][ T4617] bridge0: entered allmulticast mode
[   55.902227][ T4619] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.930349][   T29] audit: type=1400 audit(1722604629.168:389): avc:  denied  { getattr } for  pid=4622 comm="syz.2.320" path="socket:[6973]" dev="sockfs" ino=6973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   55.979372][   T29] audit: type=1400 audit(1722604629.218:390): avc:  denied  { read } for  pid=4622 comm="syz.2.320" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   56.003605][   T29] audit: type=1400 audit(1722604629.218:391): avc:  denied  { open } for  pid=4622 comm="syz.2.320" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   56.058346][ T4631] FAULT_INJECTION: forcing a failure.
[   56.058346][ T4631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.071685][ T4631] CPU: 0 UID: 0 PID: 4631 Comm: syz.1.322 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   56.077135][ T4632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.320'.
[   56.082549][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   56.082567][ T4631] Call Trace:
[   56.082575][ T4631]  <TASK>
[   56.082583][ T4631]  dump_stack_lvl+0xf2/0x150
[   56.091441][ T4632] tipc: Invalid UDP bearer configuration
[   56.101466][ T4631]  dump_stack+0x15/0x20
[   56.104789][ T4632] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   56.107706][ T4631]  should_fail_ex+0x229/0x230
[   56.135097][ T4631]  should_fail+0xb/0x10
[   56.139280][ T4631]  should_fail_usercopy+0x1a/0x20
[   56.139376][ T4634] sctp: [Deprecated]: syz.3.323 (pid 4634) Use of int in maxseg socket option.
[   56.139376][ T4634] Use struct sctp_assoc_value instead
[   56.144338][ T4631]  _copy_from_user+0x1e/0xd0
[   56.163150][ T4631]  copy_msghdr_from_user+0x54/0x2a0
[   56.168423][ T4631]  __sys_sendmmsg+0x22a/0x500
[   56.173205][ T4631]  __x64_sys_sendmmsg+0x57/0x70
[   56.178101][ T4631]  x64_sys_call+0x2b4e/0x2e00
[   56.182822][ T4631]  do_syscall_64+0xc9/0x1c0
[   56.185266][ T4640] loop3: detected capacity change from 0 to 1024
[   56.187365][ T4631]  ? clear_bhb_loop+0x55/0xb0
[   56.187428][ T4631]  ? clear_bhb_loop+0x55/0xb0
[   56.187493][ T4631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.187525][ T4631] RIP: 0033:0x7f9892ca73b9
[   56.187544][ T4631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.196391][   T29] audit: type=1400 audit(1722604629.438:392): avc:  denied  { accept } for  pid=4622 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   56.198551][ T4631] RSP: 002b:00007f9891927048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   56.239762][ T4640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[   56.252500][ T4631] RAX: ffffffffffffffda RBX: 00007f9892e35f80 RCX: 00007f9892ca73b9
[   56.252520][ T4631] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c
[   56.252535][ T4631] RBP: 00007f98919270a0 R08: 0000000000000000 R09: 0000000000000000
[   56.252547][ T4631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.252582][ T4631] R13: 000000000000000b R14: 00007f9892e35f80 R15: 00007fff11a19718
[   56.252601][ T4631]  </TASK>
[   56.271006][ T4631] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   56.306883][   T29] audit: type=1400 audit(1722604629.548:393): avc:  denied  { write } for  pid=4639 comm="syz.3.325" path="socket:[7021]" dev="sockfs" ino=7021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   56.410382][ T4650] netlink: 6 bytes leftover after parsing attributes in process `syz.3.326'.
[   56.425912][ T4650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.452141][ T4652] loop1: detected capacity change from 0 to 512
[   56.458740][ T4652] EXT4-fs: Ignoring removed i_version option
[   56.465169][ T4652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   56.480770][ T4652] EXT4-fs (loop1): 1 truncate cleaned up
[   56.605879][ T4657] loop0: detected capacity change from 0 to 2048
[   56.719365][ T4666] loop4: detected capacity change from 0 to 512
[   56.727205][ T4666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.743347][ T4666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   56.760253][ T4666] EXT4-fs (loop4): 1 truncate cleaned up
[   56.849270][ T4680] ieee802154 phy0 wpan0: encryption failed: -90
[   56.858488][ T4680] netlink: 72 bytes leftover after parsing attributes in process `syz.4.333'.
[   56.940400][ T4685] loop4: detected capacity change from 0 to 512
[   56.966395][ T4689] loop2: detected capacity change from 0 to 512
[   56.974007][ T4685] EXT4-fs: Ignoring removed orlov option
[   56.982760][ T4689] EXT4-fs (loop2): orphan cleanup on readonly fs
[   56.989782][ T4689] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   56.998751][ T4689] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.336: invalid indirect mapped block 2683928664 (level 1)
[   56.999298][ T4685] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   57.014717][ T4689] EXT4-fs (loop2): Remounting filesystem read-only
[   57.022687][ T4685] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   57.030308][ T4689] EXT4-fs (loop2): 1 truncate cleaned up
[   57.039104][ T4685] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.335: Failed to acquire dquot type 1
[   57.059353][ T4689] SELinux: (dev loop2, type ext4) getxattr errno 5
[   57.074234][ T4685] EXT4-fs (loop4): 1 truncate cleaned up
[   57.080768][ T4685] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.100452][ T4685] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.335: Failed to acquire dquot type 1
[   57.167638][ T4698] netlink: 'syz.2.336': attribute type 10 has an invalid length.
[   57.262586][ T4703] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   57.319427][ T3338] hid (null): unknown global tag 0xd
[   57.333068][ T3338] hid-generic 07FF:0101:D9A1.0001: unknown global tag 0xd
[   57.340366][ T3338] hid-generic 07FF:0101:D9A1.0001: item 0 0 1 13 parsing failed
[   57.366080][ T3338] hid-generic 07FF:0101:D9A1.0001: probe with driver hid-generic failed with error -22
[   57.409512][ T4718] loop3: detected capacity change from 0 to 2048
[   57.465117][ T4723] loop0: detected capacity change from 0 to 2048
[   57.485529][   T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   57.504715][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   57.517012][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[   57.517012][   T28] 
[   57.526705][   T28] EXT4-fs (loop3): Total free blocks count 0
[   57.532854][   T28] EXT4-fs (loop3): Free/Dirty block details
[   57.538824][   T28] EXT4-fs (loop3): free_blocks=2415919104
[   57.544605][   T28] EXT4-fs (loop3): dirty_blocks=16
[   57.549747][   T28] EXT4-fs (loop3): Block reservation details
[   57.555779][   T28] EXT4-fs (loop3): i_reserved_data_blocks=1
[   57.592902][ T4723] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   57.625696][ T4740] netlink: 6 bytes leftover after parsing attributes in process `syz.4.350'.
[   57.675912][ T4740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.796714][ T4747] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   57.807127][ T4747] vhci_hcd: invalid port number 23
[   57.850447][ T4756] loop3: detected capacity change from 0 to 2048
[   57.856308][ T4747] hub 6-0:1.0: USB hub found
[   57.861957][ T4747] hub 6-0:1.0: 8 ports detected
[   57.904400][ T4766] loop0: detected capacity change from 0 to 512
[   57.912991][ T3422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   57.919054][ T4766] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.359: iget: bogus i_mode (0)
[   57.929512][ T3422] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   57.939560][ T4766] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.359: couldn't read orphan inode 17 (err -117)
[   57.951282][ T3422] EXT4-fs (loop3): This should not happen!! Data will be lost
[   57.951282][ T3422] 
[   57.972789][ T3422] EXT4-fs (loop3): Total free blocks count 0
[   57.978787][ T3422] EXT4-fs (loop3): Free/Dirty block details
[   57.984762][ T3422] EXT4-fs (loop3): free_blocks=2415919104
[   57.990574][ T3422] EXT4-fs (loop3): dirty_blocks=16
[   57.995874][ T3422] EXT4-fs (loop3): Block reservation details
[   58.001857][ T3422] EXT4-fs (loop3): i_reserved_data_blocks=1
[   58.021422][ T4772] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[   58.027007][ T4771] loop3: detected capacity change from 0 to 2048
[   58.094391][   T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   58.109239][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   58.121579][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[   58.121579][   T28] 
[   58.131288][   T28] EXT4-fs (loop3): Total free blocks count 0
[   58.137379][   T28] EXT4-fs (loop3): Free/Dirty block details
[   58.143352][   T28] EXT4-fs (loop3): free_blocks=2415919104
[   58.149203][   T28] EXT4-fs (loop3): dirty_blocks=16
[   58.154337][   T28] EXT4-fs (loop3): Block reservation details
[   58.160330][   T28] EXT4-fs (loop3): i_reserved_data_blocks=1
[   58.611010][ T4786] loop4: detected capacity change from 0 to 2048
[   58.639878][ T4786] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   58.784711][ T4809] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   58.794572][ T4810] FAULT_INJECTION: forcing a failure.
[   58.794572][ T4810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.807739][ T4810] CPU: 0 UID: 0 PID: 4810 Comm: syz.2.371 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   58.818377][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   58.828440][ T4810] Call Trace:
[   58.831738][ T4810]  <TASK>
[   58.834710][ T4810]  dump_stack_lvl+0xf2/0x150
[   58.839331][ T4810]  dump_stack+0x15/0x20
[   58.843518][ T4810]  should_fail_ex+0x229/0x230
[   58.848212][ T4810]  should_fail+0xb/0x10
[   58.852386][ T4810]  should_fail_usercopy+0x1a/0x20
[   58.857422][ T4810]  _copy_from_iter+0xd3/0xb00
[   58.862176][ T4810]  ? kmalloc_reserve+0x16e/0x190
[   58.867122][ T4810]  ? __build_skb_around+0x196/0x1f0
[   58.872376][ T4810]  ? __alloc_skb+0x21f/0x310
[   58.876966][ T4810]  ? __virt_addr_valid+0x1ed/0x250
[   58.882084][ T4810]  ? __check_object_size+0x35b/0x510
[   58.887442][ T4810]  netlink_sendmsg+0x460/0x6e0
[   58.892328][ T4810]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.897621][ T4810]  __sock_sendmsg+0x140/0x180
[   58.902386][ T4810]  ____sys_sendmsg+0x312/0x410
[   58.907166][ T4810]  __sys_sendmmsg+0x269/0x500
[   58.911866][ T4810]  ? trace_sys_enter+0x65/0xa0
[   58.916669][ T4810]  __x64_sys_sendmmsg+0x57/0x70
[   58.921555][ T4810]  x64_sys_call+0x2b4e/0x2e00
[   58.926267][ T4810]  do_syscall_64+0xc9/0x1c0
[   58.930819][ T4810]  ? clear_bhb_loop+0x55/0xb0
[   58.935600][ T4810]  ? clear_bhb_loop+0x55/0xb0
[   58.940291][ T4810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.946199][ T4810] RIP: 0033:0x7f4dd63173b9
[   58.950615][ T4810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.970302][ T4810] RSP: 002b:00007f4dd4f97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   58.978721][ T4810] RAX: ffffffffffffffda RBX: 00007f4dd64a5f80 RCX: 00007f4dd63173b9
[   58.986692][ T4810] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c
[   58.994777][ T4810] RBP: 00007f4dd4f970a0 R08: 0000000000000000 R09: 0000000000000000
[   59.002808][ T4810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.010839][ T4810] R13: 000000000000000b R14: 00007f4dd64a5f80 R15: 00007ffe0d74b9f8
[   59.018835][ T4810]  </TASK>
[   59.024244][ T4810] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   59.111824][ T4826] tipc: Started in network mode
[   59.116904][ T4826] tipc: Node identity ff00000000000000400000000000002d, cluster identity 9
[   59.125525][ T4826] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   59.165612][ T4833] loop2: detected capacity change from 0 to 2048
[   59.195507][ T4833] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.378: reserved inode found cleared - inode=1
[   59.210207][ T4833] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[   59.220632][ T4842] netlink: 'syz.2.378': attribute type 29 has an invalid length.
[   59.272746][ T4845] loop0: detected capacity change from 0 to 2048
[   59.291106][ T4845] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   59.326686][ T4848] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[   59.393765][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[   59.438937][ T4873] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   59.538795][ T4881] FAULT_INJECTION: forcing a failure.
[   59.538795][ T4881] name failslab, interval 1, probability 0, space 0, times 0
[   59.551485][ T4881] CPU: 1 UID: 0 PID: 4881 Comm: syz.0.388 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   59.556467][ T4883] loop2: detected capacity change from 0 to 1024
[   59.562147][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   59.562191][ T4881] Call Trace:
[   59.562199][ T4881]  <TASK>
[   59.570048][ T4883] EXT4-fs: Ignoring removed nobh option
[   59.578550][ T4881]  dump_stack_lvl+0xf2/0x150
[   59.578653][ T4881]  dump_stack+0x15/0x20
[   59.578694][ T4881]  should_fail_ex+0x229/0x230
[   59.582045][ T4883] EXT4-fs: Ignoring removed orlov option
[   59.584910][ T4881]  ? skb_clone+0x154/0x1f0
[   59.601962][ T4883] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   59.603834][ T4881]  should_failslab+0x8f/0xb0
[   59.603876][ T4881]  kmem_cache_alloc_noprof+0x4c/0x290
[   59.634602][ T4881]  skb_clone+0x154/0x1f0
[   59.638860][ T4881]  __netlink_deliver_tap+0x2bd/0x4c0
[   59.644198][ T4881]  netlink_unicast+0x641/0x670
[   59.649066][ T4881]  netlink_sendmsg+0x5cc/0x6e0
[   59.653885][ T4881]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.659208][ T4881]  __sock_sendmsg+0x140/0x180
[   59.663958][ T4881]  ____sys_sendmsg+0x312/0x410
[   59.668796][ T4881]  __sys_sendmmsg+0x269/0x500
[   59.673533][ T4881]  ? trace_sys_enter+0x65/0xa0
[   59.678327][ T4881]  __x64_sys_sendmmsg+0x57/0x70
[   59.683189][ T4881]  x64_sys_call+0x2b4e/0x2e00
[   59.687887][ T4881]  do_syscall_64+0xc9/0x1c0
[   59.692463][ T4881]  ? clear_bhb_loop+0x55/0xb0
[   59.697223][ T4881]  ? clear_bhb_loop+0x55/0xb0
[   59.701946][ T4881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.707993][ T4881] RIP: 0033:0x7f967f0173b9
[   59.712504][ T4881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.732186][ T4881] RSP: 002b:00007f967dc97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   59.740603][ T4881] RAX: ffffffffffffffda RBX: 00007f967f1a5f80 RCX: 00007f967f0173b9
[   59.748634][ T4881] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c
[   59.756704][ T4881] RBP: 00007f967dc970a0 R08: 0000000000000000 R09: 0000000000000000
[   59.764764][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.772734][ T4881] R13: 000000000000000b R14: 00007f967f1a5f80 R15: 00007ffc3c0ff738
[   59.780712][ T4881]  </TASK>
[   59.790007][ T4881] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   59.798258][   T29] kauditd_printk_skb: 17 callbacks suppressed
[   59.798280][   T29] audit: type=1400 audit(1722604633.048:409): avc:  denied  { rmdir } for  pid=3265 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.829120][   T29] audit: type=1400 audit(1722604633.078:410): avc:  denied  { unlink } for  pid=3265 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   59.878177][ T4888] loop2: detected capacity change from 0 to 2048
[   59.904576][   T29] audit: type=1400 audit(1722604633.138:411): avc:  denied  { block_suspend } for  pid=4895 comm="syz.0.393" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   59.939374][   T29] audit: type=1400 audit(1722604633.178:412): avc:  denied  { write } for  pid=4887 comm="syz.2.390" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   59.963016][   T29] audit: type=1400 audit(1722604633.178:413): avc:  denied  { name_bind } for  pid=4887 comm="syz.2.390" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   60.232548][ T4910] hub 6-0:1.0: USB hub found
[   60.237565][ T4910] hub 6-0:1.0: 8 ports detected
[   60.337022][ T4909] loop3: detected capacity change from 0 to 1024
[   60.461459][ T4909] netlink: 'syz.3.397': attribute type 56 has an invalid length.
[   60.481033][ T4916] loop1: detected capacity change from 0 to 512
[   60.487507][ T4916] EXT4-fs: Ignoring removed i_version option
[   60.493853][ T4916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   60.501559][ T4914] loop2: detected capacity change from 0 to 2048
[   60.516240][ T4916] EXT4-fs (loop1): 1 truncate cleaned up
[   60.524132][ T4909] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   60.591627][ T4909] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   60.606879][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'.
[   60.625190][ T4914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   60.715669][ T4930] netlink: 'syz.4.403': attribute type 9 has an invalid length.
[   60.743961][ T1049] kernel write not supported for file /174/net/softnet_stat (pid: 1049 comm: kworker/0:2)
[   60.758022][ T4928] FAULT_INJECTION: forcing a failure.
[   60.758022][ T4928] name failslab, interval 1, probability 0, space 0, times 0
[   60.770769][ T4928] CPU: 1 UID: 0 PID: 4928 Comm: syz.3.401 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   60.781460][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   60.791587][ T4928] Call Trace:
[   60.794881][ T4928]  <TASK>
[   60.797823][ T4928]  dump_stack_lvl+0xf2/0x150
[   60.802542][ T4928]  dump_stack+0x15/0x20
[   60.806728][ T4928]  should_fail_ex+0x229/0x230
[   60.811489][ T4928]  ? __alloc_skb+0x10b/0x310
[   60.816175][ T4928]  should_failslab+0x8f/0xb0
[   60.820857][ T4928]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   60.826691][ T4928]  ? __rtnl_unlock+0x99/0xb0
[   60.831311][ T4928]  __alloc_skb+0x10b/0x310
[   60.835732][ T4928]  netlink_ack+0xef/0x4f0
[   60.840071][ T4928]  ? __dev_queue_xmit+0x161/0x1fe0
[   60.845191][ T4928]  netlink_rcv_skb+0x19c/0x230
[   60.849988][ T4928]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   60.855534][ T4928]  rtnetlink_rcv+0x1c/0x30
[   60.860050][ T4928]  netlink_unicast+0x593/0x670
[   60.864838][ T4928]  netlink_sendmsg+0x5cc/0x6e0
[   60.869611][ T4928]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.874922][ T4928]  __sock_sendmsg+0x140/0x180
[   60.879662][ T4928]  ____sys_sendmsg+0x312/0x410
[   60.884487][ T4928]  __sys_sendmmsg+0x269/0x500
[   60.889210][ T4928]  __x64_sys_sendmmsg+0x57/0x70
[   60.894069][ T4928]  x64_sys_call+0x2b4e/0x2e00
[   60.898819][ T4928]  do_syscall_64+0xc9/0x1c0
[   60.903339][ T4928]  ? clear_bhb_loop+0x55/0xb0
[   60.908078][ T4928]  ? clear_bhb_loop+0x55/0xb0
[   60.912769][ T4928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.918686][ T4928] RIP: 0033:0x7f92b63d73b9
[   60.923150][ T4928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.942856][ T4928] RSP: 002b:00007f92b5057048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   60.951320][ T4928] RAX: ffffffffffffffda RBX: 00007f92b6565f80 RCX: 00007f92b63d73b9
[   60.959394][ T4928] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c
[   60.967370][ T4928] RBP: 00007f92b50570a0 R08: 0000000000000000 R09: 0000000000000000
[   60.975356][ T4928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.983356][ T4928] R13: 000000000000004d R14: 00007f92b6565f80 R15: 00007ffe8c38a228
[   60.991337][ T4928]  </TASK>
[   60.996156][ T4933] loop0: detected capacity change from 0 to 14
[   61.042502][ T4928] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   61.074802][ T4939] bond1: entered promiscuous mode
[   61.080149][ T4939] bond1: entered allmulticast mode
[   61.102342][   T29] audit: type=1326 audit(1722604634.338:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd939073b9 code=0x7ffc0000
[   61.126147][   T29] audit: type=1326 audit(1722604634.338:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd939073b9 code=0x7ffc0000
[   61.149979][   T29] audit: type=1326 audit(1722604634.338:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd939073b9 code=0x7ffc0000
[   61.173232][   T29] audit: type=1326 audit(1722604634.338:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd939073b9 code=0x7ffc0000
[   61.196809][   T29] audit: type=1326 audit(1722604634.338:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd939073b9 code=0x7ffc0000
[   61.282803][ T4958] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   61.323993][ T4963] program syz.0.413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.345056][ T4963] program syz.0.413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.381387][ T4963] program syz.0.413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.419675][ T4967] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   61.476420][ T4971] loop4: detected capacity change from 0 to 2048
[   61.513256][ T4982] loop0: detected capacity change from 0 to 512
[   61.527870][ T4971] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   61.613785][ T4993] loop3: detected capacity change from 0 to 512
[   61.646208][ T4998] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   61.679171][ T4993] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.712231][ T5002] loop4: detected capacity change from 0 to 1764
[   61.731556][ T5002] iso9660: Unknown parameter '`'
[   61.758224][ T5002] autofs4:pid:5002:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294966781), cmd(0xc018937e)
[   61.772109][ T5002] autofs4:pid:5002:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[   61.799524][ T5006] loop0: detected capacity change from 0 to 1024
[   61.808848][ T4993] netlink: 'syz.3.420': attribute type 58 has an invalid length.
[   61.838773][ T5006] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[   61.854892][ T5006] openvswitch: netlink: Flow actions attr not present in new flow.
[   61.882506][ T5006] ip6tnl1: entered promiscuous mode
[   61.887817][ T5006] ip6tnl1: entered allmulticast mode
[   61.922998][ T5006] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   61.932853][ T5010] bond0: (slave bond_slave_0): Releasing backup interface
[   61.957800][ T5010] bond0: (slave bond_slave_1): Releasing backup interface
[   61.969266][ T5013] loop0: detected capacity change from 0 to 1024
[   61.987036][ T5010] team0: Port device team_slave_0 removed
[   62.023048][ T5010] team0: Port device team_slave_1 removed
[   62.069203][ T5010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.076731][ T5010] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.110613][ T5019] loop2: detected capacity change from 0 to 2048
[   62.125906][ T5010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.133343][ T5010] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.153801][ T5022] loop3: detected capacity change from 0 to 512
[   62.170141][ T5022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   62.213522][ T5011] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   62.236731][ T5022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   62.255242][ T5022] System zones: 1-12
[   62.259944][ T5022] EXT4-fs (loop3): 1 truncate cleaned up
[   62.330479][ T5031] loop2: detected capacity change from 0 to 512
[   62.360955][ T5031] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   62.369324][ T5031] EXT4-fs (loop2): orphan cleanup on readonly fs
[   62.377821][ T5031] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   62.394452][ T5031] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   62.402977][ T5031] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.430: casefold flag without casefold feature
[   62.417231][ T5031] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.430: couldn't read orphan inode 16 (err -117)
[   62.518199][ T5048] loop1: detected capacity change from 0 to 2048
[   62.527196][ T5048] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.553039][ T5049] loop0: detected capacity change from 0 to 2048
[   62.575693][ T5048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.435: bg 0: block 35: padding at end of block bitmap is not set
[   62.588793][ T5058] loop4: detected capacity change from 0 to 2048
[   62.608501][ T5048] EXT4-fs (loop1): Remounting filesystem read-only
[   62.621829][ T5049] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   62.707725][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'.
[   62.744900][ T5074] loop4: detected capacity change from 0 to 256
[   62.850262][ T5083] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   62.973889][ T5098] loop3: detected capacity change from 0 to 2048
[   62.988486][ T5096] hub 6-0:1.0: USB hub found
[   62.993423][ T5096] hub 6-0:1.0: 8 ports detected
[   63.051456][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.068221][ T5107] netlink: 92 bytes leftover after parsing attributes in process `syz.2.450'.
[   63.119465][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.153636][ T5088] chnl_net:caif_netlink_parms(): no params data found
[   63.223406][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.244384][ T5123] loop3: detected capacity change from 0 to 2048
[   63.361312][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.368536][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.370923][ T5106] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   63.375881][ T5088] bridge_slave_0: entered allmulticast mode
[   63.396934][ T5088] bridge_slave_0: entered promiscuous mode
[   63.404366][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.411525][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.435906][ T5088] bridge_slave_1: entered allmulticast mode
[   63.453168][ T5088] bridge_slave_1: entered promiscuous mode
[   63.488376][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.509225][ T5137] hub 6-0:1.0: USB hub found
[   63.513949][ T5137] hub 6-0:1.0: 8 ports detected
[   63.541333][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.731449][   T11] bond0 (unregistering): Released all slaves
[   63.743525][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.798453][ T5142] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   63.840728][ T5139] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   63.850213][ T5088] team0: Port device team_slave_0 added
[   63.860851][ T5088] team0: Port device team_slave_1 added
[   63.892423][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.899464][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.925485][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.938501][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.945464][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.971491][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.988643][ T5139] loop3: detected capacity change from 0 to 512
[   63.998218][ T5116] chnl_net:caif_netlink_parms(): no params data found
[   63.998427][ T5139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   64.016298][ T5139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   64.024311][ T5139] System zones: 
[   64.024309][   T11] hsr_slave_0: left promiscuous mode
[   64.029758][ T5145] loop0: detected capacity change from 0 to 1024
[   64.033172][ T5139] 1-12
[   64.042323][   T11] hsr_slave_1: left promiscuous mode
[   64.042701][ T5139] EXT4-fs (loop3): 1 truncate cleaned up
[   64.051338][ T5145] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.068231][   T11] veth1_macvtap: left promiscuous mode
[   64.073731][   T11] veth0_macvtap: left promiscuous mode
[   64.079365][   T11] veth1_vlan: left promiscuous mode
[   64.084624][   T11] veth0_vlan: left promiscuous mode
[   64.151248][ T5154] loop2: detected capacity change from 0 to 2048
[   64.273939][ T5165] loop2: detected capacity change from 0 to 2048
[   64.294723][ T5088] hsr_slave_0: entered promiscuous mode
[   64.300964][ T5088] hsr_slave_1: entered promiscuous mode
[   64.328336][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.335579][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.342790][ T5116] bridge_slave_0: entered allmulticast mode
[   64.349888][ T5116] bridge_slave_0: entered promiscuous mode
[   64.357283][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.362544][ T5174] loop2: detected capacity change from 0 to 512
[   64.364342][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.378191][ T5116] bridge_slave_1: entered allmulticast mode
[   64.384919][ T5116] bridge_slave_1: entered promiscuous mode
[   64.398958][ T5174] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.430598][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.442911][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.465958][ T5174] EXT4-fs (loop2): shut down requested (0)
[   64.476357][ T5116] team0: Port device team_slave_0 added
[   64.482764][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.492827][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.501796][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.510937][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.519865][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.528972][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.530170][ T5088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.538184][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.557491][ T3265] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   64.557774][ T5116] team0: Port device team_slave_1 added
[   64.594907][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.602030][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.628175][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.629548][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.629559][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.629583][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.692983][ T5088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.712602][ T5116] hsr_slave_0: entered promiscuous mode
[   64.719899][ T5116] hsr_slave_1: entered promiscuous mode
[   64.726301][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.733867][ T5116] Cannot create hsr debugfs directory
[   64.750338][ T5088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.800383][ T5088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.932147][ T5186] loop3: detected capacity change from 0 to 2048
[   64.956370][   T11] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   64.970210][   T11] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   64.988147][ T5186] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   65.017904][   T11] bond0 (unregistering): Released all slaves
[   65.020773][ T5193] loop0: detected capacity change from 0 to 2048
[   65.032848][   T11] bond1 (unregistering): Released all slaves
[   65.065618][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.079029][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.101496][   T11] tipc: Left network mode
[   65.113503][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.127756][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.168191][   T11] hsr_slave_0: left promiscuous mode
[   65.198121][   T11] hsr_slave_1: left promiscuous mode
[   65.205693][   T11] veth1_macvtap: left promiscuous mode
[   65.211258][   T11] veth0_macvtap: left promiscuous mode
[   65.216869][   T11] veth1_vlan: left promiscuous mode
[   65.222174][   T11] veth0_vlan: left allmulticast mode
[   65.227558][   T11] veth0_vlan: left promiscuous mode
[   65.238562][ T5204] loop0: detected capacity change from 0 to 2048
[   65.321199][   T29] kauditd_printk_skb: 67 callbacks suppressed
[   65.321217][   T29] audit: type=1400 audit(1722604638.558:485): avc:  denied  { setopt } for  pid=5211 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   65.371217][ T5213] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   65.381372][ T5210] FAULT_INJECTION: forcing a failure.
[   65.381372][ T5210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.394485][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.3.469 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   65.405183][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   65.415329][ T5210] Call Trace:
[   65.418678][ T5210]  <TASK>
[   65.421606][ T5210]  dump_stack_lvl+0xf2/0x150
[   65.426250][ T5210]  dump_stack+0x15/0x20
[   65.430548][ T5210]  should_fail_ex+0x229/0x230
[   65.435677][ T5210]  should_fail+0xb/0x10
[   65.440010][ T5210]  should_fail_usercopy+0x1a/0x20
[   65.445063][ T5210]  _copy_from_user+0x1e/0xd0
[   65.449673][ T5210]  copy_msghdr_from_user+0x54/0x2a0
[   65.454986][ T5210]  __sys_sendmmsg+0x22a/0x500
[   65.459769][ T5210]  __x64_sys_sendmmsg+0x57/0x70
[   65.464701][ T5210]  x64_sys_call+0x2b4e/0x2e00
[   65.469516][ T5210]  do_syscall_64+0xc9/0x1c0
[   65.474027][ T5210]  ? clear_bhb_loop+0x55/0xb0
[   65.478825][ T5210]  ? clear_bhb_loop+0x55/0xb0
[   65.483523][ T5210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.489460][ T5210] RIP: 0033:0x7f92b63d73b9
[   65.493869][ T5210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.513486][ T5210] RSP: 002b:00007f92b5057048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   65.521979][ T5210] RAX: ffffffffffffffda RBX: 00007f92b6565f80 RCX: 00007f92b63d73b9
[   65.529945][ T5210] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c
[   65.537992][ T5210] RBP: 00007f92b50570a0 R08: 0000000000000000 R09: 0000000000000000
[   65.546020][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.554009][ T5210] R13: 000000000000004d R14: 00007f92b6565f80 R15: 00007ffe8c38a228
[   65.562030][ T5210]  </TASK>
[   65.621695][ T5212] loop0: detected capacity change from 0 to 512
[   65.629363][ T5212] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent
[   65.677606][ T5187] chnl_net:caif_netlink_parms(): no params data found
[   65.698132][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.705533][ T5217] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   65.744282][ T5088] 8021q: adding VLAN 0 to HW filter on device team0
[   65.786684][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.793810][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.809145][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.816256][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.831294][ T5231] loop0: detected capacity change from 0 to 4096
[   65.832468][ T5217] loop3: detected capacity change from 0 to 512
[   65.848351][ T5217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   65.873980][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.883314][ T5217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   65.891842][ T5217] System zones: 1-12
[   65.919465][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.929928][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.947438][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.954602][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.968814][ T5217] EXT4-fs (loop3): 1 truncate cleaned up
[   65.976335][ T5187] bridge_slave_0: entered allmulticast mode
[   65.982819][ T5187] bridge_slave_0: entered promiscuous mode
[   65.995283][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.008519][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.015605][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.043403][ T5240] loop0: detected capacity change from 0 to 2048
[   66.052865][ T5187] bridge_slave_1: entered allmulticast mode
[   66.059625][ T5187] bridge_slave_1: entered promiscuous mode
[   66.066524][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.096862][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.115249][ T5240] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   66.134368][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.148324][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.173365][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.186218][ T5187] team0: Port device team_slave_0 added
[   66.198790][ T5187] team0: Port device team_slave_1 added
[   66.210565][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.241179][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.248211][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.274247][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.287231][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.294275][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.320341][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.340072][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.373983][ T5187] hsr_slave_0: entered promiscuous mode
[   66.380380][ T5187] hsr_slave_1: entered promiscuous mode
[   66.386418][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.393993][ T5187] Cannot create hsr debugfs directory
[   66.407476][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.435699][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'.
[   66.454807][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.481456][ T5088] veth0_vlan: entered promiscuous mode
[   66.493218][ T5116] 8021q: adding VLAN 0 to HW filter on device team0
[   66.504753][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.533635][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'.
[   66.534107][ T5088] veth1_vlan: entered promiscuous mode
[   66.546524][   T29] audit: type=1400 audit(1722604639.788:486): avc:  denied  { connect } for  pid=5261 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   66.554580][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.574616][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.577233][   T29] audit: type=1400 audit(1722604639.818:487): avc:  denied  { read } for  pid=5261 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   66.603023][ T5088] veth0_macvtap: entered promiscuous mode
[   66.611074][ T5088] veth1_macvtap: entered promiscuous mode
[   66.620164][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.627397][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.645070][ T5264] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   66.651981][ T5116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.662699][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.690923][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.701607][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.714040][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.798410][   T11] bond0 (unregistering): Released all slaves
[   66.811094][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.821632][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.832792][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.842609][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.851534][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.860276][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.869750][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.889711][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.943691][ T5282] loop3: detected capacity change from 0 to 512
[   66.952161][ T5282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   66.964816][ T5282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   66.978168][ T5282] System zones: 1-12
[   66.986454][ T5282] EXT4-fs (loop3): 1 truncate cleaned up
[   66.992460][ T5282] EXT4-fs mount: 108 callbacks suppressed
[   66.992476][ T5282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.010812][   T11] hsr_slave_0: left promiscuous mode
[   67.017880][   T11] hsr_slave_1: left promiscuous mode
[   67.025422][   T11] veth1_macvtap: left promiscuous mode
[   67.030995][   T11] veth0_macvtap: left promiscuous mode
[   67.036638][   T11] veth1_vlan: left promiscuous mode
[   67.041979][   T11] veth0_vlan: left promiscuous mode
[   67.054658][ T5290] hub 9-0:1.0: USB hub found
[   67.059930][ T5290] hub 9-0:1.0: 8 ports detected
[   67.065929][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.129590][   T29] audit: type=1400 audit(1722604640.368:488): avc:  denied  { bind } for  pid=5293 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   67.150274][   T29] audit: type=1400 audit(1722604640.378:489): avc:  denied  { recv } for  pid=5280 comm="syz.1.446" saddr=172.20.20.28 src=20000 daddr=172.20.20.28 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   67.191710][   T29] audit: type=1400 audit(1722604640.428:490): avc:  denied  { remount } for  pid=5299 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   67.213794][   T29] audit: type=1400 audit(1722604640.438:491): avc:  denied  { listen } for  pid=5299 comm="syz.3.486" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.234285][   T29] audit: type=1400 audit(1722604640.438:492): avc:  denied  { setattr } for  pid=5299 comm="syz.3.486" name="NETLINK" dev="sockfs" ino=11330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.258135][   T29] audit: type=1400 audit(1722604640.438:493): avc:  denied  { map } for  pid=5299 comm="syz.3.486" path="socket:[11337]" dev="sockfs" ino=11337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.281380][   T29] audit: type=1400 audit(1722604640.438:494): avc:  denied  { read } for  pid=5299 comm="syz.3.486" path="socket:[11337]" dev="sockfs" ino=11337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.318167][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   67.401026][ T5298] team0: Device ip6_vti0 is up. Set it down before adding it as a team port
[   67.421438][ T5296] loop0: detected capacity change from 0 to 512
[   67.431373][ T5296] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   67.465612][ T5187] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.472951][ T5296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[   67.481685][ T5296] System zones: 1-12
[   67.484483][ T5187] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.492838][ T5296] EXT4-fs (loop0): 1 truncate cleaned up
[   67.494697][ T5317] netlink: 5 bytes leftover after parsing attributes in process `syz.3.490'.
[   67.500678][ T5296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.521897][ T5187] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.546599][ T5116] veth0_vlan: entered promiscuous mode
[   67.553590][ T5187] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.583639][ T5116] veth1_vlan: entered promiscuous mode
[   67.623090][ T5327] loop3: detected capacity change from 0 to 256
[   67.630930][ T5328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=5328 comm=syz.3.494
[   67.635621][ T5116] veth0_macvtap: entered promiscuous mode
[   67.654247][ T5116] veth1_macvtap: entered promiscuous mode
[   67.673129][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.683691][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.693625][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.704067][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.715215][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.729129][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.737639][ T5310] team0: Device bridge0 is up. Set it down before adding it as a team port
[   67.751305][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.761918][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.771785][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.782241][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.796581][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.840498][ T5187] 8021q: adding VLAN 0 to HW filter on device team0
[   67.848948][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.857764][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.866678][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.875422][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.895407][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.902514][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.918768][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.925949][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.983346][ T5187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.983389][ T5187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.041102][ T4340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.090951][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.103800][ T5365] cgroup: Unknown subsys name 'euid>00000000000000000000'
[   68.104342][ T5363] loop0: detected capacity change from 0 to 2048
[   68.127298][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.139567][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.153075][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.167865][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.181248][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.208055][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.218043][ T4340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.230131][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[   68.272100][ T5377] loop0: detected capacity change from 0 to 256
[   68.272540][ T5187] veth0_vlan: entered promiscuous mode
[   68.353749][ T5187] veth1_vlan: entered promiscuous mode
[   68.407199][ T5383] loop1: detected capacity change from 0 to 2048
[   68.433813][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.464763][ T5187] veth0_macvtap: entered promiscuous mode
[   68.497543][ T5187] veth1_macvtap: entered promiscuous mode
[   68.527580][ T5383] ==================================================================
[   68.535786][ T5383] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll
[   68.542942][ T5383] 
[   68.545276][ T5383] read-write to 0xffff8881452ed870 of 4 bytes by task 5386 on cpu 1:
[   68.553354][ T5383]  io_submit_sqes+0x23f/0x1080
[   68.558148][ T5383]  __se_sys_io_uring_enter+0x1c6/0x15a0
[   68.563729][ T5383]  __x64_sys_io_uring_enter+0x78/0x90
[   68.569121][ T5383]  x64_sys_call+0x26d0/0x2e00
[   68.573839][ T5383]  do_syscall_64+0xc9/0x1c0
[   68.578388][ T5383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.584311][ T5383] 
[   68.586644][ T5383] read to 0xffff8881452ed870 of 4 bytes by task 5383 on cpu 0:
[   68.594192][ T5383]  io_uring_poll+0xcf/0x190
[   68.598710][ T5383]  __io_arm_poll_handler+0x229/0xf30
[   68.604020][ T5383]  io_arm_poll_handler+0x433/0x5f0
[   68.609143][ T5383]  io_queue_async+0x89/0x370
[   68.613761][ T5383]  io_req_task_submit+0xb3/0xc0
[   68.618812][ T5383]  io_handle_tw_list+0x1b9/0x200
[   68.623776][ T5383]  tctx_task_work_run+0x6c/0x1b0
[   68.628734][ T5383]  tctx_task_work+0x40/0x80
[   68.633269][ T5383]  task_work_run+0x13a/0x1a0
[   68.637864][ T5383]  get_signal+0xeee/0x1080
[   68.642295][ T5383]  arch_do_signal_or_restart+0x95/0x4b0
[   68.647948][ T5383]  syscall_exit_to_user_mode+0x59/0x130
[   68.653521][ T5383]  do_syscall_64+0xd6/0x1c0
[   68.658049][ T5383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.663969][ T5383] 
[   68.666301][ T5383] value changed: 0x00000054 -> 0x00000068
[   68.672042][ T5383] 
[   68.674372][ T5383] Reported by Kernel Concurrency Sanitizer on:
[   68.680525][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.1.505 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0
[   68.691105][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   68.701157][ T5383] ==================================================================
[   68.753144][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.763619][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.773586][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.784210][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.794263][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.804816][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.818639][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.852118][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.862626][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.872588][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.883041][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.892896][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.903333][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.913888][ T5088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.914950][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.946786][ T5187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.955580][ T5187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.964330][ T5187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.973086][ T5187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0