last executing test programs:

13.650413224s ago: executing program 4 (id=3925):
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000007})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x7}, {0x6}]})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x3d8, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0xa}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x3, 0x17}, {0x2, 0x2}, {0x7, 0x2}, {0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x5}, {0x2}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x2}, {0x2, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x54, 0xb, 0x6d, 0x2, 0x5, 0x6c, 0x2, 0x8ab30e63c2d22e1d, 0x4, 0x48, 0x36, 0x6c, 0xb, 0x6, 0xb, 0x5, 0x48, 0x18, 0x30, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xffff, 0x3, 0x8, 0x2, 0xc600, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x3, 0x5, 0x8, 0x5, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x38, 0x0, 0x8, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x30, 0x4, 0x1, 0x9, 0xb, 0x12, 0x6]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x81, 0x6, 0x8, 0xb3, 0x2, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0x30, 0x16, 0x60, 0x60]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x24, 0x1, 0x6c, 0x6c, 0x5, 0x30, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x4d, 0x18, 0x3, 0x12]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x6}, {0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0xa}, {0x5, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x6}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x18, 0x0, 0xc, 0x1b, 0x1, 0x12, 0x5, 0x36, 0x18, 0x18, 0x16, 0x4e, 0x6c, 0x18, 0x1, 0x30, 0x3, 0x1b, 0x18, 0x6c, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x8, 0x4, 0x3, 0xa4, 0xd643, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x89ce, 0x4, 0x2, 0xb1, 0x9, 0x2]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x73f0, 0x4c, 0xd36, 0x1, 0x53a, 0x8]}}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x18}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x7}, {0x4, 0x15}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x2}, {0x7, 0x2}, {0x1}, {0x7, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x3}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {}, {0x1, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x2, 0x5}, {}, {0x2, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x6}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x7fff, 0x4, 0xffff, 0x9, 0x1, 0x322e]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb496, 0xee, 0x6, 0x5, 0x0, 0x800, 0xfffd, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3, 0x0, 0x3ff, 0x6, 0x4a, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x10, 0x4, 0x5, 0xc3, 0x54aa, 0xe785, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0xea, 0x9, 0x6, 0xad96, 0x3, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x3a, 0xb, 0xb, 0x6, 0x3, 0x2, 0x30, 0x1, 0x6, 0x48, 0x1b, 0x1, 0x18, 0x36, 0x24, 0x48, 0x3, 0x30, 0x60, 0x2, 0x36, 0x5, 0x1, 0x6, 0xc, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x1404c000}, 0x400c084)
dup(r0)
r3 = socket$kcm(0x2, 0x3, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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")
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close(r6)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x68}, 0x0)

12.788192837s ago: executing program 4 (id=3938):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@orlov}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c")
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$eJzs3U9oHOfZAPBnFNmWlO8zId+Ha4LjTJwUbHCUlewoiBySzWokT7LaFburYFNKYmo5CMtJiBuofajjS0tLS+ipxySHXtpT6aWl0EILbU+F9tpbINBD0pJCDw0BlZ1ZWZKllfxHlkPy+wlr3pl5Z97nfXc9z46kmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJLaVKUylkQ9b8yfTvurTbWas1usX9nfb9dNtmg3Iun+i6GhOFguOvj/q6sPdL8diUPl3KEY6k6G4sr9Bx545v8GB1a23yKgnTa42cJLl69cOLu0tPDmLgZyF3z/1+tmfzISNzmyM1kjbzfz2epMlubtZjo5MVF58tR0O53O61n7TLuTzaa1VlbtNFvp0dqxdGxy8kSajZ5pzjdmpqr1LB0sFz79xHilMpG+MDqXVVvtZuPJF0bbtVN5vZ43ZooNu6u7dZ7uvhFfzDtpJ6vOpun5xaV9N4Q6vCH084tLC2Prlny2vHbu0OMPfPjWB/9aXBjfrrvjlfHxsbHx8bGJJCIqlcHVBU9NPvV0pTJYuUFsqLGrb1o+h3b4CA63b6CX/6MeeTRiPk5HuulXLaaiFc2YjdU38Nr1PSv5/6tP/uPPW7X7zpr8X2b5gUMHV1cPR5H/D5dzh/vl/7Ltvfv6xHy3vlb7fykux5W4EGdjKZZiId68K+0lO7evgZ2NbCayaEQe7WhGHrNRLZakvSVpTMZETEQlXo5TMR3tSGM68qhHFu04E+3oRFa8o2rRiiyq0YlmtCKNo1GLY5HGWEzGZJyINLIYjTPRjPloxExMRbXYy/lYLMb9xA1xHfj2K7969S8fvlu8WiuVxrYa4rcjikqfbFFpQzLvk/+HQ/7/chm6hboR8fudOnzDHVleyf8AAADAF1ZS/PS9e/6/Jx4uStN5PfvaNlsNdr+9vTsRAgAAAHeq+M3/oe5kT7f0cCTd8//K+ko/23NvggMAAAB2RFJcY5dExEg8UpZWLpeq3OvYAAAAgJ1R/P7/cHcyEnG1WOD8HwAAAL5gXvpFr3DjPfY/WLnH7sDcvuQ3/4xWa09y8r3TjycXq9161Yv3ldv1Ji9d32Nn+qEkejcULPY1MXjl/u78YC07lKzcPPezfeX04+L7Q4PXN18fx3PD5dIkSboBXJvrG0CsC2B/rxfXAyjm4gfxaFnn0XPl9NzKmrK3I9N5PRutNevPjEW1un+gk53uvPXa4rei6P73GrP7kzi/uLQw+o3Xl84VsVzr7uXaxV5/N9xHcYtYlnsjEA9vvLtxd1d7igsxeu2OlO1W1vZ/4NL+bmHgFtr8Thz5n6LOkZGy7sj6/g912xwb7df7kbJ/Yxt6PrjxjVVGcaY3d0MUj5VLHzv6WDnZJIrxraLojsX42ih6g3BrY7FpFPFARLz76NXT//5DM8lObBfFiTuMAuBeOV/c9aebhcp0VGahT5dL3fzfau3ZG+vyTrnBzR7lkqKVbZ7kc/PZ/T/LWxzRj5Z1jpafJwYf2iSvVDY5or+x+MYfe0f0kz/98XtfP/ynn992Xh9aqTK8Unjwd/cPRBHFcC+KK701rT3JD69nkjKrvt9d/n7fdtv18aQ7hPd98+IbceDS5StPLF48++rCqwuvjY+fmKicrFSeSpLei7dcfGKQewDYxJE4XCbyvs/Y6fMUnuIDQJm7T251Vn1fJA9e/5OCbk58PZbiXBwvrjaIiEc2b3dkzZ8hHI8jvWA3P2sdWfOEl+PbnFvujejVHd+27siax8us+sqP7ubrAQC74cg2ebhv/l9z7n68z3n30IY82s3lx8q6x1Yi6J/LI+LZ3R0NAPhyyFofJyOd7yatVj738tjk5Fi1cypLW83ai2krn5rZFxGdrBWD1cZMls61mp1mrVnvFl7Kp7J22p6fm2u2Oul0s5XONdv56eLJ72nv0e/tbLba6OS19lw9q7aztNZsdKq1TjqVt2vp3Pzz9bx9KmsVG7fnslo+ndeqnbzZSNvN+VYtG03TdpatqZhPZY1OPp13i410rpXPVlvXIqI+P5ulU1m71srnOs1yhytt5Y3pZmu22O3f99/r0QaAz4dLl69cOLu0tPDm7RX+djOV+7c+5MbCAHAPrGbpj/73xnUbf/j+6Se7FRcAAAAAAAAAAAAAALDqDq//21gY3tkdDm1VZ/lqxMZVyfLy8i00MRzb1NnbG6odHqhdKVzbkf0MxGbj/PkpJP1XvfLssxf6bf781YOnbq6Jbf+nDEZE71LXtz/a+8t3ylXP3VZ3Bm59q79GxG20tZxsUefeHpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDP/DQAA//9z/mgx")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x15, 0x0, 0x0, 0x2000, 0x1002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000180), 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100005c000000000000000000000000a20000000001203000000000000000004010000000900010073797a30000000003c400000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000023c000b80200007800e000100636f6e6e6c696d69740000000c000280d100000000000000180001800400020063676e6e6c696d6974000000040002800900010073797a30000000001400000010000100000000000026ac39740425f04ac51a8fa1ef94adde0b49ee82cdae8fd37c614c0be3c1b561dbea0664415a94b87e663de1ca0e9b63df22e8c9bb", @ANYRES8, @ANYRESHEX], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000000206050000000000000000000000810012000300686173683a6e65742c706f72740000000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x8)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r6, 0x0, 0xfffffffffffffd7a)
syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0xfffe, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x16, 0x1, 0x0, 0x20, {[@window={0x3, 0x3, 0x6}, @sack={0x5, 0xe, [0x101, 0x5, 0x8000]}, @exp_fastopen={0xfe, 0x8, 0xf989, "2d053bc9"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x7fe0, 0x2}]}}}}}}}, 0x0)

12.608293532s ago: executing program 4 (id=3940):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000640)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@sysvgroups}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc05c5340, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x80045300, 0x0)
tkill(r1, 0x7)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110800000000000020001000000008000300", @ANYRES32=r8], 0x1c}}, 0x0)
sendfile(r4, r5, 0x0, 0x10001)

11.727321487s ago: executing program 4 (id=3955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x40, 0x2, 0x0, 0x1}, {0x6}]})

11.663434292s ago: executing program 4 (id=3956):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]})
sync()

11.57494647s ago: executing program 4 (id=3957):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r1, 0x5460, &(0x7f0000000300))
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3000000000050004000040000005000500020000000500010006000000140007800800064000000000080013"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext={0x0, 0x4}, 0x22c0, 0x0, 0x8, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x70, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
close(r0) (fail_nth: 1)

1.697796566s ago: executing program 3 (id=4053):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000640)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@sysvgroups}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110800000000000020001000000008000300", @ANYRES32=r7], 0x1c}}, 0x0)
sendfile(r3, r4, 0x0, 0x10001)

1.65492137s ago: executing program 0 (id=4054):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@orlov}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x15, 0x0, 0x0, 0x2000, 0x1002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000180), 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100005c000000000000000000000000a20000000001203000000000000000004010000000900010073797a30000000003c400000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000023c000b80200007800e000100636f6e6e6c696d69740000000c000280d100000000000000180001800400020063676e6e6c696d6974000000040002800900010073797a30000000001400000010000100000000000026ac39740425f04ac51a8fa1ef94adde0b49ee82cdae8fd37c614c0be3c1b561dbea0664415a94b87e663de1ca0e9b63df22e8c9bb", @ANYRES8, @ANYRESHEX], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100000000"], 0x1c}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000000206050000000000000000000000810012000300686173683a6e65742c706f72740000000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x8)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r6, 0x0, 0xfffffffffffffd7a)
syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0xfffe, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x16, 0x1, 0x0, 0x20, {[@window={0x3, 0x3, 0x6}, @sack={0x5, 0xe, [0x101, 0x5, 0x8000]}, @exp_fastopen={0xfe, 0x8, 0xf989, "2d053bc9"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x7fe0, 0x2}]}}}}}}}, 0x0)

1.616278883s ago: executing program 0 (id=4055):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46, 0x50]}, 0x31)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
shmdt(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

1.527740831s ago: executing program 0 (id=4056):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x204cd0, &(0x7f0000000500)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0xf7, 0x497, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000080201000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c000)
recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)

1.461713176s ago: executing program 0 (id=4059):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008006aa6133cefb4d98248c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (fail_nth: 5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = dup(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x301440)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r8, r9, 0xa, 0x0, @void}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0)
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
io_setup(0x81, &(0x7f0000000240)=<r10=>0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1})
io_submit(r10, 0x1e, &(0x7f0000001b40))
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r11, &(0x7f0000000000)=0x700, 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f00000004c0), 0x3, 0x45f, &(0x7f0000000500)="$eJzs3MtvG0UYAPBv13FLaEtCKY8+gEBBRDySJi3QAwdAIHEoEhIc4BglaVXqNqgJEq0qaBEqJ4SQOHFBHPkXOMEFIU5IXOGOKlUol7acjNZeJ7Zjm8Rx6lD/ftK2M95xZj7Pjj2743UAA2ss+yeJ2B0Rf0TESDXbWGCs+t/N5Uuzt5YvzSZRLr/9d1Ipd2P50mytaO15u/LMeBqRfpbEwRb1Ll64eGamVJo/n+cnl85+MLl44eJzp8/OnJo/NX9u+vjxY0enXnxh+vmexJm16caBjxcO7X/jva/ePPFFQ/xNcfTIWKedT5bLPa6uv/bUpZOhPjaEDSlERNZdxcr4H4lCrHbeSLz+aV8bB2ypcrlc3tV+9+UycAdLojFvyMOgqH3QZ+e/ta15EvDy1k0/+u76K9UToCzum/lW3TMUaV6m2HR+20tjEfHu5X++zbbYmusQAAANfszmP8+2mv+l8UBduXvytaHRiLg3IvZGxH0RsS8i7o+olH0wIh7aYP3NiyRr5z/pta4CW6ds/vdSvrbVOP+rzf5itJDn9lTiLyYnT5fmj+SvyXgUd2b5qQ51/PTa71+221c//8u2rP7aXDBvx7WhnY3PmZtZmtlMzPWuX4k4MNQq/mRlJSCJiP0RcaDLOk4//f2hdvv+O/4OerDOVP4u4qlq/1+Opvhrks7rk5N3RWn+yGTtqFjr19+uvtWu/k3F3wNZ/9/d8vhfiX80qV+vXdx4HVf//LztOU23x/+O5J26IRrx0czS0vmpiB3JiWqj6x+fbio3vVo+i3/8cOvxvzdWX4mDEZEdxA9HxCMR8Wje9sci4vGIONwh/l9efeL97uPfWln8cxvq/9XEjmh+pHWicObnHxoqHV0T/63O/X+skhrPH1nP+9962tXd0QwAAAD/P2lE7I4knVhJp+nERPX78vsi0tLC4tIzJxc+PDdXvUdgNIpp7UrXSN310Kn8tL6avxIR1a8W1PYfza8bf10YruQnZhdKc/0OHgbcrjbjP/NXod+tA7ac+7VgcBn/MLiMfxhcxj8Mrhbjf7gf7QBuv1af/5/0oR3A7dc0/i37wQBx/g+Dq+34v5N/+Qeo8PkPA2lxONbeG1/7vYV13D9/4WJspPAAJaK4LZqx+UQ5adm5kXbzB4cjYpvE1d/EN9ujGe0T/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KV/AwAA//8RqtuF")
r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8)

1.074411029s ago: executing program 0 (id=4062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00deffffff000000006d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000000)=0xffffff80, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7)
ioctl$EVIOCGBITSW(r4, 0x40095505, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a1d7a988000000001c00128009000100626f6e64"], 0x44}}, 0x0)

1.009697945s ago: executing program 1 (id=4064):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)

1.009155015s ago: executing program 1 (id=4065):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ff07000000000000080000f30700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500e50400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x17d4}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = creat(&(0x7f0000000200)='./file0\x00', 0x8)
renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00', 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

922.165632ms ago: executing program 1 (id=4066):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@orlov}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c")
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x15, 0x0, 0x0, 0x2000, 0x1002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000180), 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100000000000000000c00"], 0x1c}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000000206050000000000000000000000810012000300686173683a6e65742c706f72740000000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x8)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r6, 0x0, 0xfffffffffffffd7a)
syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0xfffe, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x16, 0x1, 0x0, 0x20, {[@window={0x3, 0x3, 0x6}, @sack={0x5, 0xe, [0x101, 0x5, 0x8000]}, @exp_fastopen={0xfe, 0x8, 0xf989, "2d053bc9"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x7fe0, 0x2}]}}}}}}}, 0x0)

832.60024ms ago: executing program 1 (id=4068):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0xb}, 0x20)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f000001000000000000"], 0x58}, 0x1, 0x7}, 0x0)

768.771155ms ago: executing program 3 (id=4069):
timer_create(0x3, 0x0, &(0x7f0000006bc0)=<r0=>0x0)
timer_getoverrun(r0) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r3}, 0x38) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x8000000}, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x40800, 0x1}) (async, rerun: 32)
io_uring_enter(r7, 0x47f4, 0x1386, 0xc, 0x0, 0x0) (rerun: 32)

624.299567ms ago: executing program 2 (id=4070):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000e597727200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x800, @loopback, 0x5b5}, 0x1c)

623.426857ms ago: executing program 1 (id=4079):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0xb}, 0x20)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f000001000000000000"], 0x58}, 0x1, 0x7}, 0x0)

613.741638ms ago: executing program 3 (id=4071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7)
getuid()
write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x3)

570.267942ms ago: executing program 2 (id=4072):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 5)

508.570917ms ago: executing program 3 (id=4073):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000600)=""/220, 0xdc, <r1=>0x0, &(0x7f0000000840)=""/199, 0xc7}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200002a9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfffffffffffffe47, 0x0, 0x41100, 0x28, '\x00', r2, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$RTC_UIE_ON(r0, 0x7003)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000030000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0)
ioctl$RTC_SET_TIME(r0, 0x7004, 0x0)
clock_adjtime(0x0, &(0x7f0000000400)={0x1ff, 0x8bcc0c0000000000, 0x0, 0x800000000000008, 0xa4, 0x3, 0x29eb6be, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005, 0x3, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3})

499.941547ms ago: executing program 3 (id=4074):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80140)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

297.292595ms ago: executing program 2 (id=4075):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)

296.766725ms ago: executing program 1 (id=4076):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000380)=""/94, 0x34, 0x5e, 0x0, 0x10001, 0x10000, @value}, 0x28)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x204cd0, &(0x7f0000000500)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0xf7, 0x497, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c000)
recvmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)

254.415989ms ago: executing program 0 (id=4077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000000000fcff000000df53abc4a7117c1967a32afe45e928416e55ea32f34c3e5c60cc0fd68eb7c8002ddac46dbdd2f542057c20670134038e6ece2fa6839b0accda5fb393e90c2023617325e36fdc15edff9446b593449a7852"], 0x48)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000200", @ANYRES32=r3, @ANYBLOB="00000000000000000300"/20, @ANYRES32, @ANYBLOB="03000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000093, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x7c8)
getpeername$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r5, 0x20, &(0x7f0000000780)={0x0, 0x0, <r7=>0x0, &(0x7f00000008c0)=""/86, 0x56}}, 0x10)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x10000, 0x10}, 0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8}, &(0x7f0000000900), &(0x7f0000000180)=r9}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000090000000000000009000000b7080000000000007b8af8ff00000000b7080000feffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000fcffffff85000000a5000000dadaaa8e5455c79b29a639ffe44532d793ec0d66082acd950000eaffffff00"], &(0x7f0000000200)='syzkaller\x00', 0xed7, 0x0, &(0x7f0000000240), 0x40f00, 0x3b, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r9, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x3, 0x3, 0x2, 0xc}], 0x10, 0x5, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r10=>r6, 0x4, 0x1, 0x5, 0x1, 0x46, @local, @private1, 0x10, 0x8, 0x6, 0x3}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000f4e04104ba610000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r13 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)

232.33448ms ago: executing program 2 (id=4078):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@orlov}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x15, 0x0, 0x0, 0x2000, 0x1002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000180), 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100005c000000000000000000000000a20000000001203000000000000000004010000000900010073797a30000000003c400000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000023c000b80200007800e000100636f6e6e6c696d69740000000c000280d100000000000000180001800400020063676e6e6c696d6974000000040002800900010073797a30000000001400000010000100000000000026ac39740425f04ac51a8fa1ef94adde0b49ee82cdae8fd37c614c0be3c1b561dbea0664415a94b87e663de1ca0e9b63df22e8c9bb", @ANYRES8, @ANYRESHEX], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100000000000000000c00"], 0x1c}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000000206050000000000000000000000810012000300686173683a6e65742c706f72740000000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x8)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r6, 0x0, 0xfffffffffffffd7a)
syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0xfffe, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x16, 0x1, 0x0, 0x20, {[@window={0x3, 0x3, 0x6}, @sack={0x5, 0xe, [0x101, 0x5, 0x8000]}, @exp_fastopen={0xfe, 0x8, 0xf989, "2d053bc9"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x7fe0, 0x2}]}}}}}}}, 0x0)

229.700781ms ago: executing program 3 (id=4080):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000640)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@sysvgroups}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110800000000000020001000000008000300", @ANYRES32=r7], 0x1c}}, 0x0)
sendfile(r3, r4, 0x0, 0x10001)

93.195802ms ago: executing program 2 (id=4081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x40, 0x2, 0x0, 0x1}, {0x6}]})

0s ago: executing program 2 (id=4082):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200c407, &(0x7f0000000440)={[{@dioread_lock}, {@debug}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xebdc}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}, {@acl}], [], 0x2c}, 0x84, 0x4da, &(0x7f0000000f40)="$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")
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000840))

kernel console output (not intermixed with test programs):

rms(): no params data found
[  425.504904][ T3578] tipc: Disabling bearer <eth:team0>
[  425.510378][ T3578] tipc: Left network mode
[  425.510440][T18088] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.521877][T18088] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.529054][T18088] bridge_slave_1: entered allmulticast mode
[  425.535707][T18088] bridge_slave_1: entered promiscuous mode
[  425.574469][ T3578] hsr_slave_0: left promiscuous mode
[  425.580153][ T3578] hsr_slave_1: left promiscuous mode
[  425.586123][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.593601][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.601140][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.608532][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.618048][ T3578] veth1_macvtap: left promiscuous mode
[  425.623562][ T3578] veth0_macvtap: left promiscuous mode
[  425.629053][ T3578] veth1_vlan: left promiscuous mode
[  425.634292][ T3578] veth0_vlan: left promiscuous mode
[  425.732419][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  425.743199][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  425.824612][T18088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.840872][T18092] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.848008][T18092] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.855225][T18092] bridge_slave_0: entered allmulticast mode
[  425.861857][T18092] bridge_slave_0: entered promiscuous mode
[  425.887862][T18088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.902496][T18093] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.909614][T18093] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.920753][T18093] bridge_slave_0: entered allmulticast mode
[  425.927192][T18093] bridge_slave_0: entered promiscuous mode
[  425.947431][T18092] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.954615][T18092] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.961932][T18092] bridge_slave_1: entered allmulticast mode
[  425.968277][T18092] bridge_slave_1: entered promiscuous mode
[  425.979224][T18098] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.986454][T18098] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.993839][T18098] bridge_slave_0: entered allmulticast mode
[  426.000322][T18098] bridge_slave_0: entered promiscuous mode
[  426.007539][T18093] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.014694][T18093] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.021924][T18093] bridge_slave_1: entered allmulticast mode
[  426.028405][T18093] bridge_slave_1: entered promiscuous mode
[  426.039778][T18085] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.046899][T18085] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.054268][T18085] bridge_slave_0: entered allmulticast mode
[  426.060525][T18085] bridge_slave_0: entered promiscuous mode
[  426.076693][T18098] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.083803][T18098] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.091122][T18098] bridge_slave_1: entered allmulticast mode
[  426.097618][T18098] bridge_slave_1: entered promiscuous mode
[  426.115592][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.125231][T18085] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.132491][T18085] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.139726][T18085] bridge_slave_1: entered allmulticast mode
[  426.146364][T18085] bridge_slave_1: entered promiscuous mode
[  426.158465][T18088] team0: Port device team_slave_0 added
[  426.170881][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.186982][T18092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.196949][T18088] team0: Port device team_slave_1 added
[  426.204472][T18098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.215422][T18098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.240694][T18092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.266634][T18098] team0: Port device team_slave_0 added
[  426.280053][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.300382][T18088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.307392][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.333584][T18088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.345468][T18098] team0: Port device team_slave_1 added
[  426.357819][T18093] team0: Port device team_slave_0 added
[  426.364899][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.385330][T18092] team0: Port device team_slave_0 added
[  426.392548][T18092] team0: Port device team_slave_1 added
[  426.398523][T18088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.405484][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.431486][T18088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.448568][T18093] team0: Port device team_slave_1 added
[  426.459897][T18085] team0: Port device team_slave_0 added
[  426.478906][T18098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.485931][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.511865][T18098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.523375][T18098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.530327][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.556442][T18098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.572976][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.579941][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.605957][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.617528][T18085] team0: Port device team_slave_1 added
[  426.629182][T18092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.636216][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.662226][T18092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.675103][T18092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.682125][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.708100][T18092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.722165][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.729148][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.755104][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.772028][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.779000][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.805018][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.834578][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.841701][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.867735][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.905727][T18088] hsr_slave_0: entered promiscuous mode
[  426.912151][T18088] hsr_slave_1: entered promiscuous mode
[  426.918010][T18088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.925608][T18088] Cannot create hsr debugfs directory
[  426.956760][T18092] hsr_slave_0: entered promiscuous mode
[  426.962902][T18092] hsr_slave_1: entered promiscuous mode
[  426.968881][T18092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.976476][T18092] Cannot create hsr debugfs directory
[  426.992183][T18098] hsr_slave_0: entered promiscuous mode
[  426.998625][T18098] hsr_slave_1: entered promiscuous mode
[  427.004619][T18098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  427.012221][T18098] Cannot create hsr debugfs directory
[  427.045936][ T3578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.064915][T18085] hsr_slave_0: entered promiscuous mode
[  427.071289][T18085] hsr_slave_1: entered promiscuous mode
[  427.077246][T18085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  427.084814][T18085] Cannot create hsr debugfs directory
[  427.092372][T18093] hsr_slave_0: entered promiscuous mode
[  427.098478][T18093] hsr_slave_1: entered promiscuous mode
[  427.104614][T18093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  427.112282][T18093] Cannot create hsr debugfs directory
[  427.139253][ T3578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.211352][ T3578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.297163][T18092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.315515][ T3578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.351527][T18092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.390476][ T3578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.414114][T18092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.428549][ T3578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.453980][T18092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.467797][ T3578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.516579][ T3578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.576119][ T3578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.624175][ T3578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.665904][ T3578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.754494][ T3578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.834184][ T3578] bridge_slave_1: left allmulticast mode
[  427.839840][ T3578] bridge_slave_1: left promiscuous mode
[  427.845873][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.853541][ T3578] bridge_slave_0: left allmulticast mode
[  427.859183][ T3578] bridge_slave_0: left promiscuous mode
[  427.864906][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.873676][ T3578] bridge_slave_1: left allmulticast mode
[  427.879394][ T3578] bridge_slave_1: left promiscuous mode
[  427.885085][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.892967][ T3578] bridge_slave_0: left allmulticast mode
[  427.898602][ T3578] bridge_slave_0: left promiscuous mode
[  427.904283][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.912844][ T3578] bridge_slave_1: left allmulticast mode
[  427.918510][ T3578] bridge_slave_1: left promiscuous mode
[  427.924228][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.931933][ T3578] bridge_slave_0: left allmulticast mode
[  427.937651][ T3578] bridge_slave_0: left promiscuous mode
[  427.943296][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.951706][ T3578] bridge_slave_1: left allmulticast mode
[  427.957365][ T3578] bridge_slave_1: left promiscuous mode
[  427.963031][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.970938][ T3578] bridge_slave_0: left allmulticast mode
[  427.976628][ T3578] bridge_slave_0: left promiscuous mode
[  427.982341][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.483420][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.494498][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.505124][ T3578] bond0 (unregistering): Released all slaves
[  428.514472][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.526000][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.536817][ T3578] bond0 (unregistering): Released all slaves
[  428.546279][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.559417][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.570373][ T3578] bond0 (unregistering): Released all slaves
[  428.579862][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.590786][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.601158][ T3578] bond0 (unregistering): Released all slaves
[  428.755086][ T3578] hsr_slave_0: left promiscuous mode
[  428.760921][ T3578] hsr_slave_1: left promiscuous mode
[  428.766582][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.774088][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.781828][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.789294][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.798974][ T3578] hsr_slave_0: left promiscuous mode
[  428.804732][ T3578] hsr_slave_1: left promiscuous mode
[  428.810364][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.817873][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.825540][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.833025][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.842970][ T3578] hsr_slave_0: left promiscuous mode
[  428.848615][ T3578] hsr_slave_1: left promiscuous mode
[  428.854313][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.861833][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.869370][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.876914][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.886521][ T3578] hsr_slave_0: left promiscuous mode
[  428.892198][ T3578] hsr_slave_1: left promiscuous mode
[  428.897881][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.905356][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.913122][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.920577][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.935471][ T3578] veth1_macvtap: left promiscuous mode
[  428.941044][ T3578] veth0_macvtap: left promiscuous mode
[  428.946523][ T3578] veth1_vlan: left promiscuous mode
[  428.951893][ T3578] veth0_vlan: left promiscuous mode
[  428.957678][ T3578] veth1_macvtap: left promiscuous mode
[  428.963202][ T3578] veth0_macvtap: left promiscuous mode
[  428.968829][ T3578] veth1_vlan: left promiscuous mode
[  428.974109][ T3578] veth0_vlan: left promiscuous mode
[  428.979826][ T3578] veth1_macvtap: left promiscuous mode
[  428.985373][ T3578] veth0_macvtap: left promiscuous mode
[  428.990881][ T3578] veth1_vlan: left promiscuous mode
[  428.996093][ T3578] veth0_vlan: left promiscuous mode
[  429.003298][ T3578] veth1_macvtap: left promiscuous mode
[  429.008857][ T3578] veth0_macvtap: left promiscuous mode
[  429.014467][ T3578] veth1_vlan: left promiscuous mode
[  429.019673][ T3578] veth0_vlan: left promiscuous mode
[  429.263460][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  429.273645][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  429.347997][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  429.358849][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  429.432913][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  429.443259][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  429.514976][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  429.526055][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  429.567916][ T5204] lo speed is unknown, defaulting to 1000
[  429.795649][T18098] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  429.804156][T18098] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  429.812547][T18098] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  429.821099][T18098] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  429.856499][T18098] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.867970][T18098] 8021q: adding VLAN 0 to HW filter on device team0
[  429.877462][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.884591][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.898895][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.905952][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.968399][T18098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.074120][T18098] veth0_vlan: entered promiscuous mode
[  430.082499][T18098] veth1_vlan: entered promiscuous mode
[  430.109588][T18098] veth0_macvtap: entered promiscuous mode
[  430.116115][T18085] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  430.124824][T18085] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  430.134550][T18085] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  430.143777][T18098] veth1_macvtap: entered promiscuous mode
[  430.150310][T18085] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  430.165796][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.176332][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.186184][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.196661][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.206499][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.216936][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.226801][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.237334][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.247156][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.257601][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.268444][T18098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.283653][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.294119][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.304031][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.314546][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.324364][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.334845][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.344763][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.355203][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.365083][T18098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.375607][T18098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.386429][T18098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.401734][T18098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.410450][T18098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.419235][T18098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.428072][T18098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.467335][T18085] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.480747][T18085] 8021q: adding VLAN 0 to HW filter on device team0
[  430.492782][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.499946][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.515581][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.522813][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.552404][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  430.552457][   T29] audit: type=1326 audit(1729154398.141:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  430.582809][   T29] audit: type=1326 audit(1729154398.141:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  430.606448][T18085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.637548][T18093] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  430.646284][T18093] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  430.655450][T18093] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  430.667584][T18093] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  430.686465][   T29] audit: type=1326 audit(1729154398.271:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  430.706088][T18195] loop4: detected capacity change from 0 to 512
[  430.710106][   T29] audit: type=1326 audit(1729154398.271:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  430.723485][T18195] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3853: bad orphan inode 17
[  430.750277][T18195] ext4_test_bit(bit=16, block=4) = 1
[  430.755684][T18195] is_bad_inode(inode)=0
[  430.759867][T18195] NEXT_ORPHAN(inode)=0
[  430.761793][T18085] veth0_vlan: entered promiscuous mode
[  430.763963][T18195] max_ino=32
[  430.772712][T18195] i_nlink=1
[  430.776692][T18195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.776758][T18085] veth1_vlan: entered promiscuous mode
[  430.819591][T18093] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.826931][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.827672][T18092] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  430.846807][T18092] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  430.856930][T18092] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  430.867713][T18092] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  430.899327][T18088] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  430.908813][T18085] veth0_macvtap: entered promiscuous mode
[  430.917402][T18088] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  430.926066][T18088] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  430.942088][T18093] 8021q: adding VLAN 0 to HW filter on device team0
[  430.949721][T18085] veth1_macvtap: entered promiscuous mode
[  430.958951][T18088] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  430.995633][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.006198][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.016093][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.026666][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.036589][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.047183][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.057039][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.067589][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.077430][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.087873][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.097791][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.108237][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.119089][T18085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.129805][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.136962][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.159542][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.166636][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.177651][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.188187][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.198072][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.208531][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.218353][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.228816][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.238676][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.249143][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.259098][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.269550][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.279474][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.289913][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.302322][T18085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.323745][T18085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.332649][T18085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.341430][T18085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.350233][T18085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.446246][T18211] loop1: detected capacity change from 0 to 512
[  431.446650][T18092] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.459580][T18211] EXT4-fs: Ignoring removed orlov option
[  431.468065][T18211] EXT4-fs: Ignoring removed oldalloc option
[  431.480258][T18211] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3848: Parent and EA inode have the same ino 15
[  431.483788][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.501453][T18211] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3848: Parent and EA inode have the same ino 15
[  431.513001][T18092] 8021q: adding VLAN 0 to HW filter on device team0
[  431.528029][  T216] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.535212][  T216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.539752][T18211] EXT4-fs (loop1): 1 orphan inode deleted
[  431.544408][  T216] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.555415][  T216] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.559941][T18211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.576128][T18088] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.611559][T18088] 8021q: adding VLAN 0 to HW filter on device team0
[  431.619192][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.641755][  T216] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.648885][  T216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.657855][  T216] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.664971][  T216] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.682283][T18088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  431.717391][T18093] veth0_vlan: entered promiscuous mode
[  431.733945][T18093] veth1_vlan: entered promiscuous mode
[  431.770933][T18093] veth0_macvtap: entered promiscuous mode
[  431.780939][T18088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.801316][T18093] veth1_macvtap: entered promiscuous mode
[  431.823254][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.833817][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.843818][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.854300][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.864190][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.874783][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.884780][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.895215][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.905254][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.915716][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.925564][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.936051][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.945882][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.956382][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.969875][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.978273][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.988798][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.989164][T18234] loop4: detected capacity change from 0 to 512
[  431.998631][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.015432][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.025276][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.035901][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.045741][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.056191][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.066049][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.072448][T18234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.076529][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.076558][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.076571][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.076581][T18093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.129691][T18093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.142428][T18234] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.143328][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.161424][T18234] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.3857: corrupted inode contents
[  432.172794][T18093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.175818][T18234] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #18: comm syz.4.3857: mark_inode_dirty error
[  432.181992][T18093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.193992][T18234] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.3857: corrupted inode contents
[  432.201934][T18093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.215733][T18234] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.3857: mark_inode_dirty error
[  432.222457][T18093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.238826][T18234] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.3857: mark inode dirty (error -117)
[  432.258151][T18234] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[  432.272809][T18092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.329378][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.343989][T18088] veth0_vlan: entered promiscuous mode
[  432.358431][T18088] veth1_vlan: entered promiscuous mode
[  432.376116][   T29] audit: type=1400 audit(1729154399.961:8446): avc:  denied  { read } for  pid=18247 comm="syz.4.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  432.401446][T18246] loop2: detected capacity change from 0 to 1024
[  432.406640][T18088] veth0_macvtap: entered promiscuous mode
[  432.416140][T18246] EXT4-fs: Ignoring removed nomblk_io_submit option
[  432.435280][T18088] veth1_macvtap: entered promiscuous mode
[  432.437360][T18253] loop4: detected capacity change from 0 to 2048
[  432.447503][T18246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  432.463773][T18092] veth0_vlan: entered promiscuous mode
[  432.470189][T18246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  432.472980][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.488886][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.494889][T18253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.498736][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.521225][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.521466][T18246] System zones: 
[  432.531033][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.531073][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.534612][T18246] 0-1
[  432.545029][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.554874][T18246] , 3-36
[  432.557444][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.557460][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.557473][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.557495][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.567895][T18246] 
[  432.569793][T18246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.570760][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.570772][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.570786][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.570798][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.592608][T18253] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.3859: corrupted in-inode xattr: bad e_name length
[  432.600905][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.615678][T18088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.714203][  T216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  432.715225][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.739471][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.749447][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.751413][  T216] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  432.759874][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.772160][  T216] EXT4-fs (loop4): This should not happen!! Data will be lost
[  432.772160][  T216] 
[  432.781932][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.781950][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.791590][  T216] EXT4-fs (loop4): Total free blocks count 0
[  432.801974][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.801992][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.802013][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.811799][  T216] EXT4-fs (loop4): Free/Dirty block details
[  432.817770][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.828173][  T216] EXT4-fs (loop4): free_blocks=2415919104
[  432.838011][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.848406][  T216] EXT4-fs (loop4): dirty_blocks=48
[  432.854325][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.864117][  T216] EXT4-fs (loop4): Block reservation details
[  432.869816][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.880250][  T216] EXT4-fs (loop4): i_reserved_data_blocks=3
[  432.885556][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.902586][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.911738][T18088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.947198][T18088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.958206][T18088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.969329][T18092] veth1_vlan: entered promiscuous mode
[  432.982218][T18088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.991021][T18088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.999733][T18088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.008474][T18088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.020732][   T29] audit: type=1400 audit(1729154400.601:8447): avc:  denied  { ioctl } for  pid=18264 comm="syz.4.3861" path="socket:[77936]" dev="sockfs" ino=77936 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  433.070248][T18092] veth0_macvtap: entered promiscuous mode
[  433.086887][T18092] veth1_macvtap: entered promiscuous mode
[  433.128271][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.138873][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.148809][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.159366][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.169189][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.179716][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.189731][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.200301][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.204017][   T29] audit: type=1400 audit(1729154400.721:8448): avc:  denied  { map } for  pid=18262 comm="syz.1.3862" path="socket:[77949]" dev="sockfs" ino=77949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  433.210173][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.233483][   T29] audit: type=1400 audit(1729154400.721:8449): avc:  denied  { accept } for  pid=18262 comm="syz.1.3862" path="socket:[77949]" dev="sockfs" ino=77949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  433.243858][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.243884][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.287854][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.297682][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.308121][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.317946][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.328381][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.338215][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.348703][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.360099][T18092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.362304][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.368337][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.386839][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.396697][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.407144][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.417102][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.427556][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.437445][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.447886][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.457810][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.468290][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.478128][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.488570][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.498394][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.508853][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.518702][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.529210][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.539217][T18092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.549726][T18092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.560851][T18092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.605936][T18092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.614942][T18092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.619570][   T29] audit: type=1326 audit(1729154401.201:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.4.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  433.623710][T18092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.647264][   T29] audit: type=1326 audit(1729154401.201:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.4.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0296fdff9 code=0x7ffc0000
[  433.655940][T18092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.688307][T18281] loop2: detected capacity change from 0 to 512
[  433.706366][T18281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  433.714797][T18281] System zones: 1-12
[  433.718891][T18281] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.3864: inode #0: comm syz.2.3864: iget: illegal inode #
[  433.735708][T18281] EXT4-fs (loop2): get orphan inode failed
[  433.760664][T18281] EXT4-fs (loop2): mount failed
[  433.957832][T18296] loop1: detected capacity change from 0 to 512
[  433.973691][T18296] EXT4-fs: Ignoring removed orlov option
[  434.000830][T18296] EXT4-fs: Ignoring removed oldalloc option
[  434.025457][T18296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3869: Parent and EA inode have the same ino 15
[  434.038826][T18296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3869: Parent and EA inode have the same ino 15
[  434.057630][T18296] EXT4-fs (loop1): 1 orphan inode deleted
[  434.078395][T18296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.117955][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.136950][T18306] loop3: detected capacity change from 0 to 512
[  434.158541][T18306] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3873: bad orphan inode 17
[  434.178047][T18306] ext4_test_bit(bit=16, block=4) = 1
[  434.183415][T18306] is_bad_inode(inode)=0
[  434.187574][T18306] NEXT_ORPHAN(inode)=0
[  434.191730][T18306] max_ino=32
[  434.194944][T18306] i_nlink=1
[  434.198565][T18306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.241852][T18309] loop1: detected capacity change from 0 to 512
[  434.251889][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.264617][T18309] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3874: bad orphan inode 17
[  434.275761][T18309] ext4_test_bit(bit=16, block=4) = 1
[  434.281163][T18309] is_bad_inode(inode)=0
[  434.285322][T18309] NEXT_ORPHAN(inode)=0
[  434.289429][T18309] max_ino=32
[  434.292668][T18309] i_nlink=1
[  434.302940][T18309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.495943][T18314] loop2: detected capacity change from 0 to 1024
[  434.503390][T18314] EXT4-fs: Ignoring removed nomblk_io_submit option
[  434.510824][T18314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  434.523598][T18314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  434.532826][T18314] System zones: 0-1, 3-36
[  434.538286][T18314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.760229][T18328] FAULT_INJECTION: forcing a failure.
[  434.760229][T18328] name failslab, interval 1, probability 0, space 0, times 0
[  434.773113][T18328] CPU: 1 UID: 0 PID: 18328 Comm: syz.0.3881 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  434.785410][T18328] Tainted: [W]=WARN
[  434.789205][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  434.799335][T18328] Call Trace:
[  434.802623][T18328]  <TASK>
[  434.805554][T18328]  dump_stack_lvl+0xf2/0x150
[  434.810155][T18328]  dump_stack+0x15/0x20
[  434.814331][T18328]  should_fail_ex+0x223/0x230
[  434.819083][T18328]  ? sock_alloc_inode+0x34/0xa0
[  434.823945][T18328]  should_failslab+0x8f/0xb0
[  434.828641][T18328]  kmem_cache_alloc_lru_noprof+0x51/0x2a0
[  434.834501][T18328]  sock_alloc_inode+0x34/0xa0
[  434.839356][T18328]  ? __pfx_sock_alloc_inode+0x10/0x10
[  434.844835][T18328]  alloc_inode+0x3c/0x160
[  434.849172][T18328]  new_inode_pseudo+0x15/0x20
[  434.853858][T18328]  __sock_create+0x12b/0x500
[  434.858470][T18328]  ? terminate_walk+0x260/0x280
[  434.863333][T18328]  sock_create_kern+0x38/0x50
[  434.868107][T18328]  mptcp_subflow_create_socket+0x84/0x710
[  434.873849][T18328]  ? __rcu_read_unlock+0x4e/0x70
[  434.878858][T18328]  ? avc_has_perm_noaudit+0x1cc/0x210
[  434.884285][T18328]  __mptcp_nmpc_sk+0xb4/0x3c0
[  434.888994][T18328]  mptcp_connect+0x59/0x760
[  434.893585][T18328]  __inet_stream_connect+0x162/0x790
[  434.898915][T18328]  ? _raw_spin_unlock_bh+0x36/0x40
[  434.904077][T18328]  ? release_sock+0x117/0x150
[  434.908914][T18328]  ? _raw_spin_unlock_bh+0x36/0x40
[  434.914107][T18328]  ? lock_sock_nested+0x10f/0x140
[  434.919149][T18328]  ? selinux_netlbl_socket_connect+0x113/0x130
[  434.925375][T18328]  inet_stream_connect+0x48/0x70
[  434.930388][T18328]  ? __pfx_inet_stream_connect+0x10/0x10
[  434.936048][T18328]  __sys_connect+0x19d/0x1b0
[  434.940663][T18328]  __x64_sys_connect+0x41/0x50
[  434.945451][T18328]  x64_sys_call+0x2220/0x2d60
[  434.950142][T18328]  do_syscall_64+0xc9/0x1c0
[  434.954686][T18328]  ? clear_bhb_loop+0x55/0xb0
[  434.959432][T18328]  ? clear_bhb_loop+0x55/0xb0
[  434.964203][T18328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.970298][T18328] RIP: 0033:0x7f451653dff9
[  434.974721][T18328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  434.994345][T18328] RSP: 002b:00007f45151b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  435.002784][T18328] RAX: ffffffffffffffda RBX: 00007f45166f5f80 RCX: 00007f451653dff9
[  435.010782][T18328] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004
[  435.018757][T18328] RBP: 00007f45151b7090 R08: 0000000000000000 R09: 0000000000000000
[  435.026758][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.034787][T18328] R13: 0000000000000000 R14: 00007f45166f5f80 R15: 00007ffec5b118c8
[  435.042921][T18328]  </TASK>
[  435.046044][T18328] socket: no more sockets
[  435.085085][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.157761][T18342] loop1: detected capacity change from 0 to 512
[  435.167180][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.192254][T18342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  435.276068][T18342] System zones: 1-12
[  435.280153][T18342] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.3886: inode #0: comm syz.1.3886: iget: illegal inode #
[  435.293897][T18342] EXT4-fs (loop1): get orphan inode failed
[  435.299965][T18342] EXT4-fs (loop1): mount failed
[  435.316241][T18352] loop2: detected capacity change from 0 to 512
[  435.322836][T18352] EXT4-fs: Ignoring removed orlov option
[  435.328759][T18352] EXT4-fs: Ignoring removed oldalloc option
[  435.346443][T18352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3885: Parent and EA inode have the same ino 15
[  435.359307][T18352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3885: Parent and EA inode have the same ino 15
[  435.374999][T18352] EXT4-fs (loop2): 1 orphan inode deleted
[  435.381276][T18352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.421405][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.624374][T18366] loop4: detected capacity change from 0 to 512
[  435.632868][T18366] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3894: bad orphan inode 17
[  435.644785][T18366] ext4_test_bit(bit=16, block=4) = 1
[  435.650130][T18366] is_bad_inode(inode)=0
[  435.654370][T18366] NEXT_ORPHAN(inode)=0
[  435.658473][T18366] max_ino=32
[  435.661774][T18366] i_nlink=1
[  435.667424][T18366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.712268][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  435.712284][   T29] audit: type=1326 audit(1729154403.291:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.2.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  435.741981][   T29] audit: type=1326 audit(1729154403.291:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.2.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  435.829516][T18372] loop2: detected capacity change from 0 to 1024
[  435.839030][T18372] EXT4-fs: Ignoring removed nomblk_io_submit option
[  435.848002][T18372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  435.857777][T18372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  435.866045][T18372] System zones: 0-1, 3-36
[  435.873352][T18372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.111802][T18386] loop1: detected capacity change from 0 to 512
[  436.118273][T18386] EXT4-fs: Ignoring removed orlov option
[  436.126008][T18386] EXT4-fs: Ignoring removed oldalloc option
[  436.134076][T18386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3900: Parent and EA inode have the same ino 15
[  436.146718][T18386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3900: Parent and EA inode have the same ino 15
[  436.164442][T18386] EXT4-fs (loop1): 1 orphan inode deleted
[  436.177968][T18386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.206147][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.235235][   T29] audit: type=1326 audit(1729154403.821:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18398 comm="syz.3.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d195dff9 code=0x7ffc0000
[  436.259484][   T29] audit: type=1326 audit(1729154403.821:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18398 comm="syz.3.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f41d195dff9 code=0x7ffc0000
[  436.260896][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.283125][   T29] audit: type=1326 audit(1729154403.821:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18398 comm="syz.3.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d195dff9 code=0x7ffc0000
[  436.315622][   T29] audit: type=1326 audit(1729154403.821:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18398 comm="syz.3.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d195dff9 code=0x7ffc0000
[  436.344531][   T29] audit: type=1326 audit(1729154403.931:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.3904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x0
[  436.373393][T18403] loop3: detected capacity change from 0 to 512
[  436.388990][T18404] loop2: detected capacity change from 0 to 2048
[  436.395929][T18403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  436.396167][T18404] EXT4-fs: Ignoring removed mblk_io_submit option
[  436.405676][T18403] System zones: 1-12
[  436.415000][T18403] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.3907: inode #0: comm syz.3.3907: iget: illegal inode #
[  436.428560][T18403] EXT4-fs (loop3): get orphan inode failed
[  436.434577][T18403] EXT4-fs (loop3): mount failed
[  436.439954][T18404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.469662][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.503861][   T29] audit: type=1400 audit(1729154404.091:8512): avc:  denied  { shutdown } for  pid=18402 comm="syz.2.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  436.562693][   T29] audit: type=1400 audit(1729154404.151:8513): avc:  denied  { ioctl } for  pid=18402 comm="syz.2.3906" path="/9/file0/cgroup.controllers" dev="loop2" ino=18 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  436.564134][T18416] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3906: bg 0: block 234: padding at end of block bitmap is not set
[  436.605276][T18416] EXT4-fs (loop2): Remounting filesystem read-only
[  436.652621][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.150830][   T29] audit: type=1326 audit(1729154404.741:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  437.258408][T18442] loop3: detected capacity change from 0 to 512
[  437.301718][T18442] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3919: bad orphan inode 17
[  437.315409][T18442] ext4_test_bit(bit=16, block=4) = 1
[  437.320778][T18442] is_bad_inode(inode)=0
[  437.325003][T18442] NEXT_ORPHAN(inode)=0
[  437.329186][T18442] max_ino=32
[  437.332448][T18442] i_nlink=1
[  437.377609][T18442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.606009][T18461] loop4: detected capacity change from 0 to 512
[  437.623528][T18461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  437.638432][T18461] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  437.664560][T18464] loop2: detected capacity change from 0 to 512
[  437.671523][T18464] EXT4-fs: Ignoring removed orlov option
[  437.677213][T18464] EXT4-fs: Ignoring removed oldalloc option
[  437.700009][T18464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3926: Parent and EA inode have the same ino 15
[  437.712519][T18464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3926: Parent and EA inode have the same ino 15
[  437.725662][T18464] EXT4-fs (loop2): 1 orphan inode deleted
[  437.731788][T18464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.762709][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.791731][T18467] loop2: detected capacity change from 0 to 512
[  437.805999][T18467] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3927: bad orphan inode 17
[  437.816338][T18467] ext4_test_bit(bit=16, block=4) = 1
[  437.821698][T18467] is_bad_inode(inode)=0
[  437.825922][T18467] NEXT_ORPHAN(inode)=0
[  437.830044][T18467] max_ino=32
[  437.833635][T18467] i_nlink=1
[  437.837687][T18467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.865733][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.092780][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.411315][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.437092][T18497] loop4: detected capacity change from 0 to 512
[  438.443789][T18497] EXT4-fs: Ignoring removed orlov option
[  438.448179][T18495] loop1: detected capacity change from 0 to 512
[  438.449529][T18497] EXT4-fs: Ignoring removed oldalloc option
[  438.465963][T18497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.3938: Parent and EA inode have the same ino 15
[  438.479042][T18497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.3938: Parent and EA inode have the same ino 15
[  438.491472][T18495] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3939: bad orphan inode 17
[  438.501613][T18495] ext4_test_bit(bit=16, block=4) = 1
[  438.503202][T18497] EXT4-fs (loop4): 1 orphan inode deleted
[  438.506895][T18495] is_bad_inode(inode)=0
[  438.506906][T18495] NEXT_ORPHAN(inode)=0
[  438.506915][T18495] max_ino=32
[  438.513615][T18497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.516931][T18495] i_nlink=1
[  438.527546][T18495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.585144][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.607288][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.626570][T18501] loop4: detected capacity change from 0 to 1024
[  438.635761][T18501] EXT4-fs: Ignoring removed nomblk_io_submit option
[  438.645561][T18501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  438.658907][T18501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  438.682865][T18501] System zones: 0-1, 3-36
[  438.689900][T18501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.161147][T18531] loop3: detected capacity change from 0 to 512
[  439.167746][T18531] EXT4-fs: Ignoring removed orlov option
[  439.173691][T18531] EXT4-fs: Ignoring removed oldalloc option
[  439.186686][T18531] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3951: Parent and EA inode have the same ino 15
[  439.200753][T18531] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3951: Parent and EA inode have the same ino 15
[  439.214949][T18531] EXT4-fs (loop3): 1 orphan inode deleted
[  439.221123][T18531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.260548][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.306319][T18537] loop3: detected capacity change from 0 to 512
[  439.314394][T18537] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3953: bad orphan inode 17
[  439.324738][T18537] ext4_test_bit(bit=16, block=4) = 1
[  439.330129][T18537] is_bad_inode(inode)=0
[  439.334412][T18537] NEXT_ORPHAN(inode)=0
[  439.338690][T18537] max_ino=32
[  439.342002][T18537] i_nlink=1
[  439.346081][T18537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.373639][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.397224][T18540] loop3: detected capacity change from 0 to 512
[  439.405155][T18540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  439.413294][T18540] System zones: 1-12
[  439.417471][T18540] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.3954: inode #0: comm syz.3.3954: iget: illegal inode #
[  439.432986][T18540] EXT4-fs (loop3): get orphan inode failed
[  439.438901][T18540] EXT4-fs (loop3): mount failed
[  439.465438][T18098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.626224][T18549] FAULT_INJECTION: forcing a failure.
[  439.626224][T18549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.640140][T18549] CPU: 0 UID: 0 PID: 18549 Comm: syz.4.3957 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  439.652438][T18549] Tainted: [W]=WARN
[  439.656248][T18549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  439.666333][T18549] Call Trace:
[  439.669623][T18549]  <TASK>
[  439.672567][T18549]  dump_stack_lvl+0xf2/0x150
[  439.677179][T18549]  dump_stack+0x15/0x20
[  439.681404][T18549]  should_fail_ex+0x223/0x230
[  439.686133][T18549]  should_fail+0xb/0x10
[  439.690355][T18549]  should_fail_usercopy+0x1a/0x20
[  439.695422][T18549]  _copy_to_user+0x1e/0xa0
[  439.699939][T18549]  simple_read_from_buffer+0xa0/0x110
[  439.705348][T18549]  proc_fail_nth_read+0xf9/0x140
[  439.710402][T18549]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  439.716017][T18549]  vfs_read+0x195/0x720
[  439.720194][T18549]  ? fdget_pos+0x100/0x1c0
[  439.724622][T18549]  ? fdget_pos+0xe9/0x1c0
[  439.729009][T18549]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  439.735192][T18549]  ksys_read+0xeb/0x1b0
[  439.739372][T18549]  __x64_sys_read+0x42/0x50
[  439.744006][T18549]  x64_sys_call+0x27d3/0x2d60
[  439.748725][T18549]  do_syscall_64+0xc9/0x1c0
[  439.753264][T18549]  ? clear_bhb_loop+0x55/0xb0
[  439.758047][T18549]  ? clear_bhb_loop+0x55/0xb0
[  439.762784][T18549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.768712][T18549] RIP: 0033:0x7fd0296fca3c
[  439.773159][T18549] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  439.792833][T18549] RSP: 002b:00007fd028377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  439.801282][T18549] RAX: ffffffffffffffda RBX: 00007fd0298b5f80 RCX: 00007fd0296fca3c
[  439.809255][T18549] RDX: 000000000000000f RSI: 00007fd0283770a0 RDI: 0000000000000009
[  439.817256][T18549] RBP: 00007fd028377090 R08: 0000000000000000 R09: 0000000000000000
[  439.825242][T18549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.833215][T18549] R13: 0000000000000000 R14: 00007fd0298b5f80 R15: 00007fff94b1c218
[  439.841192][T18549]  </TASK>
[  440.094394][T18562] loop2: detected capacity change from 0 to 512
[  440.101335][T18562] EXT4-fs: Ignoring removed orlov option
[  440.102951][T18564] loop1: detected capacity change from 0 to 512
[  440.107053][T18562] EXT4-fs: Ignoring removed oldalloc option
[  440.117982][T18564] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3964: bad orphan inode 17
[  440.129714][T18564] ext4_test_bit(bit=16, block=4) = 1
[  440.131275][T18562] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3963: Parent and EA inode have the same ino 15
[  440.135110][T18564] is_bad_inode(inode)=0
[  440.148017][T18562] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3963: Parent and EA inode have the same ino 15
[  440.151684][T18564] NEXT_ORPHAN(inode)=0
[  440.166685][T18562] EXT4-fs (loop2): 1 orphan inode deleted
[  440.167970][T18564] max_ino=32
[  440.167981][T18564] i_nlink=1
[  440.168538][T18564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.174132][T18562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.204833][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.225280][T18569] loop1: detected capacity change from 0 to 512
[  440.235178][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.245312][T18569] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3965: bad orphan inode 17
[  440.255536][T18569] ext4_test_bit(bit=16, block=4) = 1
[  440.260894][T18569] is_bad_inode(inode)=0
[  440.265072][T18569] NEXT_ORPHAN(inode)=0
[  440.269172][T18569] max_ino=32
[  440.272427][T18569] i_nlink=1
[  440.276234][T18569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.281840][T18572] loop2: detected capacity change from 0 to 1024
[  440.295506][T18572] EXT4-fs: Ignoring removed nomblk_io_submit option
[  440.302582][T18572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  440.312525][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.322812][T18575] loop3: detected capacity change from 0 to 512
[  440.324278][T18572] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  440.337495][T18575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  440.347517][T18575] System zones: 1-12
[  440.351525][T18572] System zones: 0-1, 3-36
[  440.356808][T18575] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.3977: inode #0: comm syz.3.3977: iget: illegal inode #
[  440.366211][T18580] loop1: detected capacity change from 0 to 512
[  440.371358][T18572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.377626][T18575] EXT4-fs (loop3): get orphan inode failed
[  440.391411][T18580] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3968: bad orphan inode 17
[  440.396655][T18575] EXT4-fs (loop3): mount failed
[  440.407157][T18580] ext4_test_bit(bit=16, block=4) = 1
[  440.414738][T18580] is_bad_inode(inode)=0
[  440.418913][T18580] NEXT_ORPHAN(inode)=0
[  440.423056][T18580] max_ino=32
[  440.426335][T18580] i_nlink=1
[  440.430054][T18580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.454089][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.564507][T18590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18590 comm=syz.0.3971
[  441.100594][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.118922][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  441.118940][   T29] audit: type=1326 audit(1729154408.701:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.168906][   T29] audit: type=1326 audit(1729154408.701:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.192527][   T29] audit: type=1326 audit(1729154408.701:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.215946][   T29] audit: type=1326 audit(1729154408.701:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.239483][   T29] audit: type=1326 audit(1729154408.701:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.263067][   T29] audit: type=1326 audit(1729154408.701:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.286760][   T29] audit: type=1326 audit(1729154408.721:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d921cdff9 code=0x7ffc0000
[  441.335514][T18606] loop3: detected capacity change from 0 to 512
[  441.344117][T18609] FAULT_INJECTION: forcing a failure.
[  441.344117][T18609] name failslab, interval 1, probability 0, space 0, times 0
[  441.345011][T18607] loop2: detected capacity change from 0 to 512
[  441.356874][T18609] CPU: 0 UID: 0 PID: 18609 Comm: syz.1.3978 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  441.363567][T18606] EXT4-fs: Ignoring removed orlov option
[  441.375292][T18609] Tainted: [W]=WARN
[  441.375302][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  441.375323][T18609] Call Trace:
[  441.381295][T18606] EXT4-fs: Ignoring removed oldalloc option
[  441.384771][T18609]  <TASK>
[  441.384783][T18609]  dump_stack_lvl+0xf2/0x150
[  441.411754][T18609]  dump_stack+0x15/0x20
[  441.415962][T18609]  should_fail_ex+0x223/0x230
[  441.420726][T18609]  ? prepare_creds+0x37/0x480
[  441.425593][T18609]  should_failslab+0x8f/0xb0
[  441.430249][T18609]  kmem_cache_alloc_noprof+0x4c/0x290
[  441.435672][T18609]  prepare_creds+0x37/0x480
[  441.440208][T18609]  selinux_lsm_setattr+0x198/0x640
[  441.445342][T18609]  selinux_setprocattr+0x4e/0x70
[  441.450392][T18609]  security_setprocattr+0x198/0x1c0
[  441.455785][T18609]  proc_pid_attr_write+0x1e7/0x220
[  441.460980][T18609]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  441.466627][T18609]  vfs_write+0x26c/0x910
[  441.471029][T18609]  ? __fget_files+0x1d4/0x210
[  441.475737][T18609]  ksys_write+0xeb/0x1b0
[  441.480098][T18609]  __x64_sys_write+0x42/0x50
[  441.484744][T18609]  x64_sys_call+0x27dd/0x2d60
[  441.489572][T18609]  do_syscall_64+0xc9/0x1c0
[  441.494111][T18609]  ? clear_bhb_loop+0x55/0xb0
[  441.498840][T18609]  ? clear_bhb_loop+0x55/0xb0
[  441.503690][T18609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.509650][T18609] RIP: 0033:0x7f0c2cb5dff9
[  441.514096][T18609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.533717][T18609] RSP: 002b:00007f0c2b7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  441.542162][T18609] RAX: ffffffffffffffda RBX: 00007f0c2cd15f80 RCX: 00007f0c2cb5dff9
[  441.550205][T18609] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000006
[  441.558234][T18609] RBP: 00007f0c2b7d7090 R08: 0000000000000000 R09: 0000000000000000
[  441.566229][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.574281][T18609] R13: 0000000000000000 R14: 00007f0c2cd15f80 R15: 00007ffe1b7767b8
[  441.582276][T18609]  </TASK>
[  441.599240][T18607] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3975: bad orphan inode 17
[  441.609973][T18606] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3976: Parent and EA inode have the same ino 15
[  441.614289][T18607] ext4_test_bit(bit=16, block=4) = 1
[  441.627703][T18607] is_bad_inode(inode)=0
[  441.631993][T18607] NEXT_ORPHAN(inode)=0
[  441.636110][T18607] max_ino=32
[  441.639313][T18607] i_nlink=1
[  441.651608][T18606] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3976: Parent and EA inode have the same ino 15
[  441.664618][T18607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.674137][T18616] loop1: detected capacity change from 0 to 128
[  441.676942][T18606] EXT4-fs (loop3): 1 orphan inode deleted
[  441.688098][   T29] audit: type=1400 audit(1729154409.281:8541): avc:  denied  { bind } for  pid=18615 comm="syz.1.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  441.690890][T18606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.712128][T18617] program syz.0.3980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  441.742106][   T29] audit: type=1400 audit(1729154409.301:8542): avc:  denied  { append } for  pid=18614 comm="syz.0.3980" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  441.755159][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.765982][   T29] audit: type=1400 audit(1729154409.321:8543): avc:  denied  { write } for  pid=18615 comm="syz.1.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  441.797075][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.831281][T18622] loop2: detected capacity change from 0 to 512
[  441.859363][T18622] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3983: bad orphan inode 17
[  441.870111][T18622] ext4_test_bit(bit=16, block=4) = 1
[  441.875475][T18622] is_bad_inode(inode)=0
[  441.879675][T18622] NEXT_ORPHAN(inode)=0
[  441.883804][T18622] max_ino=32
[  441.887000][T18622] i_nlink=1
[  441.925679][T18622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.959138][T18626] loop1: detected capacity change from 0 to 1024
[  441.973635][T18626] EXT4-fs: Ignoring removed nomblk_io_submit option
[  441.990879][T18626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  442.023268][T18626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  442.034028][T18626] System zones: 0-1, 3-36
[  442.039474][T18626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.671797][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.743272][T18643] loop3: detected capacity change from 0 to 2048
[  442.749857][T18643] EXT4-fs: Ignoring removed orlov option
[  442.770679][T18643] EXT4-fs: Ignoring removed mblk_io_submit option
[  442.794525][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.804428][T18643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.865138][T18650] FAULT_INJECTION: forcing a failure.
[  442.865138][T18650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.878372][T18650] CPU: 0 UID: 0 PID: 18650 Comm: syz.1.3988 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  442.890654][T18650] Tainted: [W]=WARN
[  442.894463][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  442.904612][T18650] Call Trace:
[  442.907936][T18650]  <TASK>
[  442.910961][T18650]  dump_stack_lvl+0xf2/0x150
[  442.915594][T18650]  dump_stack+0x15/0x20
[  442.919769][T18650]  should_fail_ex+0x223/0x230
[  442.924540][T18650]  should_fail+0xb/0x10
[  442.928816][T18650]  should_fail_usercopy+0x1a/0x20
[  442.933871][T18650]  _copy_from_user+0x1e/0xd0
[  442.938501][T18650]  memdup_user_nul+0x65/0xd0
[  442.943108][T18650]  sel_write_avc_cache_threshold+0x11b/0x1b0
[  442.949151][T18650]  ? __pfx_sel_write_avc_cache_threshold+0x10/0x10
[  442.955687][T18650]  vfs_write+0x26c/0x910
[  442.960028][T18650]  ? __fget_files+0x1d4/0x210
[  442.964790][T18650]  ksys_write+0xeb/0x1b0
[  442.969114][T18650]  __x64_sys_write+0x42/0x50
[  442.973797][T18650]  x64_sys_call+0x27dd/0x2d60
[  442.978515][T18650]  do_syscall_64+0xc9/0x1c0
[  442.983115][T18650]  ? clear_bhb_loop+0x55/0xb0
[  442.987830][T18650]  ? clear_bhb_loop+0x55/0xb0
[  442.992537][T18650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.998461][T18650] RIP: 0033:0x7f0c2cb5dff9
[  443.002879][T18650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.011983][T18643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3986: bg 0: block 234: padding at end of block bitmap is not set
[  443.022498][T18650] RSP: 002b:00007f0c2b7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  443.041986][T18643] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117
[  443.045205][T18650] RAX: ffffffffffffffda RBX: 00007f0c2cd15f80 RCX: 00007f0c2cb5dff9
[  443.045226][T18650] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005
[  443.057724][T18643] EXT4-fs (loop3): This should not happen!! Data will be lost
[  443.057724][T18643] 
[  443.065649][T18650] RBP: 00007f0c2b7d7090 R08: 0000000000000000 R09: 0000000000000000
[  443.065667][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.099368][T18650] R13: 0000000000000000 R14: 00007f0c2cd15f80 R15: 00007ffe1b7767b8
[  443.107455][T18650]  </TASK>
[  443.108576][T18643] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  443.123226][T18643] EXT4-fs (loop3): This should not happen!! Data will be lost
[  443.123226][T18643] 
[  443.132912][T18643] EXT4-fs (loop3): Total free blocks count 0
[  443.138917][T18643] EXT4-fs (loop3): Free/Dirty block details
[  443.144843][T18643] EXT4-fs (loop3): free_blocks=0
[  443.149868][T18643] EXT4-fs (loop3): dirty_blocks=6144
[  443.155225][T18643] EXT4-fs (loop3): Block reservation details
[  443.162228][T18653] futex_wake_op: syz.3.3986 tries to shift op by 36; fix this program
[  443.282551][T18657] loop3: detected capacity change from 0 to 2048
[  443.297420][T18657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.315137][T18657] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.3990: corrupted in-inode xattr: bad e_name length
[  443.343845][   T53] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  443.362267][   T53] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  443.374595][   T53] EXT4-fs (loop3): This should not happen!! Data will be lost
[  443.374595][   T53] 
[  443.384267][   T53] EXT4-fs (loop3): Total free blocks count 0
[  443.390262][   T53] EXT4-fs (loop3): Free/Dirty block details
[  443.396193][   T53] EXT4-fs (loop3): free_blocks=2415919104
[  443.401945][   T53] EXT4-fs (loop3): dirty_blocks=48
[  443.407084][   T53] EXT4-fs (loop3): Block reservation details
[  443.413107][   T53] EXT4-fs (loop3): i_reserved_data_blocks=3
[  443.429464][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.473140][T18672] loop3: detected capacity change from 0 to 512
[  443.481548][T18672] EXT4-fs: Ignoring removed orlov option
[  443.487351][T18672] EXT4-fs: Ignoring removed oldalloc option
[  443.508744][T18672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3992: Parent and EA inode have the same ino 15
[  443.518522][T18675] loop1: detected capacity change from 0 to 512
[  443.521651][T18672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3992: Parent and EA inode have the same ino 15
[  443.540054][T18672] EXT4-fs (loop3): 1 orphan inode deleted
[  443.543425][T18675] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3997: bad orphan inode 17
[  443.546428][T18672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.570428][T18675] ext4_test_bit(bit=16, block=4) = 1
[  443.575776][T18675] is_bad_inode(inode)=0
[  443.579932][T18675] NEXT_ORPHAN(inode)=0
[  443.584118][T18675] max_ino=32
[  443.587320][T18675] i_nlink=1
[  443.619265][T18675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.645944][T18092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.775676][T18691] loop3: detected capacity change from 0 to 512
[  443.783249][T18691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  443.791294][T18691] System zones: 1-12
[  443.795373][T18691] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.4005: inode #0: comm syz.3.4005: iget: illegal inode #
[  443.809473][T18691] EXT4-fs (loop3): get orphan inode failed
[  443.815559][T18691] EXT4-fs (loop3): mount failed
[  444.347416][T18704] loop2: detected capacity change from 0 to 512
[  444.364176][T18085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.374902][T18704] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4007: bad orphan inode 17
[  444.395260][T18704] ext4_test_bit(bit=16, block=4) = 1
[  444.400655][T18704] is_bad_inode(inode)=0
[  444.404846][T18704] NEXT_ORPHAN(inode)=0
[  444.408918][T18704] max_ino=32
[  444.412155][T18704] i_nlink=1
[  444.478036][T18704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.531319][T18093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.614278][T18714] FAULT_INJECTION: forcing a failure.
[  444.614278][T18714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.627399][T18714] CPU: 1 UID: 0 PID: 18714 Comm: syz.0.4010 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  444.639705][T18714] Tainted: [W]=WARN
[  444.643543][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  444.653655][T18714] Call Trace:
[  444.656979][T18714]  <TASK>
[  444.659986][T18714]  dump_stack_lvl+0xf2/0x150
[  444.664663][T18714]  dump_stack+0x15/0x20
[  444.668892][T18714]  should_fail_ex+0x223/0x230
[  444.673634][T18714]  should_fail+0xb/0x10
[  444.677881][T18714]  should_fail_usercopy+0x1a/0x20
[  444.683034][T18714]  strncpy_from_user+0x25/0x200
[  444.687914][T18714]  ? kmem_cache_alloc_noprof+0x10c/0x290
[  444.693570][T18714]  getname_flags+0xb0/0x3b0
[  444.698118][T18714]  __x64_sys_unlink+0x21/0x40
[  444.702898][T18714]  x64_sys_call+0x280f/0x2d60
[  444.707742][T18714]  do_syscall_64+0xc9/0x1c0
[  444.712271][T18714]  ? clear_bhb_loop+0x55/0xb0
[  444.717014][T18714]  ? clear_bhb_loop+0x55/0xb0
[  444.721743][T18714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.727679][T18714] RIP: 0033:0x7f451653dff9
[  444.732113][T18714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.751824][T18714] RSP: 002b:00007f45151b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  444.760257][T18714] RAX: ffffffffffffffda RBX: 00007f45166f5f80 RCX: 00007f451653dff9
[  444.768238][T18714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0
[  444.776253][T18714] RBP: 00007f45151b7090 R08: 0000000000000000 R09: 0000000000000000
[  444.784244][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.792235][T18714] R13: 0000000000000000 R14: 00007f45166f5f80 R15: 00007ffec5b118c8
[  444.800293][T18714]  </TASK>
[  444.934100][T18735] FAULT_INJECTION: forcing a failure.
[  444.934100][T18735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.942129][T18737] loop3: detected capacity change from 0 to 512
[  444.947234][T18735] CPU: 1 UID: 0 PID: 18735 Comm: syz.1.4019 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  444.965667][T18735] Tainted: [W]=WARN
[  444.969481][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  444.979600][T18735] Call Trace:
[  444.982915][T18735]  <TASK>
[  444.985885][T18735]  dump_stack_lvl+0xf2/0x150
[  444.990574][T18735]  dump_stack+0x15/0x20
[  444.994751][T18735]  should_fail_ex+0x223/0x230
[  444.999452][T18735]  should_fail+0xb/0x10
[  445.003693][T18735]  should_fail_usercopy+0x1a/0x20
[  445.008796][T18735]  _copy_from_user+0x1e/0xd0
[  445.013427][T18735]  copy_msghdr_from_user+0x54/0x2a0
[  445.018648][T18735]  do_recvmmsg+0x282/0x740
[  445.023117][T18735]  __x64_sys_recvmmsg+0xe2/0x170
[  445.028122][T18735]  x64_sys_call+0x26e3/0x2d60
[  445.032829][T18735]  do_syscall_64+0xc9/0x1c0
[  445.037348][T18735]  ? clear_bhb_loop+0x55/0xb0
[  445.042052][T18735]  ? clear_bhb_loop+0x55/0xb0
[  445.046821][T18735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.052743][T18735] RIP: 0033:0x7f0c2cb5dff9
[  445.057228][T18735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.061778][T18737] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.4018: bad orphan inode 17
[  445.076828][T18735] RSP: 002b:00007f0c2b7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  445.088953][T18737] ext4_test_bit(bit=16, block=4) = 1
[  445.095235][T18735] RAX: ffffffffffffffda RBX: 00007f0c2cd15f80 RCX: 00007f0c2cb5dff9
[  445.095271][T18735] RDX: 0400000000000284 RSI: 0000000020000040 RDI: 0000000000000005
[  445.095288][T18735] RBP: 00007f0c2b7d7090 R08: 0000000000000000 R09: 0000000000000000
[  445.095303][T18735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.100631][T18737] is_bad_inode(inode)=0
[  445.108554][T18735] R13: 0000000000000000 R14: 00007f0c2cd15f80 R15: 00007ffe1b7767b8
[  445.117468][T18737] NEXT_ORPHAN(inode)=0
[  445.124548][T18735]  </TASK>
[  445.152904][T18737] max_ino=32
[  445.156114][T18737] i_nlink=1
[  445.172164][T18744] loop1: detected capacity change from 0 to 2048
[  445.194454][T18744] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.4020: corrupted in-inode xattr: bad e_name length
[  445.220111][ T3578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  445.235156][ T3578] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  445.247479][ T3578] EXT4-fs (loop1): This should not happen!! Data will be lost
[  445.247479][ T3578] 
[  445.257181][ T3578] EXT4-fs (loop1): Total free blocks count 0
[  445.263203][ T3578] EXT4-fs (loop1): Free/Dirty block details
[  445.269102][ T3578] EXT4-fs (loop1): free_blocks=2415919104
[  445.274893][ T3578] EXT4-fs (loop1): dirty_blocks=48
[  445.280013][ T3578] EXT4-fs (loop1): Block reservation details
[  445.286079][ T3578] EXT4-fs (loop1): i_reserved_data_blocks=3
[  445.487653][T18755] loop2: detected capacity change from 0 to 512
[  445.498002][T18755] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4022: bad orphan inode 17
[  445.508349][T18755] ext4_test_bit(bit=16, block=4) = 1
[  445.513714][T18755] is_bad_inode(inode)=0
[  445.517901][T18755] NEXT_ORPHAN(inode)=0
[  445.522026][T18755] max_ino=32
[  445.525217][T18755] i_nlink=1
[  445.731969][T18760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4023'.
[  445.741136][T18760] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4023'.
[  445.930274][T18771] FAULT_INJECTION: forcing a failure.
[  445.930274][T18771] name failslab, interval 1, probability 0, space 0, times 0
[  445.943078][T18771] CPU: 0 UID: 0 PID: 18771 Comm: syz.0.4028 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  445.955385][T18771] Tainted: [W]=WARN
[  445.959203][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  445.969319][T18771] Call Trace:
[  445.972622][T18771]  <TASK>
[  445.975577][T18771]  dump_stack_lvl+0xf2/0x150
[  445.980202][T18771]  dump_stack+0x15/0x20
[  445.984377][T18771]  should_fail_ex+0x223/0x230
[  445.989112][T18771]  ? __alloc_skb+0x10b/0x310
[  445.993843][T18771]  should_failslab+0x8f/0xb0
[  445.998490][T18771]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  446.004353][T18771]  __alloc_skb+0x10b/0x310
[  446.008862][T18771]  alloc_skb_with_frags+0x80/0x450
[  446.014013][T18771]  ? is_bpf_text_address+0x127/0x140
[  446.019326][T18771]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  446.025540][T18771]  ? kernel_text_address+0x96/0xb0
[  446.030730][T18771]  sock_alloc_send_pskb+0x435/0x4f0
[  446.035941][T18771]  ? stack_depot_save_flags+0x2cf/0x7b0
[  446.041566][T18771]  __ip_append_data+0x185b/0x2350
[  446.046696][T18771]  ? do_syscall_64+0xc9/0x1c0
[  446.051422][T18771]  ? percpu_counter_add_batch+0xc6/0x140
[  446.057068][T18771]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  446.062755][T18771]  ? xfrm_lookup_with_ifid+0x8da/0x12f0
[  446.068483][T18771]  ? rt_set_nexthop+0x4c7/0x560
[  446.073371][T18771]  ? ipv4_mtu+0x1e0/0x210
[  446.077733][T18771]  ip_make_skb+0x13f/0x2c0
[  446.082258][T18771]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  446.087835][T18771]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  446.093415][T18771]  udp_sendmsg+0x1228/0x12f0
[  446.098121][T18771]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  446.103759][T18771]  ? __pfx_udp_sendmsg+0x10/0x10
[  446.108821][T18771]  inet_sendmsg+0xaf/0xd0
[  446.113217][T18771]  __sock_sendmsg+0x102/0x180
[  446.117918][T18771]  ____sys_sendmsg+0x312/0x410
[  446.122716][T18771]  __sys_sendmmsg+0x259/0x500
[  446.127475][T18771]  __x64_sys_sendmmsg+0x57/0x70
[  446.132364][T18771]  x64_sys_call+0xa49/0x2d60
[  446.136982][T18771]  do_syscall_64+0xc9/0x1c0
[  446.141507][T18771]  ? clear_bhb_loop+0x55/0xb0
[  446.146249][T18771]  ? clear_bhb_loop+0x55/0xb0
[  446.150962][T18771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.156879][T18771] RIP: 0033:0x7f451653dff9
[  446.161316][T18771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.180966][T18771] RSP: 002b:00007f45151b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  446.189461][T18771] RAX: ffffffffffffffda RBX: 00007f45166f5f80 RCX: 00007f451653dff9
[  446.197489][T18771] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003
[  446.205469][T18771] RBP: 00007f45151b7090 R08: 0000000000000000 R09: 0000000000000000
[  446.213511][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.221499][T18771] R13: 0000000000000000 R14: 00007f45166f5f80 R15: 00007ffec5b118c8
[  446.229574][T18771]  </TASK>
[  446.282417][T18775] FAULT_INJECTION: forcing a failure.
[  446.282417][T18775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.295603][T18775] CPU: 1 UID: 0 PID: 18775 Comm: syz.0.4030 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  446.307924][T18775] Tainted: [W]=WARN
[  446.311803][T18775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  446.321993][T18775] Call Trace:
[  446.325278][T18775]  <TASK>
[  446.328219][T18775]  dump_stack_lvl+0xf2/0x150
[  446.332899][T18775]  dump_stack+0x15/0x20
[  446.337071][T18775]  should_fail_ex+0x223/0x230
[  446.341829][T18775]  should_fail+0xb/0x10
[  446.346074][T18775]  should_fail_usercopy+0x1a/0x20
[  446.351121][T18775]  _copy_from_user+0x1e/0xd0
[  446.355839][T18775]  memdup_user+0x64/0xc0
[  446.360099][T18775]  strndup_user+0x68/0xa0
[  446.364451][T18775]  bpf_uprobe_multi_link_attach+0x1ac/0x7c0
[  446.370439][T18775]  ? __fget_files+0x1d4/0x210
[  446.375187][T18775]  link_create+0x636/0x650
[  446.379699][T18775]  __sys_bpf+0x430/0x7a0
[  446.384037][T18775]  __x64_sys_bpf+0x43/0x50
[  446.388516][T18775]  x64_sys_call+0x2625/0x2d60
[  446.393337][T18775]  do_syscall_64+0xc9/0x1c0
[  446.397880][T18775]  ? clear_bhb_loop+0x55/0xb0
[  446.402626][T18775]  ? clear_bhb_loop+0x55/0xb0
[  446.407333][T18775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.413327][T18775] RIP: 0033:0x7f451653dff9
[  446.417879][T18775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.437550][T18775] RSP: 002b:00007f45151b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  446.445977][T18775] RAX: ffffffffffffffda RBX: 00007f45166f5f80 RCX: 00007f451653dff9
[  446.453965][T18775] RDX: 0000000000000040 RSI: 0000000020000100 RDI: 000000000000001c
[  446.462013][T18775] RBP: 00007f45151b7090 R08: 0000000000000000 R09: 0000000000000000
[  446.469996][T18775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.477985][T18775] R13: 0000000000000000 R14: 00007f45166f5f80 R15: 00007ffec5b118c8
[  446.486065][T18775]  </TASK>
[  446.517048][   T29] kauditd_printk_skb: 77 callbacks suppressed
[  446.517065][   T29] audit: type=1400 audit(1729154414.101:8621): avc:  denied  { mounton } for  pid=18776 comm="syz.0.4031" path="/proc/90/task" dev="proc" ino=79207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  446.580038][   T29] audit: type=1400 audit(1729154414.151:8622): avc:  denied  { setattr } for  pid=18776 comm="syz.0.4031" path="/proc/90/task" dev="proc" ino=79207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  446.602835][   T29] audit: type=1326 audit(1729154414.161:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.626416][   T29] audit: type=1326 audit(1729154414.161:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.650069][   T29] audit: type=1326 audit(1729154414.161:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.673674][   T29] audit: type=1326 audit(1729154414.161:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.697360][   T29] audit: type=1326 audit(1729154414.161:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.720999][   T29] audit: type=1326 audit(1729154414.161:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.744619][   T29] audit: type=1326 audit(1729154414.161:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.768157][   T29] audit: type=1326 audit(1729154414.161:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.1.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c2cb5dff9 code=0x7ffc0000
[  446.811895][T18786] loop1: detected capacity change from 0 to 512
[  446.829969][T18786] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.4035: bad orphan inode 17
[  446.840223][T18786] ext4_test_bit(bit=16, block=4) = 1
[  446.845579][T18786] is_bad_inode(inode)=0
[  446.849756][T18786] NEXT_ORPHAN(inode)=0
[  446.853884][T18786] max_ino=32
[  446.857154][T18786] i_nlink=1
[  447.000194][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.057480][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.134658][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.198061][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.222946][T18790] chnl_net:caif_netlink_parms(): no params data found
[  447.266938][T18790] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.274187][T18790] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.284626][T18790] bridge_slave_0: entered allmulticast mode
[  447.291264][T18790] bridge_slave_0: entered promiscuous mode
[  447.312363][   T53] bridge_slave_1: left allmulticast mode
[  447.318105][   T53] bridge_slave_1: left promiscuous mode
[  447.323901][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.335988][   T53] bridge_slave_0: left allmulticast mode
[  447.341747][   T53] bridge_slave_0: left promiscuous mode
[  447.347397][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.463976][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.478621][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.489848][   T53] bond0 (unregistering): Released all slaves
[  447.500764][T18790] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.508013][T18790] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.530804][T18790] bridge_slave_1: entered allmulticast mode
[  447.537490][T18790] bridge_slave_1: entered promiscuous mode
[  447.550137][   T53] hsr_slave_0: left promiscuous mode
[  447.561076][   T53] hsr_slave_1: left promiscuous mode
[  447.566725][T18811] loop3: detected capacity change from 0 to 512
[  447.573838][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.580288][T18809] loop2: detected capacity change from 0 to 8192
[  447.581339][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.587883][T18811] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.601836][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.609300][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.619681][   T53] veth1_macvtap: left promiscuous mode
[  447.625265][   T53] veth0_macvtap: left promiscuous mode
[  447.630835][   T53] veth1_vlan: left promiscuous mode
[  447.636086][   T53] veth0_vlan: left promiscuous mode
[  447.676133][T18816] loop1: detected capacity change from 0 to 512
[  447.685584][T18816] EXT4-fs: Ignoring removed orlov option
[  447.691635][T18816] EXT4-fs: Ignoring removed oldalloc option
[  447.699598][T18816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.4042: Parent and EA inode have the same ino 15
[  447.715152][T18816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.4042: Parent and EA inode have the same ino 15
[  447.727822][T18816] EXT4-fs (loop1): 1 orphan inode deleted
[  447.767403][   T53] team0 (unregistering): Port device team_slave_1 removed
[  447.778168][   T53] team0 (unregistering): Port device team_slave_0 removed
[  447.826363][T18809] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.833950][T18809] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.841595][T18809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.849055][T18809] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.869157][T18790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.881050][T18790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.906240][T18790] team0: Port device team_slave_0 added
[  447.912995][T18790] team0: Port device team_slave_1 added
[  447.928675][T18790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.935659][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.961596][T18790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.972885][T18790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.979856][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.005850][T18790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.034485][T18790] hsr_slave_0: entered promiscuous mode
[  448.041229][T18790] hsr_slave_1: entered promiscuous mode
[  448.047238][T18790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.054875][T18790] Cannot create hsr debugfs directory
[  448.137260][T18828] loop2: detected capacity change from 0 to 512
[  448.145235][T18828] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4045: bad orphan inode 17
[  448.155679][T18828] ext4_test_bit(bit=16, block=4) = 1
[  448.161062][T18828] is_bad_inode(inode)=0
[  448.165203][T18828] NEXT_ORPHAN(inode)=0
[  448.169303][T18828] max_ino=32
[  448.172540][T18828] i_nlink=1
[  448.253826][T18834] FAULT_INJECTION: forcing a failure.
[  448.253826][T18834] name failslab, interval 1, probability 0, space 0, times 0
[  448.266612][T18834] CPU: 0 UID: 0 PID: 18834 Comm: syz.2.4047 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  448.278915][T18834] Tainted: [W]=WARN
[  448.282724][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  448.292781][T18834] Call Trace:
[  448.296070][T18834]  <TASK>
[  448.299121][T18834]  dump_stack_lvl+0xf2/0x150
[  448.303789][T18834]  dump_stack+0x15/0x20
[  448.307962][T18834]  should_fail_ex+0x223/0x230
[  448.312670][T18834]  ? skb_clone+0x154/0x1f0
[  448.317155][T18834]  should_failslab+0x8f/0xb0
[  448.321770][T18834]  kmem_cache_alloc_noprof+0x4c/0x290
[  448.327223][T18834]  skb_clone+0x154/0x1f0
[  448.331507][T18834]  __netlink_deliver_tap+0x2bd/0x4c0
[  448.336867][T18834]  netlink_unicast+0x64a/0x670
[  448.341728][T18834]  netlink_sendmsg+0x5cc/0x6e0
[  448.346642][T18834]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.352082][T18834]  __sock_sendmsg+0x140/0x180
[  448.356898][T18834]  ____sys_sendmsg+0x312/0x410
[  448.361774][T18834]  __sys_sendmsg+0x1d9/0x270
[  448.366506][T18834]  __x64_sys_sendmsg+0x46/0x50
[  448.371298][T18834]  x64_sys_call+0x2689/0x2d60
[  448.376163][T18834]  do_syscall_64+0xc9/0x1c0
[  448.380733][T18834]  ? clear_bhb_loop+0x55/0xb0
[  448.385454][T18834]  ? clear_bhb_loop+0x55/0xb0
[  448.390286][T18834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.396269][T18834] RIP: 0033:0x7f6d921cdff9
[  448.400752][T18834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.420428][T18834] RSP: 002b:00007f6d90e41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.428916][T18834] RAX: ffffffffffffffda RBX: 00007f6d92385f80 RCX: 00007f6d921cdff9
[  448.436910][T18834] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  448.444889][T18834] RBP: 00007f6d90e41090 R08: 0000000000000000 R09: 0000000000000000
[  448.452958][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.460968][T18834] R13: 0000000000000000 R14: 00007f6d92385f80 R15: 00007ffcb419b1f8
[  448.469009][T18834]  </TASK>
[  448.614416][T18790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  448.642984][T18790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  448.662622][T18790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  448.679704][T18790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  448.727464][T18790] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.745159][T18790] 8021q: adding VLAN 0 to HW filter on device team0
[  448.755870][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.762933][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.774603][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.781734][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.848969][T18790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.924207][T18790] veth0_vlan: entered promiscuous mode
[  448.933714][T18790] veth1_vlan: entered promiscuous mode
[  448.953205][T18790] veth0_macvtap: entered promiscuous mode
[  448.961573][T18790] veth1_macvtap: entered promiscuous mode
[  448.972787][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.983361][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.993184][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.003755][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.013596][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.024199][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.034139][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.044585][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.054465][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.064910][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.074798][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.085247][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.095138][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.105644][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.115466][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.125901][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.137876][T18790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.149660][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.160266][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.170146][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.180599][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.190419][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.200908][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.210737][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.221185][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.231013][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.241462][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.251358][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.261864][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.271765][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.282204][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.292023][T18790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.302460][T18790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.314483][T18790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.323316][T18790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.332099][T18790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.341002][T18790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.349778][T18790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.423656][T18856] loop2: detected capacity change from 0 to 512
[  449.442099][T18856] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4052: bad orphan inode 17
[  449.460597][T18856] ext4_test_bit(bit=16, block=4) = 1
[  449.466023][T18856] is_bad_inode(inode)=0
[  449.470195][T18856] NEXT_ORPHAN(inode)=0
[  449.474320][T18856] max_ino=32
[  449.477519][T18856] i_nlink=1
[  449.510416][T18863] loop3: detected capacity change from 0 to 1024
[  449.517239][T18863] EXT4-fs: Ignoring removed nomblk_io_submit option
[  449.539703][T18863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  449.579341][T18863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  449.587526][T18863] System zones: 0-1, 3-36
[  449.732665][T18875] FAULT_INJECTION: forcing a failure.
[  449.732665][T18875] name failslab, interval 1, probability 0, space 0, times 0
[  449.745367][T18875] CPU: 0 UID: 0 PID: 18875 Comm: syz.0.4059 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  449.757717][T18875] Tainted: [W]=WARN
[  449.761534][T18875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  449.771612][T18875] Call Trace:
[  449.774907][T18875]  <TASK>
[  449.777854][T18875]  dump_stack_lvl+0xf2/0x150
[  449.782469][T18875]  dump_stack+0x15/0x20
[  449.786646][T18875]  should_fail_ex+0x223/0x230
[  449.791389][T18875]  ? __d_alloc+0x3d/0x340
[  449.795751][T18875]  should_failslab+0x8f/0xb0
[  449.800364][T18875]  kmem_cache_alloc_lru_noprof+0x51/0x2a0
[  449.806182][T18875]  __d_alloc+0x3d/0x340
[  449.810372][T18875]  ? ktime_get_coarse_real_ts64+0xf3/0x100
[  449.816198][T18875]  d_alloc_pseudo+0x1e/0x80
[  449.820746][T18875]  alloc_file_pseudo+0x70/0x140
[  449.825746][T18875]  create_pipe_files+0x1bd/0x3b0
[  449.830698][T18875]  __do_pipe_flags+0x46/0x190
[  449.835410][T18875]  do_pipe2+0x64/0x130
[  449.839498][T18875]  __x64_sys_pipe2+0x30/0x40
[  449.844122][T18875]  x64_sys_call+0x65f/0x2d60
[  449.848735][T18875]  do_syscall_64+0xc9/0x1c0
[  449.853354][T18875]  ? clear_bhb_loop+0x55/0xb0
[  449.858172][T18875]  ? clear_bhb_loop+0x55/0xb0
[  449.862926][T18875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.868860][T18875] RIP: 0033:0x7f3ade49dff9
[  449.873366][T18875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.892992][T18875] RSP: 002b:00007f3add111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  449.901474][T18875] RAX: ffffffffffffffda RBX: 00007f3ade655f80 RCX: 00007f3ade49dff9
[  449.909555][T18875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001900
[  449.917547][T18875] RBP: 00007f3add111090 R08: 0000000000000000 R09: 0000000000000000
[  449.925570][T18875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.933566][T18875] R13: 0000000000000000 R14: 00007f3ade655f80 R15: 00007ffd0cb74cd8
[  449.941556][T18875]  </TASK>
[  449.957080][T18875] 9pnet_fd: Insufficient options for proto=fd
[  449.998198][T18875] block device autoloading is deprecated and will be removed.
[  450.008103][T18875] bio_check_eod: 24 callbacks suppressed
[  450.008120][T18875] syz.0.4059: attempt to access beyond end of device
[  450.008120][T18875] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  450.058907][T18875] loop0: detected capacity change from 0 to 512
[  450.184452][T18876] chnl_net:caif_netlink_parms(): no params data found
[  450.241511][T18876] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.248628][T18876] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.256161][T18876] bridge_slave_0: entered allmulticast mode
[  450.262620][T18876] bridge_slave_0: entered promiscuous mode
[  450.270741][T18876] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.277816][T18876] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.286742][T18876] bridge_slave_1: entered allmulticast mode
[  450.293436][T18876] bridge_slave_1: entered promiscuous mode
[  450.300501][T18899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.309233][T18899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.326527][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  450.334900][T18914] loop2: detected capacity change from 0 to 512
[  450.335456][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4062'.
[  450.351552][T18914] EXT4-fs: Ignoring removed oldalloc option
[  450.365484][T18899] bond1: entered promiscuous mode
[  450.370649][T18899] bond1: entered allmulticast mode
[  450.376070][T18899] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.384736][T18914] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15
[  450.403138][T18914] EXT4-fs (loop2): Remounting filesystem read-only
[  450.411715][T18914] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5)
[  450.422419][T18914] EXT4-fs (loop2): 1 orphan inode deleted
[  450.428736][T18914] SELinux: (dev loop2, type ext4) getxattr errno 5
[  450.440849][T18876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.453905][T18876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.494025][T18876] team0: Port device team_slave_0 added
[  450.500927][T18876] team0: Port device team_slave_1 added
[  450.526325][T18876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.533367][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.559432][T18876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.575734][T18876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.582715][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.608665][T18876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.625725][T18933] FAULT_INJECTION: forcing a failure.
[  450.625725][T18933] name failslab, interval 1, probability 0, space 0, times 0
[  450.638508][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.2.4072 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  450.650797][T18933] Tainted: [W]=WARN
[  450.654655][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  450.664791][T18933] Call Trace:
[  450.668088][T18933]  <TASK>
[  450.671028][T18933]  dump_stack_lvl+0xf2/0x150
[  450.675643][T18933]  dump_stack+0x15/0x20
[  450.679861][T18933]  should_fail_ex+0x223/0x230
[  450.684630][T18933]  ? skb_clone+0x154/0x1f0
[  450.689122][T18933]  should_failslab+0x8f/0xb0
[  450.693726][T18933]  kmem_cache_alloc_noprof+0x4c/0x290
[  450.699275][T18933]  skb_clone+0x154/0x1f0
[  450.703529][T18933]  __netlink_deliver_tap+0x2bd/0x4c0
[  450.708852][T18933]  netlink_unicast+0x64a/0x670
[  450.713647][T18933]  netlink_sendmsg+0x5cc/0x6e0
[  450.718478][T18933]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.723888][T18933]  __sock_sendmsg+0x140/0x180
[  450.728570][T18933]  ____sys_sendmsg+0x312/0x410
[  450.733430][T18933]  __sys_sendmsg+0x1d9/0x270
[  450.738049][T18933]  __x64_sys_sendmsg+0x46/0x50
[  450.742843][T18933]  x64_sys_call+0x2689/0x2d60
[  450.747549][T18933]  do_syscall_64+0xc9/0x1c0
[  450.752108][T18933]  ? clear_bhb_loop+0x55/0xb0
[  450.756852][T18933]  ? clear_bhb_loop+0x55/0xb0
[  450.761593][T18933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.767547][T18933] RIP: 0033:0x7f6d921cdff9
[  450.771990][T18933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.791608][T18933] RSP: 002b:00007f6d90e41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.800066][T18933] RAX: ffffffffffffffda RBX: 00007f6d92385f80 RCX: 00007f6d921cdff9
[  450.808056][T18933] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004
[  450.816037][T18933] RBP: 00007f6d90e41090 R08: 0000000000000000 R09: 0000000000000000
[  450.824006][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.831978][T18933] R13: 0000000000000000 R14: 00007f6d92385f80 R15: 00007ffcb419b1f8
[  450.839963][T18933]  </TASK>
[  450.875358][T18876] hsr_slave_0: entered promiscuous mode
[  450.883567][T18876] hsr_slave_1: entered promiscuous mode
[  450.896289][T18876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  450.906750][T18876] Cannot create hsr debugfs directory
[  450.972224][T18948] loop2: detected capacity change from 0 to 512
[  450.977947][T18949] loop3: detected capacity change from 0 to 1024
[  450.979811][T18948] EXT4-fs: Ignoring removed orlov option
[  450.985319][T18949] EXT4-fs: Ignoring removed nomblk_io_submit option
[  450.990800][T18948] EXT4-fs: Ignoring removed oldalloc option
[  451.000449][T18949] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  451.018290][T18948] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.4078: Parent and EA inode have the same ino 15
[  451.025490][T18950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  451.032391][T18948] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.4078: Parent and EA inode have the same ino 15
[  451.050809][T18948] EXT4-fs (loop2): 1 orphan inode deleted
[  451.051851][T18949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002]
[  451.069780][T18949] System zones: 0-1, 3-36
[  451.099809][T18876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.144315][T18876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.202187][T18958] loop2: detected capacity change from 0 to 512
[  451.219987][T18958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103]
[  451.228129][T18958] System zones: 1-12
[  451.232238][T18958] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.4082: inode #0: comm syz.2.4082: iget: illegal inode #
[  451.246600][T18958] EXT4-fs (loop2): get orphan inode failed
[  451.251771][T18876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.258803][T18958] EXT4-fs (loop2): mount failed
[  451.300350][T18960] ==================================================================
[  451.308467][T18960] BUG: KCSAN: data-race in redirty_tail_locked / vfs_fsync_range
[  451.316230][T18960] 
[  451.318572][T18960] read-write to 0xffff888106163c38 of 4 bytes by task 18956 on cpu 0:
[  451.326745][T18960]  redirty_tail_locked+0x54/0x270
[  451.331791][T18960]  writeback_single_inode+0x221/0x3f0
[  451.337234][T18960]  sync_inode_metadata+0x5c/0x90
[  451.342196][T18960]  generic_buffers_fsync_noflush+0xd8/0x120
[  451.348111][T18960]  ext4_sync_file+0x1ff/0x6c0
[  451.352846][T18960]  vfs_fsync_range+0x116/0x130
[  451.357640][T18960]  ext4_buffered_write_iter+0x326/0x370
[  451.363223][T18960]  ext4_file_write_iter+0x293/0xe10
[  451.368454][T18960]  iter_file_splice_write+0x5f1/0x980
[  451.373850][T18960]  direct_splice_actor+0x160/0x2c0
[  451.379012][T18960]  splice_direct_to_actor+0x302/0x670
[  451.384405][T18960]  do_splice_direct+0xd7/0x150
[  451.389191][T18960]  do_sendfile+0x39b/0x970
[  451.393648][T18960]  __x64_sys_sendfile64+0x110/0x150
[  451.398874][T18960]  x64_sys_call+0xed5/0x2d60
[  451.403502][T18960]  do_syscall_64+0xc9/0x1c0
[  451.408028][T18960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.413951][T18960] 
[  451.416302][T18960] read to 0xffff888106163c38 of 4 bytes by task 18960 on cpu 1:
[  451.423973][T18960]  vfs_fsync_range+0x9a/0x130
[  451.428700][T18960]  ext4_buffered_write_iter+0x326/0x370
[  451.434306][T18960]  ext4_file_write_iter+0x293/0xe10
[  451.439549][T18960]  iter_file_splice_write+0x5f1/0x980
[  451.444954][T18960]  direct_splice_actor+0x160/0x2c0
[  451.450101][T18960]  splice_direct_to_actor+0x302/0x670
[  451.455487][T18960]  do_splice_direct+0xd7/0x150
[  451.460266][T18960]  do_sendfile+0x39b/0x970
[  451.464737][T18960]  __x64_sys_sendfile64+0x110/0x150
[  451.469975][T18960]  x64_sys_call+0xed5/0x2d60
[  451.474597][T18960]  do_syscall_64+0xc9/0x1c0
[  451.479118][T18960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.485138][T18960] 
[  451.487469][T18960] value changed: 0x0000003a -> 0x00000002
[  451.493202][T18960] 
[  451.495540][T18960] Reported by Kernel Concurrency Sanitizer on:
[  451.501727][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.3.4080 Tainted: G        W          6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[  451.514002][T18960] Tainted: [W]=WARN
[  451.517818][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  451.527891][T18960] ==================================================================
[  451.544851][T18876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.556345][T18963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4082'.
[  451.613450][T18876] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  451.623881][T18876] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  451.633433][T18876] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  451.642296][T18876] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  451.702683][T18876] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.719378][T18876] 8021q: adding VLAN 0 to HW filter on device team0
[  451.730813][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.738006][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.754783][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.761913][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.855068][T18876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.970437][T18876] veth0_vlan: entered promiscuous mode
[  451.979980][T18876] veth1_vlan: entered promiscuous mode
[  451.998764][T18876] veth0_macvtap: entered promiscuous mode
[  452.007193][T18876] veth1_macvtap: entered promiscuous mode
[  452.019540][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.030120][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.040150][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.050626][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.060493][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.070980][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.080846][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.091411][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.101378][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.111862][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.121719][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.132240][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.142074][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.152632][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.162497][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.172972][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.182801][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.193251][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.205556][T18876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.219081][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.229617][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.239463][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.249978][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.259893][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.270495][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.280369][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.290813][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.300635][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.311264][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.321119][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.331584][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.341467][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.351924][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.361802][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.372272][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.382166][T18876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.392771][T18876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.404605][T18876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.415477][T18876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.424470][T18876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.433295][T18876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.442079][T18876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0