last executing test programs:

10.503599225s ago: executing program 0 (id=237):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63720000000000000000e97158b3"], 0xfdef) (async)
sendto(r0, &(0x7f0000000500)="313a7645e9ac85878f0fc676bd411141fb602ca3b82dfe6a5c24b9a2ab578a912ebb29", 0x23, 0x4000, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, r1}, 0x90)
syz_io_uring_setup(0xd79, 0x0, &(0x7f0000000100), &(0x7f0000003580)=<r2=>0x0) (async, rerun: 32)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x14, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000013c0)=ANY=[], 0x0}, 0x90) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000540)) (async)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f00000005c0)=ANY=[], 0x3, 0x70c, &(0x7f0000000f80)="$eJzs3UFv2+b5APBHjtP67z9QDNtQFEGasmkPCZA6ktw6MHrYNJm22cqiQMpFgh2KorGHoE47NBuweIeul2477CPs0Ou+RL/EbvsMve80D6Qkx05sOUtcuwh+PyPmK/Ih3+elBD6mQlEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAESju9JsthrRy/qbt5PjdVeKfGPK8sn2vjs0mdJvRKP6F3Nz8dpo1ms/f7T41erX1bg8enQ55qrJXOz+/6s/ef9nszOT9ackdCYePNz97JOdna0vzzuRc7KW9rMyzzY6a2mSlXmyvLTUvLm+WiarWS8t75TDdCPpFmlnmBfJte71pLW8vJikC3fyzf7aSqeXTmbeeqfdbC4lHywM0k5R5v2bHyyU3fWs18v6a3VMtbiKuZX85oviw2yYDNPORpJs39vZWjwpySqo9TRB7ZOC2s12u9Vqt1tL7y2/d6vZnG035+LQjOZj4tAqSbM5O3nRNsav9Kfe1wf8c9JoPMvanLaZQ4/iT9Of2dM6dMNzmxnX/+hFFv3YjNuRHPnTjZUoIo+NY5aPfRfxx7pxM53a78H6P6nyrz1afKn6dXVu/OjKcfX/mFzO7udBPIzd+Cw+iZ3Yia348twzOtuftUijH1mUkUcWG9Gp5yTjOUksx1IsRTM+jvVYjTKSWI0sepFGGXeijGGk9SuqG0Wk0Ylh5FFEEteiG9cjiVYsx3IsRhJpLMSdyGMz+rEWK9Gpt7Id9+r9vjglx9ierV49W9GaGjTeUntK0KSYvzR+Xc4+8QfB9Pp/a7/+/72uDw/ePoPixI/DhUnjVI/f8Dz2JvU/9vb+s1c574wAAACA09ao331vXHlp//Fq1kt/fc5ZAQAAAKepvgz5cjW5WLVej0Z1/t8877QAAACAU9SIK+N3AebjjVFr8kkobwIAAADAC6L+//8r1WS+ar0RDef/AAAA8KL5y6N77O/GkffYLQczETEbEY2vB7ffbtzvVHGd+xdG6114fIvD1UuNV8YbqSdLs+NH3fRyY3z3y/2bYH4/nmyfdK//RlFcfN4EImbGMW/eHU3v7i+pe5lfzXrpQjfvvd+KTueVmWF6e/j7z+/9IaLq/a/9jVcasX1vZ2vh0y927ta5fF1t5ev747u5N/6HXH4Xr49iXn85nhjxbjQu1h/EGPc7P+q3eXD847FMhvR/T9HnN5OYq/Oj6fzh8c9VfbYWjhv9fOPl8frPNfJvJsFvXXtrNDkii/aULOp90T64/x/bF0+VRbx1chaLJ2Wx+JxZAJyX7f0qdLjuXtyv/0/U3Wc4yp1Ndf8mro1irl2qD6yzvzziiN488oi+d+GxGvvs1e0fcX0Uc30SfFyNrcb8t/1+W3W/31YrfHtsv2VvskPu/zZuzjzcfedeHbv1ebu9uNR8t9l8rx0X62GMJ1Wm/1Z7ADjsan39/7Tv2Dk64kLES5Pa/W68OYp4dFZd1aT9ivfT/UsKFuLT+CJ24m7cqD9tUF9xcGS/8wcuQ7gRV8fJHn3W+ii2FTdOOKsbxU7+dnma2NHXywDAi+TqCXV4v/5PvotvElGX0FH9v3HgvLsKm710XB2tavn0s+ODtRwA+GGkxfeN+eGfG0WRDT5uLS+3OsP1NCny7odJka2spUnWH6ZFd73TX0uTQZEP827eqxofZStpmZSbg0FeDJPVvEgGeZnd/kVkvTQZf/V7mW50+sOsWw56aadMk27eH3a6w2QlK7vJYPNXvaz8am9vr1q5HKTdbDXrdoZZ3k/KfLPopgtJUqbpOHA9LZJsJe0Ps9WsavaTQZG9HMWd5KO8t7mRJitp2S2ywTAv6mwmfWX91bzYqDe7cN47GwB+JB483P3sk52drS+PbszFsYvqxr+mrz5qnPcYAYDDplXpJ64+AwAAAAAAAAAAAAAAzsUJn/979kbjsTkzEfFD9fXCNfa+mhozc0pP3OQDHp6dJxvfHpiT/AjyOfPGOR+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI/w0AAP//jhJNZg==") (async)
mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port']) (async, rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (rerun: 64)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001e00)={'macsec0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @dev}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r7], 0x20}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000880))

10.502264065s ago: executing program 0 (id=238):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611040e5ffffffff9400000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0xa6, 0x0, 0x864, 0xe6, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x68, 0x0, 0xdf, 0x0, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x24, 0x49, 0x0, 0x4, [0x5, 0x1, 0xc88b, 0x7, 0x9, 0xfffffffb, 0x5, 0x8f]}, @noop]}}}}}) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)) (async)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond_slave_0\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d00000046000040000000000084900700ffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be003f00907800000e0300050200000000000000000002d58838068b91000000"], 0x4e) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) (async)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f00000004c0)) (async)
r4 = socket(0x11, 0x2, 0x0)
getsockopt$nfc_llcp(r4, 0x107, 0xe, 0x0, 0x20600000) (async)
r5 = open(0x0, 0x102440, 0x0)
ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000000)={0x2b, 0x0, 0x7, 0x17, 0x4, 0x1, 0x3, 0x42}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5417, 0x0) (async, rerun: 32)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000, 0x0, 0x4, 0x0, 0x0, 0x1272}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) (async, rerun: 32)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

10.489489836s ago: executing program 0 (id=240):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040), 0x12)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000000)=ANY=[@ANYBLOB="646f733178666c6f7070792c756e695f786c6174653d312c756e695f786c61727365743d6b6f69382d722c73686f72746e616d653d77696e39352c756eee9e81d72d886465306167653d313235312c636f6465706167653d3934392c756e695f786c6174653d312c726f6469722c756e6d5f786c6174653d312c757466383d1b6b00000000000000"], 0x3, 0x350, &(0x7f0000000580)="$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")
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x448)
r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
inotify_init1(0x0)

9.544751993s ago: executing program 0 (id=252):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a003b0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

9.46221552s ago: executing program 0 (id=255):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
readv(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2, 0xffffffa4}, 0x20)

9.411482694s ago: executing program 0 (id=256):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x8, 0x3458}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pI4   \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902240001"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e)
ptrace(0x10, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)

3.179537191s ago: executing program 3 (id=301):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0)
splice(r5, 0x0, r3, 0x0, 0x7f, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlink(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000780)={[{@subsystem='cpu'}, {@name={'name', 0x3d, 'cgroup.procs\x00\xf5\x94\xa6\x19\xd6\x1eZ\\]\x17\x05\x05\xe5y\x9a\x84T\x88\xe6\xa1\xda\xc6\x8db\x0f\xf2\xb4\xaf\x1c\xe6\x01\x00\x00\x00\x00\x00\x00\x00\x03h\xf7\xc7a\x82\t\xce\x1cb\xdd@\x1fv\xb2\xa3\xd6U\"\x9b\xa9#fi\x9e\"<\xae]\x88\xbd\xa7\x1ad\xbc\xad\xd9\xe3\xe9\x88\x98\xae\fJV\x80v\x00\x00\x00\x00'}}]})

2.198091511s ago: executing program 4 (id=309):
r0 = syz_clone3(0x0, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200002, &(0x7f0000000600), 0x0, 0x566, &(0x7f0000000a00)="$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")
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xff68, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7000000ffff8bff95"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1.573969042s ago: executing program 3 (id=311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x1007f, 0x4)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getflags(0xffffffffffffffff, 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$eJzs3MtvG8UfAPDv2kn7Sx+/hKo8mhYaKIiIR9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBUkjqhShXJp4WS09m5iO44b5+UUfz7SJjO7Y898vTv2zE6cALrWUPojiTgQEb9FRH81W19gqPrrztLC5N9LC5NJlMtv/pVUyt1eWpjMi+aP259neiIKnyZxtEm9c1evXZwolaavZPnR+Uvvjc5dvfbszKWJC9MXpi+Pnz17+tTY82fGn9uSONO4bg9+OHvsyKtv33h98tyNd376Jsnjb4ijhT/aqHKo1cEnyuU2nmr3O1iTTno62BDaUqx20+it9P/+KMbKyeuPVz7paOOAbVUul8sPrH14sQz8hyXR6RYAnZF/0Kfz33zboaHHrnDrxeoEKI37TrZVj/REISvT2zC/3UpDEXFu8Z8v0y3Wfx8CAGDDvkvHP880G/8Vova+0P+zNZSBiLgvIg5FxJmIOBwR90dUyj4YEQ+1WX/jIsnq8U/hZl32jTYruIt0/PdCtrZVP/7LR38xUMxyByvx9ybnZ0rTJ7PXZDh696b5sRZ1fP/yr5+vdax2/Jduaf35WDBrx82evfWPmZqYn9hMzLVufRwx2NMs/mR5JSCJiCMRMbjeJ204qTNPfX2sVdHW8bewBetM5a8inqye/8VoiD+XtF6fHP1flKZPjuZXxWo//3J9zat2U/FvgfT872t6/S/HP5DUrtfOtV/H9d8/W3NOs9Hrf0/yVt2+Dybm56+MRexJXqs2unb/eEO58ZXyafzDJ5r3/0Ox8kocjYj0In44Ih6JiONZ2x+NiMci4kSL+H986fF3Nx7/9krjn2rr/K8k9kTjnuaJ4sUfvq2rdKCd+NPzf7qSGs72rOf9bz3t2tjVDAAAAPeeQkQciKQwspwuFEZGqn/Dfzj2FUqzc/NPn599//JU9TsCA9FbyO909dfcDx3LpvV5frwhfyq7b/xFsa+SH5mcLU11OnjocvvX6P+pP4udbh2w7XxfC7qX/g/dS/+H7qX/Q/dq0v/7OtEOYOc1+/z/aF2PTBr/XRhwj2no/02W/RZ3rC3AzjL/h+6l/0P30v+hK831xd2/JC8hsSoRhV3RjN2WOL47mrH5RKffmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbGvwEAAP//dtjoWw==")
r3 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000640)={{r3}, 0xa, &(0x7f00000005c0)=[0x3, 0xffffffffffffdc13, 0x101, 0x46, 0x5, 0x7, 0x4, 0xfffffffffffffffa, 0xfc00000000000000, 0x7], 0x2, 0x6, 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r4, 0x4b49, 0xfffffffffffffffc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PREFSRC={0x8, 0x7, @remote}]}, 0x2c}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = socket(0xa, 0x0, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
timer_create(0x0, 0x0, &(0x7f0000000340)=<r7=>0x0)
timer_getoverrun(0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
timer_delete(r7)

1.259661397s ago: executing program 2 (id=313):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50aff800000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.194639103s ago: executing program 4 (id=314):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="1801000000000000000000003b810000850000006d000000650000005000d1fa95"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_free_blocks\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYBLOB="36b7c400812f8f1facddc961f874377b606f482b0d0369b8fa58d323d6aff7b24eafce87777bffd2b8eea5e89db293db46a44792868ddc5ea06cf8d9"], 0x1c}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
getdents(r4, &(0x7f00000001c0)=""/90, 0x5a)
mknodat$loop(r4, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
epoll_create1(0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
r6 = creat(&(0x7f0000000440)='./file0\x00', 0x141) (async)
io_setup(0x800, 0x0) (async)
r7 = open(&(0x7f0000000400)='./bus\x00', 0x4003e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0)
ftruncate(r6, 0x7fff) (async)
fcntl$setstatus(r6, 0x4, 0x6800) (async)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000002e80)='Z', 0x1}]) (async)
write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x0, 0x9}, @time}], 0x1c) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x9, 0x2, 0x574f, 0x821, 0xffffffffffffffff, 0x80000004, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES8, @ANYBLOB="000000000008000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10)

1.175863754s ago: executing program 2 (id=315):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440bca00", @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300c91b55cf378803f9abac84f89d2eaaa72759cf344844f38d575e136b4b3c8e09c010c0c8539c6de3015c0c1c76e2ef9f7dd7e1236eb435664f03a53d50ee36c14d744a44cafe7aaac14062139357f82858f3eb84e9ec8a968e9a2f7b70d131d71c83e68c2e21fcc0e4a421aaaa0d3c38117a1766f84e29cb6f6e3a18252f731805b2e27561b3d78ceab4b6a099a1924f160d8952e927ece2a3fd9373bfce6698c67d79756535361fce55ef80eaba146586f771dce4c699ea09cc11c7a50cc317d019e1a73843cae1bacaeb45b4a609eff627b71c60d175aa06f5a23228f805cf735e987a1c7b64843df2beea44bbfda899030c7111196e84f032185e2f4ce592a5ec1e3aab4be6aecbeaff7f9b4eb8d11bef00904a46571bce26a5fdfcb0a9e97123ec959dbafb1f89192869308a27310c63ca6a64722d1857aa3ca17f08c44fa4f4c80ed5db267d03f7022ca09180ef48c417b03aee00", @ANYRESHEX=r0, @ANYBLOB="1b002e800c00040000000000000000000c00060000000000000000000c0006000100000001000000"], 0x44}}, 0x0)

1.095545901s ago: executing program 2 (id=316):
r0 = epoll_create(0x6)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='svcrdma_page_overrun_err\x00'}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000000})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x14) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000001300000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x50}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}}, 0x0)

1.095164391s ago: executing program 2 (id=317):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f0000000040), 0x3, 0x51e, &(0x7f0000000680)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=")
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)='./file2\x00', 0x0, 0x241498, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
io_submit(0x0, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, 0x0) (async)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket(0x2, 0x3, 0x1000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
umount2(&(0x7f0000000500)='./file0/../file0\x00', 0x9) (async)
read$char_usb(r0, &(0x7f00000030c0)=""/4110, 0x100e) (async)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) (async)
read$char_usb(r0, &(0x7f0000000000)=""/44, 0x66) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.092935201s ago: executing program 4 (id=318):
unshare(0x2000400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000001700)="c5", 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r5, 0xc0189436, 0x1ffffffe)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001740)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000000)='MS\x00O', 0x0)
close(r2)

1.079092902s ago: executing program 4 (id=319):
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000002c0)=""/163, 0xa3, 0x140, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000003c0)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
getuid()
getegid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = open(0x0, 0x149442, 0x0)
ftruncate(r3, 0x200002)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_setup(0x535e, &(0x7f0000000040)={0x0, 0x47c8, 0x2, 0x22, 0x120, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x2c, 0x400, 0x258})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20)
mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6fb}}, {@common=@nodevmap}, {@rq={'rq', 0x3d, 0x81}}, {@timeout={'timeout', 0x3d, 0x10000}}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x10000}}, {@subj_type={'subj_type', 0x3d, '-%\'&'}}, {@fsmagic={'fsmagic', 0x3d, 0x4d44}}, {@smackfshat={'smackfshat', 0x3d, '/!*'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@flag='ro'}, {@euid_lt={'euid<', 0xee00}}]}})
socket(0x40000000015, 0x5, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0)

1.078176912s ago: executing program 3 (id=320):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0xc8, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x76c5deec02d3f16b, 0x0, @fd_index, 0x0, 0x7, 0x6, 0x0, 0x1, {0x2}})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x7d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x80045438, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000009}, 0x4008000)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)

1.022504846s ago: executing program 3 (id=321):
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10000, 0x8001, 0x384, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x7ff, 0x2a42, 0xffffffffffffffff, 0xffffffec, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xf}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x7ff, 0x2a42, 0xffffffffffffffff, 0xffffffec, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xf}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x3a)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000340)='%pI4   \x00'}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x901c0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x25, 0x358, &(0x7f0000000740)="$eJzs3T1oZFUUAOAz+5JMNrhmCmHRxtFOkGUTsdAqYVlhMYWuDP41Dm7Wn8y4kMGBWGQyjbJYKTaCVnZbaLm1WIjYWdi6gqyKjdstbPDJzHvzl5mYpJgY8fuKcDj3nnvvu3nwXgZy57VWbFyZjat37tyO+flCzKxcWIm7hSjFqUgisxMTfTg3OQ8AnHB30zT+TDMH9/54oRd59gPAf1f3+f/GmUGiOAiTg4qv3zetZQEAU3TIv/+fm5i9NrVlAQBTlD3/W4Pn/6MjzXs+5p85+DMBAODEe+HlV55dXYu4XC7PR9Q/aFaalXh60L56Nd6KWqzH+ViM3YjsRSF7W+j8fObS2sXz5Y5fS1HpVDQrEfVWs5K9Kawm3fpiLMVilPL6tF+fdOqXuvXliNhpdeePeqFZmY2FfP6fFmI9lmMxHhirj7i0dnG5nA9QqffqWxHtmO9dRGf952Ixfng9rkUtrkSndrD+7aVy+UK6NlLfvFHs9gMAAAAAAAAAAAAAAAAAAAAAgGk4V+4r9c+/Seut5vuX93YojZyPU8ma8/OB2tn5QGmxdzrP9WTv+UCj5/M0KzNx6l+9cgAAAAAAAAAAAAAAAAAAADg5GltzUa3V1jcbW+9tDAetocw73335zenoNc3kpW8ng6rIkyPj9DoOjZxEf4q0X54mI33yIInodd6p3riZDZXkQ+Z9iv2rGCvvBMWxpkK+pmqtduaRXz6bVPVXJ9jpZpIY25bRoJDPP9RUv7+TmI+I3f2q9g+WD+hzK03T/cq3Px2vikLETBx5GYcIvr395oNPNM4+2c18nR/68Njjiy/e+uSL3zeqtWg/nO/N3GZjNz3EyJ21jjclQ/dPId/n3q4fvNT2INPebGxVkx//eOmhj77f0zmZfP+kw5l395/rq72ZuSwoRJSyhf7ztc9OuPknB6/e69+9R//Fnf18pXpz++ffDlsVEb2NdlAHAAAAAAAAAAAAAAAAAAAci/4//c4dpeqp56e3IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4fv3v/x8O2mOZwwT3WjHeVFzfbOw7+eljvVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7H/g4AAP//CtJvLQ==")
openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', '', [{0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\xa4]\x9aY\x9eS\"\x15cB8\x8cl\xdf\x92a\x881\x1bBri\xa2\xd04l\xd1\xca\xd7`$\xbd\x8eZ\xb0*\x90\xb9Xnv\xaeT\xcb\x87\x8a\x181\xb0@\x8c\xd5\xf8.\xc7N\x94\xb9\xf0\xfd=\xd7I.\\Y\x13\x91\xa1\xc35e\xf4`\xb3FemV\x1c\xfa\xf6\xd89\b[\x03Bj\x9d7^T\x1a'}]}, 0x72) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', '', [{0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\xa4]\x9aY\x9eS\"\x15cB8\x8cl\xdf\x92a\x881\x1bBri\xa2\xd04l\xd1\xca\xd7`$\xbd\x8eZ\xb0*\x90\xb9Xnv\xaeT\xcb\x87\x8a\x181\xb0@\x8c\xd5\xf8.\xc7N\x94\xb9\xf0\xfd=\xd7I.\\Y\x13\x91\xa1\xc35e\xf4`\xb3FemV\x1c\xfa\xf6\xd89\b[\x03Bj\x9d7^T\x1a'}]}, 0x72)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
dup(0xffffffffffffffff)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ftruncate(r2, 0x0)

939.548914ms ago: executing program 1 (id=322):
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) (async)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(r0, r1, 0xee00) (async)
setresgid(r0, r1, 0xee00)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40241, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000040))
close(r4)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x8510})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000540)={@val={0x1c, 0xf5}, @val, @x25={0x2, 0xe4, 0xf3, "9884c20c79ab6e7fd9f791df5a4b3c0a67025ca1fccc5db4cc8e7cbe50bf35e3db7c8deb35eafef6ec3164abb2dcf0b11266fc60191882b47655aa4871f735d680a2e8fbc363626f692bc9df29da1842fe12ba023823160c993c337483a980794fb74ece52bacede13d45926d6d6b8e9a8c9c9a55b25897db32438908e"}}, 0x8e) (async)
write$tun(r3, &(0x7f0000000540)={@val={0x1c, 0xf5}, @val, @x25={0x2, 0xe4, 0xf3, "9884c20c79ab6e7fd9f791df5a4b3c0a67025ca1fccc5db4cc8e7cbe50bf35e3db7c8deb35eafef6ec3164abb2dcf0b11266fc60191882b47655aa4871f735d680a2e8fbc363626f692bc9df29da1842fe12ba023823160c993c337483a980794fb74ece52bacede13d45926d6d6b8e9a8c9c9a55b25897db32438908e"}}, 0x8e)
socket$inet_sctp(0x2, 0x400000000001, 0x84)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c8050}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c8050}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000087f6020101000000004b17e9a4b69fe4a62b1f5de70900080002e3ac1414bb17abf3346f0b50ebd7c88437cf"], 0x2c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000087f6020101000000004b17e9a4b69fe4a62b1f5de70900080002e3ac1414bb17abf3346f0b50ebd7c88437cf"], 0x2c}}, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) (async)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
getgroups(0x4000000000000288, &(0x7f0000001080))
setgroups(0x0, 0x0) (async)
setgroups(0x0, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
keyctl$setperm(0x5, r7, 0x8040000) (async)
keyctl$setperm(0x5, r7, 0x8040000)
lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0)
capset(&(0x7f0000000000), &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2})
llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000ad1e0001000017000000000000000000ac141400000000000000000000000000050005003616686a0a00001000000000fe8000000000000000000000001800aa000000000000000005000600000000000a"], 0xa0}}, 0x0)

865.900429ms ago: executing program 2 (id=323):
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000142, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000380)={[{@barrier}, {@data_writeback}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
r4 = syz_io_uring_setup(0x7925, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000240), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r7, 0x0)
io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000100)={0x20000014})
r10 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x3, 0x0)
sendmmsg(r10, &(0x7f0000002cc0), 0x1a3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000140)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "e28c5ba1b235d32faa85b7aa0bf11e1bd0f4912c53bcacc56f0c23812cb687ff", 0x3, 0xdc0, 0x0, 0x66}, 0x3c)

846.103681ms ago: executing program 1 (id=324):
r0 = syz_clone3(0x0, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200002, &(0x7f0000000600), 0x0, 0x566, &(0x7f0000000a00)="$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")
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xff68, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7000000ffff8bff95"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

769.203667ms ago: executing program 3 (id=325):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@barrier_val={'barrier', 0x3d, 0x449}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
r0 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r1 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) (async)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r5, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

745.17273ms ago: executing program 3 (id=326):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48)
r6 = mq_open(0x0, 0x800, 0xa, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]})

458.481883ms ago: executing program 1 (id=327):
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = dup2(r0, r0)
shutdown(r0, 0x0) (async)
accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x105042, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000001c0)=0x2) (async)
r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r2}, 0x10)
r6 = dup3(r5, r4, 0x0) (async, rerun: 32)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x4800, 0x0) (rerun: 32)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x19}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x5, 0x0, &(0x7f0000000380), 0x41100, 0x66, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r7], &(0x7f0000000480)=[{0x3, 0x4, 0x3, 0xc}, {0x0, 0x2, 0xc, 0x2}], 0x10, 0xfffffff7}, 0x90) (async)
getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0xe)
read$usbmon(r6, &(0x7f0000000600)=""/29, 0x1d) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, 0x0, 0x20, 0x3b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3d}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
sendmsg$nl_route(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xc1540080}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x1001c, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r11=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000001bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000000980)={0x11fc, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "fbf86193c78434f6"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x25, 0xc5, "a456a52f73c0e35d8764762b6a54f12a2672681c59b5dd6f239919ef72bf6e42c2"}, @NL80211_ATTR_VENDOR_DATA={0xd4, 0xc5, "e6df345c14b39f2d270b40c34d2e8b180a6642d34e63c1c0a979077c88642df29e9e3adb3838e2c9ce0ff1a4f7e729837c15c94f715312e53f806e70f1bfc31431c580b4d4540252313132909dfd960dc49ffd3ba7b751a5ccf639db028a4f293e2296e7db380d98f2a244f22966438488151a9b6a4ff9ae05219aae1c8cb9d9d934eb2db8e4be8d7321af85fc7c9889c059f3d4aa7a639eb9a498eb77a46a8579cb212b6adb58df83e74c56b08d96fac52b476f952b5547c25f67c8681c8166dc6321676b4f634db968fc1c4acc5055"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "527d22ca6c439ff7503c23709deb2523c6d7bd90a7327d2448c9a81531316aed9ea4a4c686ad0f1a05a745ac63b4b1725796558f0f4c0d3126d019c9d24c775f6f3a8197fb020be7aec55a3ee42adb77166d5203f49a949a0a7732d3760dbf372b46fcd0a5aef560c92437f7961ccdb7eaaa9952f56f3d0710cdc008fdc647d0fa6e0b40bb357e55b85bb6b72ac9e4a43798b5c9baf57d41b6e9972c9cb1c9a017d3c8cf713d17e4d0d7ee1dfb70c629e9d2338f756cdba0d04b97ba77daca178965a92e75e8d7c630e254f342b1372d2b0a2f74b690b76149333712717f7cc001c895aecad0cf2db17fec54f0d8d01aac7d8243e49463567c54692fc4e165d588895ef5a94348786ef2cc6451aed9e2ec5c193349dcb2daa6736d959786cd5b97c2fc047d8a0d6d40df77199bd757a9b0d0f2deb3bde3d194ae5c29da82164afb4c9ed9624ac9ab75378822c5cbae0b27f36f78174b0f23f1927a9da096994d7e3812a9a8230e557d67fe974aa2781329556c6e38c208aa3e3947d111858f8d262c6c46a57e41e2d7f6acf5641179e7fe21794b040964096ec2c1f88b782da565e011bc46425aaa335587d108d5eaac6ae6e2b973692440684dedb76d6cc3d80f2952a1ff662b9fb50111176e4b2ecd69bb97dbbf12e66dd4f582522fea6889d3f701694fb81a078a8855cdfa4db78a59f46ad9a1f43613b2399407ef5a27c9c8b29e1df101211d305688555d7cc62463fbaa0d7ba6bfe0012f4cbf38fb293d80a600b11ec1801c5f1f3f8fc00262253b1aa9495a2e18a468050bbe883002adf1722f59a61bd9653771127e9146d27997b4b59bf6ad161a01148131a312a300884abedbbcb643605f15031788c6ba60253bc9b9db2648571f257d2fc8b59016b7cd1cf31c47dc0e5283e6ab85c3f7e6247bbc7b92b3af67b2f1c07e41dc71e9227fb9754e0ff012cfc901a62266ef4313b8e30557dbdc64216529fedfc70d15f266b6876869c9ee65a04483d33b24ad83a97c48113c6d3c6c75090edeb61c293c74fb52113d689ec88aacac1c138f9f2188c1bb5eccf9d1f021b4f27fc4edcf5d21c3dc17b8d807eaa0578f77b584119cfc411389cda1f169c810002f28934f8a0d291ff6526cf0c356228f706f295447b01ab741d522ca509732b00e3dc263edd0c973192a5cc923555afb97594aaf2a73b613ee0a7256baa1a1d660f71c5a02f6aa5fde3e25850dcd78d3e07df4905da27d07b86e90e9d3cdaa9a9e55215122213f4644e9948836973f1806205e40e7aaabd0b0001971bcafacc12e9b0df333c2551fc55c5e259e3a14864aefe898dd92f7d1c05e32e2a54966a23dbcb46e7c25618c29663059cc20fd73a057da366b5fd5ef4a71130728ad71550863c84bdaefef22c7521f4532186b6e20579e1a4bb5bfff5b7547d6618982382549b9f480334507feb8772d2677f3bdc8697157b63fdb37463cf94154d857c5fc3b8e933aef9e417ab46d56f37adf7f4c5ef6fd0a21e8e832dcc041e545a95179d9f9fc4c49196a6f5cddac52a6642dfec6c71b5758aa6a67503d0e02b85c4955be221361c991a8151027a3ac43f6ff53261b8056ad0326059e1e27b55a8cb0cf0aba75365e549bc8398bf009135c6b9c007b5c6ccb6b99745c8dfc8e4156c84809cd50b3160452ec8a6550e2cf2d3e070115a5a8e95e4bccdc776039206cb799eef071e29b6eb48804be91f7a861ee68f71cd9a945df3cb271bd4f7f4950c528316e92048752f136267f658a0e59f6190049edc7966b82d577bad237f397ad4b9140c199042b0e0f4c8817a0622fa59e158dccac64399ce2db1d99935075d384d57e63be6dc744a00f2a5ee1995b2b0021e8123cb737af7ee8f0daccfd89bd36688732710673fa269b7a88cc92f2c56508791a840d057736692dcdce0798e3f1ec96243c1b35c122405828ae5a48d4ffdacfbf0fa2dc1b75b602916bbd432628e776a68d7fcdf979728fe27ed7e9fd20f85e022551159671eb03db873cc46ba85f63692d353f84c3d025b152e83ded2193b8f7c4692af25c5fe01ff284a58d35245c189b53483c89f162842db2f44d358d7e4e1360a3262319ed925fa143ff448a483efbe98c232647faf4e7bf6257e58771563cb05803f14f973c1537cf879126f37db01cb531df349c590d4b79e19d332a1e5391d6ec6c412e2d6106056d62538309f20ef062031234e9b990c3162b5f0be9c3945c11b5b416520c52ef638ec96cc3022bd9fe029e2d23f3376ba915d582d2e83106cf6f6e72dc124fca180f1efdfa4dca14032fae975445c2c4604c62444c6418527bfe1c82ad00061f450f8d6d0aaeade457d0e30df50b4b3d8f851ee480c7766800d639b47527272963d719f5ab4b3ebb84f24e985682ec69c2316f7abbc1d79fa6d501df2869af3193ab44a719c055113f0284028c63e883f9b451a4b2c59f794edba81917deba62c357f003b4ac67fb6c5fae09f7a5bb0de000bfe6b50966830080b34389363d87ab60b2d7246c4102448d57a07a0b4275d689a7cb9c660e68820e5694d6797a0312d08da40db9c1465ef02ad326d6c2f56d647e2d2d4fd14ba3d4c062b4320956eb479af2107015859338341aa16165480864d8b6345a6daeae75bc7064168be4b63b56961cd7133f151bf785123f42f5692e9ceaaa5e8766f6de4c472aa4ba954935cbc602b92b5cf28a297b63465b322066f8a0aac1e55d623fc0bddaf2950973f80c5055873b708f9b51c180081aec8e6c513479b851b5f2ee201c675d1ad05baec794b7d6f799c2e72d298d82b183306d7b03b6bc9d7086f604156e4aa60face02af731319398f2c06a8a97efc8b883bbb6f32805c1fe6d57628a91336927b53f632814ea48eb47d1a5649671732aa93e19aa9b8d97335fa36d7792ffb1d0aafbe5bf67efae4af27470dbc2886ec738a04edcb76d5de76977debc32c819c239f7adbc2816dbf571eacfb4497395613b72b9f02fc0c91977e3d0712fd830edda2f575566510f9f8de312157eb0906d81ea6674e9aeadffab574a25e71844af57bdb2a6ddb84fe96909133601bb68d1c1a841b48996163d12a7a17c87b636bfc1e9d3bca2d59be45f016de4b1115e3e1e487bdf39868d0be0fd0d2dd4cfd333fcac6a4b8244cd54e5a085756129217b1dbef214f8d0287397de69db2a94a1f793beda86b264a0f5406a03fa21b9873694cac4abbea79a936f2c75dfb2be182c909cb0613e67c146f0bcf0b80c7e9d2b5925ba1feaeb89efc048b0cece45a306d6ede5336bf09ed736e3a6fada7b82aa84fb9f97850668fc269a8d87ba7ceb311f29a302881f69c9471781d562eed5f9c2f9de62c68e99dc75252e58ea86fa40c1ee4add5d70c30da6cf844a7c724d077681faf4bc74b992ade477e88ff8b3a23d0f8e732eabf40cefd62a70fca90eb213d5eadff5ae04f3be2a6cc7690b1154195b9a51259f1ca97547c142ddecff3e239aa007160f844a5a1b71d2fb3cf6157a75df97b74cc6a327d783206c16c53d61989714a909aac43332e8af1a1cbf6ab1e985f5cd242c1bfec15acd2186c6c25d8c5e854898c203340128deedb6c2fa2ea11b1932fa18292fc0eef5e8cdaba799e1d12a1a901db33411d85716274ff8da20b971f5e2844bd7ee723e5080c9d47452f19cf0096125ce3bf91444818b2f8aaff2d0c9189f5bbd9025247683356eedd61ccc084a1dd721a9a21209cb158a392622f24c0f79e1ad1b8ac5c95eb1a37edb99e56af4a322b1134617492d42f8025b4161e36abfab061dbf3971fdc0ec428beb46e18b925d83ce935d38156c47a9c19212f6d1a475dd8edfb53bfe6c4dc6d24bc912eeb8948c45b8f01b0dd9d96d7bf0075926af112d6c31f0828ba978ffe0e9c946654c72fa71fd6a38b0c61cfa133e74cdf9f314cd4668e96a82ed8113f29d0e8ce3613ec29f3de183584588ab3148005ae47c2104a2e6d9f04bf5e043a98154a0bf05f8263deec2c5bb00a754032c536fe7e40353ba86398138a26cb6cd35b2421e551c2a40c99cd2f2775d924fd8a30191fea290d2351acdcbb720f94e5ab17863ab0e873270d7e28fafc50b9e375b34c9900e931262af91a7f76fb0f3450cded6ff3a295ee9580a6d658791640e04d609ccd906570e2192ccd7c7f3a1f3c6674b67e54693a57ab65c2fe015e68e74664a55d97505a4f64b0e0f2e41882359a190ad1a9a0ce6c93c363e2e3b10b0a839d5fc5f63109034636915505b686fac7c12b85cf5a554c0e8352de6888e5418743b713c4824e2f9144762daf1e4f33423d1ecb13e390ed1f57cd607dcae44c3aea88dd78684e21ace829669224c395f10df2ed73d7675e116e6617056234138a166622cd0aa5d5ad98af8623feb18d65c19ab17353c69a05541a353553bc202d66e3953dd850eea2299b4d5e9f1d4213cc39433a3b8b022d18fc6e6c115688cab908ddbce752858a58e3748a6dcc952eb517cc5206b6978d6e09fd29069653bef6322d6289c9c3ad9d441d9d98301fe0e372f9b14ff6c52a21efb6277e672bdde06a725766bb71cfdebcb1cb631b296be842277831817adc261984854637b70681b715b3524d1b028eddabd09d5f61a9dddf7ad73aa27da62a56118ac9dca53173cbdbe79b5dec6bea921707174d435a30798f50adc811b0f808e0c9b84f7e905c747ca3f1def4acf61c99dda287756b2673d191d3e75fe28a85c04e512549285c0f05c436e66f76dbf5f61503fec879deed85c9ecd14960b9fa6f2757e60e6cf4f2e795e9d26d42343c2b646f34a4ee638adfcf31b6691436821600632f22f05b9e499d58992a06ec6700a8f426a094cb188b418bc38ee14a5358b4cd3303839cf55d07fa6a5ebb1784d569fc51ca75944804d17f1386f2d5031d328b227028f0cd9bf6d4a1a391e5a3ef5b1d198eb218a152f58e7439aacadb0d6bbee8ce7604e92b589e6c7a954b9d0483c9a6f594767559bb91f7ddc1d8d756b2118d9cc246ab7fe0581cbbaa7396d55baa063329f7e2104511f2f9422ed89375600e83a80f9e10efaaed2cd291faecf95bedd987ab2e1e2d726e72c800d9004ae8ad0b12caec6a02aad72d8673ef8b86d55bed0a43d1ce601982f4f2d9aa6e7efa55761c20f2a218181c728dd6e7998d769b283b8bb016db36d6f1b50f94b9f648bb7f9f773103380d5353513dad143ad3f91030e339022104b6ba887d037c62dd17b0b6faede595e761711780c07757764a98c52e5e78a0de947fb2c54cca29262c7f31593985dd225dc5b09e2261bc5fcd363c5243f7d771d6cebc9e440ff0a195d447cae66e4a5803fe828e3f657b384407839dd13b221f35f9d89f48c60b2a1d55fbc693e7d37565a56b15e664fee2217e8035305ccfe71d46ed9a39ce43b2c5d423946a4986f093b2d80ed0a40680996a6bea2706426125c942ec2680332102f45b4eb0d1707a8d60f1a5acb99daa4a56e8f245c394b5288d47dc856a55537a8d50c62fc969cdf5eeef94f0b185cc4dafb685b0434fe039dd6a86c7b141cce53b74aff86418aa2b73e7d199725c7dce26961348d2d71f5d35ede6fdeb65601d116c3fe8fd3917743d868e6318706195918f9480b7c26720c23b01fff7df4d74a79dc805e462833be6a3fee0a1396ddb1ae2cc38f8b7939b61fc32b432c4db72cd81caabe15070abedbb23aeed0427522aaf505627ea1dd6f538e5e6e422ae3bd7a488eae9359c7de1016d64b2b25cf482ea33db6566f70c588a7e2328e021525a7f4"}, @NL80211_ATTR_VENDOR_DATA={0xaf, 0xc5, "f2c917984db6d4187ecd4e75fc7fb2a3e7db31c4c62ef5f0f7f55158fa4bedbbb14eff0ba49da26a76ad0a87c7378485f49c8fc6ecb2b470c9d8462262bb170d2f0eeb1e1045b96a47542e664eb5cb7480dc8386611844ff5af5496afee3d1d0c6f6573c10d3f967cd6a2ce25d6772cf384c0d1e45af978e0e1827d5b8dbe4cd3b9cd7284b0c14d17654e0e5906cc0c770730ece212d5e7b1c2724698dfeee9be99129b8d6e6a65a0335dd"}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001c80)={0xa, &(0x7f0000001c00)=[{0x7, 0x0, 0x5, 0x3}, {0x5, 0x1c, 0x9, 0x6}, {0xffff, 0x4, 0x0, 0x7f}, {0x0, 0x3, 0x7, 0x1000000}, {0xd, 0xff, 0x4, 0x7}, {0x2, 0x5, 0xff, 0xd52}, {0x2000, 0x7, 0x6, 0x8}, {0x400, 0x0, 0x8}, {0x6, 0x9c, 0x1, 0x1}, {0x7ff, 0x5e, 0x1, 0xb024}]}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000001cc0)) (async)
r12 = accept$packet(r6, 0x0, &(0x7f0000001d80))
bind$packet(r12, &(0x7f0000001dc0)={0x11, 0x8, r1, 0x1, 0x7}, 0x14) (async)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000001e00)=0x7fffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e80)={0xd0, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5be6}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7711d0bc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x37d1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4002) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002100)={@map=r9, 0xe, 0x0, 0x8000, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002040)=[0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0], <r13=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002140)={r8, r7, 0xc, 0x0, @val=@netkit={@prog_fd=r8, r13}}, 0x40) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000002240)={&(0x7f0000002180), 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0x4000801)

251.67164ms ago: executing program 1 (id=328):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
setpriority(0x2, 0x0, 0x6)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000140)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@errors_remount}, {@noload}]}, 0x64, 0x51f, &(0x7f0000000980)="$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")
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "4141604be8cfac42", "18f1246fff2f92b6f40ebeb0213ec722", "c6cb131b", "5601127761d8594b"}, 0x28)

212.827333ms ago: executing program 1 (id=329):
perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb2, 0xfffffffd}, 0x9c)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close_range(r4, r5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x3, &(0x7f0000000200)={'filter\x00', 0x0, [0xfffffffd]}, &(0x7f00000002c0)=0x44)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000040)="a6bce87d0198eb61c2d762d730a654e2bc8be772a3f52208a604258a935d5927caf0b87ac656f958227c0046db395e4e924293d527c2a66def62bb6ca45c95e7c661cb5ba1d22d0b312b7d379d2d6c4ac1855e584052cf0e90f77acb3c2e69e80a7a7b5bd54742e2812d4a626f1a1e35e9129a008ed3e5e83ed29bcf81b3c007b238d14f972a512d1d1a", 0x8a}], 0x2, 0x1200, 0x0, 0x3)

210.414133ms ago: executing program 4 (id=330):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x90)
r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="040000000000800008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

75.581294ms ago: executing program 1 (id=331):
r0 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x40, &(0x7f0000001440)=<r1=>0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000002ec0))
io_pgetevents(r1, 0x1, 0x1, &(0x7f0000002e40)=[{}], 0x0, &(0x7f0000002f80)={&(0x7f0000002f40), 0x8})
r2 = socket(0x0, 0x0, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
accept4$llc(r2, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r3, &(0x7f0000000400), 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0xb0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x9}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_MAP={0x24, 0xe, {0x80000000, 0x2, 0x45, 0x4, 0x3, 0x3}}, @IFLA_MASTER={0x8, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x9848c70f3723179f}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f00000004c0)="5035cb1fa4a0ef732b2788e8cc85ea07ee965cd7a8a2aa87b77cda7126bd9f4752aa366e568ae939490fab111ec80e0381b9f49bceca8e4c5ae30c8d67069a811be3ccd4577afe17600cc313ff98fc0e6f16ea22c0525fbc9a801d55f105"}}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0)

73.074044ms ago: executing program 4 (id=332):
socket$inet6(0xa, 0x6, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000000001000000000040000000030a03000000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000044000000060a010400000000000000000100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000000000a00"/204], 0xcc}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x182000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002800800034000000000080001"], 0xe8}}, 0x0)
listen(r2, 0x1000a)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r3, 0x10d, 0xd3, &(0x7f00000002c0), &(0x7f0000000080)=0x4)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001006269747769736500240002800400034000000004080001400000d3ed040004800800024000000016040005800900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)
r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r7)
r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
socket$packet(0x11, 0x3, 0x300)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240))
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)

0s ago: executing program 2 (id=333):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x410484, &(0x7f00000000c0)={[{@nogrpid}, {@discard}, {@bsdgroups}]}, 0x1, 0x77d, &(0x7f0000002600)="$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")
r2 = creat(&(0x7f0000000100)='./file1\x00', 0x58)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x20052fa})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000800)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}], [{@fowner_eq}]}, 0x3, 0x43e, &(0x7f0000000340)="$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")
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xce, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x8, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
semget$private(0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$packet(0x11, 0x0, 0x300)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000080)=0xa, 0x4)
recvfrom$packet(r4, &(0x7f0000001600)=""/4096, 0x1000, 0x0, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
io_uring_setup(0x288e, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x4000})
socket$inet_tcp(0x2, 0x1, 0x0)

kernel console output (not intermixed with test programs):

28.220828][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.241236][ T3258] 8021q: adding VLAN 0 to HW filter on device team0
[   28.253179][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.260291][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.270327][ T3259] 8021q: adding VLAN 0 to HW filter on device team0
[   28.279729][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.290230][ T3265] 8021q: adding VLAN 0 to HW filter on device team0
[   28.301665][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.308757][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.317290][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.324385][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.339344][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.346391][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.358661][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.365764][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.376157][ T3263] 8021q: adding VLAN 0 to HW filter on device team0
[   28.389886][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.396947][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.406140][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.413162][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.432741][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.439778][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.500895][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.529882][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.558330][ T3260] 8021q: adding VLAN 0 to HW filter on device team0
[   28.588945][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.598507][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.605569][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.619142][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.636752][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.643805][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.672584][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.687056][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.783418][ T3259] veth0_vlan: entered promiscuous mode
[   28.798921][ T3259] veth1_vlan: entered promiscuous mode
[   28.820704][ T3265] veth0_vlan: entered promiscuous mode
[   28.837035][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.848435][ T3265] veth1_vlan: entered promiscuous mode
[   28.862963][ T3265] veth0_macvtap: entered promiscuous mode
[   28.877874][ T3259] veth0_macvtap: entered promiscuous mode
[   28.885862][ T3263] veth0_vlan: entered promiscuous mode
[   28.893924][ T3265] veth1_macvtap: entered promiscuous mode
[   28.901676][ T3259] veth1_macvtap: entered promiscuous mode
[   28.909089][ T3263] veth1_vlan: entered promiscuous mode
[   28.941039][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.956686][ T3263] veth0_macvtap: entered promiscuous mode
[   28.973713][ T3258] veth0_vlan: entered promiscuous mode
[   28.979893][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.990522][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.002005][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.015393][ T3258] veth1_vlan: entered promiscuous mode
[   29.022370][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.031991][ T3263] veth1_macvtap: entered promiscuous mode
[   29.039021][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.049488][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.060353][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.068962][ T3265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.077981][ T3265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.086704][ T3265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.095411][ T3265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.111963][ T3259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.120714][ T3259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.129436][ T3259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.138297][ T3259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.174953][ T3258] veth0_macvtap: entered promiscuous mode
[   29.183421][ T3260] veth0_vlan: entered promiscuous mode
[   29.191447][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.201990][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.211903][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.222388][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.235334][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.246938][ T3258] veth1_macvtap: entered promiscuous mode
[   29.255105][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.265729][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.275615][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.286149][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.308770][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.316679][ T3400] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   29.333001][ T3260] veth1_vlan: entered promiscuous mode
[   29.355344][ T3401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.368428][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.377186][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.386032][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.394824][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.405239][ T3401] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   29.419160][ T3260] veth0_macvtap: entered promiscuous mode
[   29.431827][ T3260] veth1_macvtap: entered promiscuous mode
[   29.438959][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.449509][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.459352][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.469881][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.479983][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.490512][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.501743][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.515793][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.526277][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.536216][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.546682][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.556608][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.557544][ T3410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   29.567016][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.569204][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.607987][ T3258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.616755][ T3258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.625741][ T3258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.634945][ T3258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.661417][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.671864][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.681736][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.692258][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.702097][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.712567][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.722499][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.732933][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.745761][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.755256][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.765846][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.775721][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.786339][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.796236][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.806661][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.816476][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.826916][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.838197][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.847499][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.856251][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.864970][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.873665][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.895597][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   29.895608][   T29] audit: type=1400 audit(1723485373.444:137): avc:  denied  { name_bind } for  pid=3420 comm="syz.2.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   29.923512][   T29] audit: type=1400 audit(1723485373.444:138): avc:  denied  { read } for  pid=3413 comm="syz.0.6" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   29.945854][   T29] audit: type=1400 audit(1723485373.444:139): avc:  denied  { open } for  pid=3413 comm="syz.0.6" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   30.055988][   T29] audit: type=1400 audit(1723485373.604:140): avc:  denied  { map_create } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   30.124682][   T29] audit: type=1400 audit(1723485373.624:141): avc:  denied  { map_read map_write } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   30.144246][   T29] audit: type=1400 audit(1723485373.644:142): avc:  granted  { setsecparam } for  pid=3426 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   30.169575][ T3429] loop3: detected capacity change from 0 to 512
[   30.185571][ T3429] =======================================================
[   30.185571][ T3429] WARNING: The mand mount option has been deprecated and
[   30.185571][ T3429]          and is ignored by this kernel. Remove the mand
[   30.185571][ T3429]          option from the mount to silence this warning.
[   30.185571][ T3429] =======================================================
[   30.225833][ T3429] EXT4-fs: Ignoring removed mblk_io_submit option
[   30.232561][ T3429] EXT4-fs: Ignoring removed i_version option
[   30.264974][   T29] audit: type=1400 audit(1723485373.714:143): avc:  denied  { create } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   30.284477][   T29] audit: type=1400 audit(1723485373.714:144): avc:  denied  { getopt } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   30.303790][   T29] audit: type=1400 audit(1723485373.714:145): avc:  denied  { create } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   30.322998][   T29] audit: type=1400 audit(1723485373.714:146): avc:  denied  { write } for  pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   30.348713][ T3429] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.7: invalid block
[   30.360368][ T3435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   30.377029][ T3431] 9pnet_fd: Insufficient options for proto=fd
[   30.416281][ T3429] EXT4-fs (loop3): Remounting filesystem read-only
[   30.423197][ T3429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.436996][ T3431] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure
[   30.472742][ T3429] SELinux: (dev loop3, type ext4) getxattr errno 5
[   30.491089][ T3443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'.
[   30.493884][ T3429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.534328][    C1] hrtimer: interrupt took 21784 ns
[   30.633761][ T3446] loop0: detected capacity change from 0 to 512
[   30.640455][ T3446] ext4: Unknown parameter 'test_dummy_encryption.barrier'
[   30.653690][ T3446] 9pnet_fd: p9_fd_create_tcp (3446): problem connecting socket to 127.0.0.1
[   30.721986][ T3449] loop0: detected capacity change from 0 to 1024
[   30.746477][ T3449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.752251][ T3452] loop2: detected capacity change from 0 to 512
[   30.820824][ T3452] EXT4-fs (loop2): 1 truncate cleaned up
[   30.835118][ T3452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.938640][ T3452] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.12: Directory hole found for htree leaf block 0
[   30.996915][ T3452] bridge0: port 3(syz_tun) entered blocking state
[   31.003410][ T3452] bridge0: port 3(syz_tun) entered disabled state
[   31.036710][ T3452] syz_tun: entered allmulticast mode
[   31.047713][ T3452] syz_tun: entered promiscuous mode
[   31.053124][ T3452] bridge0: port 3(syz_tun) entered blocking state
[   31.059571][ T3452] bridge0: port 3(syz_tun) entered forwarding state
[   31.105375][ T3459] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.12: Directory hole found for htree leaf block 0
[   31.179148][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.415925][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[   31.499935][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.567362][ T3482] loop0: detected capacity change from 0 to 1024
[   31.573964][ T3482] EXT4-fs: Ignoring removed orlov option
[   31.579744][ T3482] EXT4-fs: Ignoring removed nomblk_io_submit option
[   31.595901][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.610575][ T3482] process 'syz.0.18' launched './file0/file0' with NULL argv: empty string added
[   31.718318][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.760431][ T3494] loop0: detected capacity change from 0 to 4096
[   31.769142][ T3494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.812616][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.855242][ T3502] loop0: detected capacity change from 0 to 256
[   31.861755][ T3502] msdos: Bad value for 'gid'
[   31.866411][ T3502] msdos: Bad value for 'gid'
[   31.882992][ T3502] loop0: detected capacity change from 0 to 1024
[   31.910094][ T3504] loop0: detected capacity change from 0 to 1764
[   31.916658][ T3504] iso9660: Bad value for 'uid'
[   31.921609][ T3504] iso9660: Bad value for 'uid'
[   31.935140][ T3504] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.949454][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'.
[   32.250475][ T3514] loop3: detected capacity change from 0 to 764
[   32.284986][ T3519] loop3: detected capacity change from 0 to 2048
[   32.296544][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.317367][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.340685][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'.
[   32.356703][ T3525] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   32.423425][ T3533] loop3: detected capacity change from 0 to 512
[   32.431541][ T3533] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.32: corrupted in-inode xattr: invalid ea_ino
[   32.445307][ T3533] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.32: couldn't read orphan inode 15 (err -117)
[   32.457587][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.522383][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.576987][ T3547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'.
[   32.585815][ T3547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'.
[   32.596991][ T3547] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   32.662416][ T3554] loop2: detected capacity change from 0 to 128
[   32.669027][ T3554] vfat: Unknown parameter ''
[   33.096251][ T3557] loop2: detected capacity change from 0 to 512
[   33.106191][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   33.119041][ T3557] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.130748][ T3557] EXT4-fs (loop2): shut down requested (0)
[   33.137869][ T3557] netlink: 'syz.2.37': attribute type 4 has an invalid length.
[   33.179078][ T3557] syz.2.37 (3557) used greatest stack depth: 10824 bytes left
[   33.186935][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   33.210868][ T3561] loop2: detected capacity change from 0 to 2048
[   33.225978][ T3561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.246735][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.265476][ T3565] Zero length message leads to an empty skb
[   33.268053][ T2961] udevd[2961]: worker [3251] terminated by signal 33 (Unknown signal 33)
[   33.280111][ T2961] udevd[2961]: worker [3251] failed while handling '/devices/virtual/block/loop2'
[   33.317006][ T3575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   33.336771][ T3575] loop2: detected capacity change from 0 to 512
[   33.345763][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.358318][ T3575] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.467612][ T3583] loop3: detected capacity change from 0 to 4096
[   33.474306][ T3583] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.482511][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.496488][ T3583] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.44: corrupted inode contents
[   33.507493][ T3575] syz.2.42 (3575) used greatest stack depth: 10192 bytes left
[   33.515169][ T3583] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.44: mark_inode_dirty error
[   33.517987][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.527688][ T3583] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.44: corrupted inode contents
[   33.547622][ T3583] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.44: mark_inode_dirty error
[   33.560135][ T3583] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.44: corrupted inode contents
[   33.572147][ T3583] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.44: mark_inode_dirty error
[   33.584241][ T3583] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.44: corrupted inode contents
[   33.596006][ T3583] EXT4-fs error (device loop3): ext4_truncate:4241: inode #15: comm syz.3.44: mark_inode_dirty error
[   33.607380][ T3583] EXT4-fs error (device loop3) in ext4_setattr:5553: Corrupt filesystem
[   33.616593][ T3585] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.44: corrupted inode contents
[   33.644201][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.657720][ T3593] netlink: 'syz.2.47': attribute type 29 has an invalid length.
[   33.666911][ T3593] netlink: 'syz.2.47': attribute type 29 has an invalid length.
[   33.697303][ T3611] netlink: 'syz.2.48': attribute type 2 has an invalid length.
[   33.706824][ T3607] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   33.715087][ T3607] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   33.816595][ T3615] team0: Device ipvlan0 failed to register rx_handler
[   33.838662][ T3615] syz.3.50 (3615): attempted to duplicate a private mapping with mremap.  This is not supported.
[   33.881510][ T3619] loop2: detected capacity change from 0 to 256
[   34.071263][ T3627] loop2: detected capacity change from 0 to 512
[   34.077691][ T3627] ext4: Bad value for 'min_batch_time'
[   34.287012][ T3637] loop1: detected capacity change from 0 to 512
[   34.301285][ T3638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29201 sclass=netlink_route_socket pid=3638 comm=syz.1.57
[   34.314951][ T3640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29201 sclass=netlink_route_socket pid=3640 comm=syz.1.57
[   34.329197][ T3637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.342088][ T3637] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.381830][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.487327][ T3649] loop0: detected capacity change from 0 to 256
[   34.822008][ T3657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[   34.944464][   T29] kauditd_printk_skb: 146 callbacks suppressed
[   34.944529][   T29] audit: type=1400 audit(1723485378.494:293): avc:  denied  { create } for  pid=3658 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   34.974663][   T29] audit: type=1400 audit(1723485378.514:294): avc:  denied  { bind } for  pid=3660 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   34.993799][   T29] audit: type=1400 audit(1723485378.514:295): avc:  denied  { name_bind } for  pid=3660 comm="syz.2.64" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   35.015322][   T29] audit: type=1400 audit(1723485378.514:296): avc:  denied  { node_bind } for  pid=3660 comm="syz.2.64" saddr=fc01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[   35.042045][   T29] audit: type=1400 audit(1723485378.524:297): avc:  denied  { sys_admin } for  pid=3658 comm="syz.3.63" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   35.062772][   T29] audit: type=1400 audit(1723485378.574:298): avc:  denied  { write } for  pid=3660 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.082956][   T29] audit: type=1400 audit(1723485378.574:299): avc:  denied  { nlmsg_write } for  pid=3660 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.211801][ T3670] loop3: detected capacity change from 0 to 512
[   35.379940][   T29] audit: type=1400 audit(1723485378.924:300): avc:  denied  { getopt } for  pid=3677 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   35.764035][   T29] audit: type=1400 audit(1723485379.304:301): avc:  denied  { ioctl } for  pid=3687 comm="syz.0.70" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5187 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.840449][ T3701] netlink: 'syz.2.72': attribute type 13 has an invalid length.
[   35.845645][ T3700] loop0: detected capacity change from 0 to 2048
[   35.856061][ T3701] gretap0: refused to change device tx_queue_len
[   35.862869][ T3701] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   35.898377][   T29] audit: type=1400 audit(1723485379.444:302): avc:  denied  { create } for  pid=3702 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   35.900394][ T3703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11280 sclass=netlink_route_socket pid=3703 comm=syz.2.73
[   35.935833][ T3703] loop2: detected capacity change from 0 to 512
[   35.995612][ T3713] loop0: detected capacity change from 0 to 2048
[   36.005987][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.026869][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.083535][ T3723] tmpfs: Bad value for 'mpol'
[   36.113161][ T3725] netlink: 'syz.0.80': attribute type 12 has an invalid length.
[   36.239607][ T3739] loop3: detected capacity change from 0 to 512
[   36.269237][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.282053][ T3739] ext4 filesystem being mounted at /23/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.298587][ T3741] loop0: detected capacity change from 0 to 8192
[   36.306452][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'.
[   36.340460][ T3739] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.83: Directory hole found for htree leaf block 0
[   36.353333][ T3741]  loop0: p1 p2
[   36.357131][ T3741] loop0: p1 start 16777472 is beyond EOD, truncated
[   36.363746][ T3741] loop0: p2 start 67698708 is beyond EOD, truncated
[   36.384488][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.451753][ T3755] loop0: detected capacity change from 0 to 512
[   36.465690][ T3757] loop3: detected capacity change from 0 to 2048
[   36.467635][ T3755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.484669][ T3755] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.496519][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.511075][ T3755] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.86: failed to insert inode 16: doubly allocated?
[   36.525045][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.651618][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.987243][ T3784] loop2: detected capacity change from 0 to 2048
[   37.058432][ T3790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.95'.
[   37.483226][ T3794] loop3: detected capacity change from 0 to 2048
[   37.528249][ T3794] Alternate GPT is invalid, using primary GPT.
[   37.534520][ T3794]  loop3: p1 p2 p3
[   37.543753][ T3797] loop0: detected capacity change from 0 to 1024
[   37.552230][ T2961] Alternate GPT is invalid, using primary GPT.
[   37.552659][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3797 comm=syz.0.97
[   37.558536][ T2961]  loop3: p1 p2 p3
[   37.572681][ T3797] netlink: 64 bytes leftover after parsing attributes in process `syz.0.97'.
[   37.609427][ T3704] udevd[3704]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   37.611183][ T3249] udevd[3249]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   37.619822][ T3799] udevd[3799]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   37.909273][ T3814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'.
[   37.969792][ T3823] loop3: detected capacity change from 0 to 1024
[   37.985843][ T3823] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   37.996763][ T3823] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   38.006703][ T3823] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   38.016972][ T3823] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.104: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   38.035410][ T3823] EXT4-fs (loop3): no journal found
[   38.040626][ T3823] EXT4-fs (loop3): can't get journal size
[   38.047247][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.065991][ T3823] loop7: detected capacity change from 0 to 16384
[   38.187653][ T3828] loop2: detected capacity change from 0 to 164
[   38.218697][ T3828] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   38.232607][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.296649][ T3834] xt_CT: You must specify a L4 protocol and not use inversions on it
[   38.426987][ T3852] loop1: detected capacity change from 0 to 512
[   38.433483][ T3852] ext4: Unknown parameter 'obj_type'
[   38.529457][ T3868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.115'.
[   38.544807][ T3870] netlink: 96 bytes leftover after parsing attributes in process `syz.2.115'.
[   38.560046][ T3869] loop0: detected capacity change from 0 to 1024
[   38.576646][ T3869] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   38.582015][ T3868] loop2: detected capacity change from 0 to 8192
[   38.595713][ T3869] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   38.604204][ T3869] EXT4-fs (loop0): orphan cleanup on readonly fs
[   38.611607][ T3869] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.114: Invalid block bitmap block 0 in block_group 0
[   38.625444][ T3869] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.114: Failed to acquire dquot type 0
[   38.637256][ T3869] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.114: Freeing blocks not in datazone - block = 0, count = 4096
[   38.651659][ T3869] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.114: Invalid inode bitmap blk 0 in block_group 0
[   38.665682][   T64] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:5: Failed to release dquot type 0
[   38.677882][ T3868]  loop2: p1 p2 p4 < >
[   38.682211][ T3869] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[   38.692731][ T3868] loop2: p1 size 8275718 extends beyond EOD, truncated
[   38.700331][ T3869] EXT4-fs (loop0): 1 orphan inode deleted
[   38.707930][ T3868] loop2: p2 start 87291392 is beyond EOD, truncated
[   38.715017][ T3869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.294033][ T3892] team0: Device ipvlan2 is already an upper device of the team interface
[   39.308459][ T3869] syz.0.114 (3869) used greatest stack depth: 9856 bytes left
[   39.308712][ T3889] loop1: detected capacity change from 0 to 256
[   39.328215][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.405385][ T3903] 9pnet_fd: Insufficient options for proto=fd
[   39.578120][ T3265] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   39.585757][ T3265] FAT-fs (loop1): Filesystem has been set read-only
[   39.593986][ T3265] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   39.671775][ T3925] syzkaller1: entered promiscuous mode
[   39.677310][ T3925] syzkaller1: entered allmulticast mode
[   39.781705][ T3930] loop0: detected capacity change from 0 to 2048
[   39.797969][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.817970][ T3930] ieee802154 phy0 wpan0: encryption failed: -90
[   39.927703][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.025927][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   40.025941][   T29] audit: type=1400 audit(1723485383.564:347): avc:  denied  { mounton } for  pid=3947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   40.060762][   T29] audit: type=1400 audit(1723485383.614:348): avc:  denied  { connect } for  pid=3942 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.084489][   T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.112759][   T29] audit: type=1400 audit(1723485383.654:349): avc:  denied  { write } for  pid=3942 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.158207][   T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.172559][ T3958] mmap: syz.3.135 (3958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.187907][   T29] audit: type=1400 audit(1723485383.734:350): avc:  denied  { create } for  pid=3940 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.207384][   T29] audit: type=1400 audit(1723485383.734:351): avc:  denied  { bind } for  pid=3940 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.226616][   T29] audit: type=1400 audit(1723485383.734:352): avc:  denied  { listen } for  pid=3940 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.251766][   T29] audit: type=1400 audit(1723485383.794:353): avc:  denied  { ioctl } for  pid=3942 comm="syz.0.134" path="socket:[5637]" dev="sockfs" ino=5637 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.376033][   T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.429287][   T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.446963][   T29] audit: type=1326 audit(1723485383.994:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.2.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dc8a099f9 code=0x0
[   40.507159][ T3974] loop2: detected capacity change from 0 to 2048
[   40.563290][   T64] bridge_slave_1: left allmulticast mode
[   40.569035][   T64] bridge_slave_1: left promiscuous mode
[   40.574686][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.591099][   T29] audit: type=1400 audit(1723485384.134:355): avc:  denied  { search } for  pid=2999 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   40.612443][   T29] audit: type=1400 audit(1723485384.134:356): avc:  denied  { read } for  pid=2999 comm="dhcpcd" name="n25" dev="tmpfs" ino=1379 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   40.639767][   T64] bridge_slave_0: left allmulticast mode
[   40.640448][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.645417][   T64] bridge_slave_0: left promiscuous mode
[   40.645567][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.673757][ T3974] EXT4-fs (loop2): shut down requested (0)
[   40.757467][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.767526][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.777331][   T64] bond0 (unregistering): Released all slaves
[   40.806860][ T3947] chnl_net:caif_netlink_parms(): no params data found
[   40.841528][ T3989] FAULT_INJECTION: forcing a failure.
[   40.841528][ T3989] name failslab, interval 1, probability 0, space 0, times 1
[   40.854215][ T3989] CPU: 1 UID: 0 PID: 3989 Comm: syz.3.142 Not tainted 6.11.0-rc3-syzkaller #0
[   40.863121][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   40.873193][ T3989] Call Trace:
[   40.876538][ T3989]  <TASK>
[   40.879466][ T3989]  dump_stack_lvl+0xf2/0x150
[   40.884160][ T3989]  dump_stack+0x15/0x20
[   40.888342][ T3989]  should_fail_ex+0x229/0x230
[   40.893126][ T3989]  ? copy_mm+0xe0/0x10e0
[   40.897418][ T3989]  should_failslab+0x8f/0xb0
[   40.902026][ T3989]  kmem_cache_alloc_noprof+0x4c/0x290
[   40.907564][ T3989]  copy_mm+0xe0/0x10e0
[   40.911642][ T3989]  ? kmem_cache_alloc_noprof+0x1a6/0x290
[   40.917387][ T3989]  ? hrtimer_init+0x104/0x1f0
[   40.922078][ T3989]  ? __init_rwsem+0x5d/0x70
[   40.926592][ T3989]  ? copy_signal+0x339/0x370
[   40.931196][ T3989]  copy_process+0xee1/0x1f90
[   40.935796][ T3989]  kernel_clone+0x167/0x5e0
[   40.940345][ T3989]  ? vfs_write+0x5a5/0x900
[   40.944773][ T3989]  __x64_sys_clone+0xe8/0x120
[   40.949461][ T3989]  x64_sys_call+0x2d23/0x2d60
[   40.954137][ T3989]  do_syscall_64+0xc9/0x1c0
[   40.958727][ T3989]  ? clear_bhb_loop+0x55/0xb0
[   40.963412][ T3989]  ? clear_bhb_loop+0x55/0xb0
[   40.968174][ T3989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.974084][ T3989] RIP: 0033:0x7f2a05a499f9
[   40.978493][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.998143][ T3989] RSP: 002b:00007f2a046c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   41.006563][ T3989] RAX: ffffffffffffffda RBX: 00007f2a05be5f80 RCX: 00007f2a05a499f9
[   41.014596][ T3989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   41.022568][ T3989] RBP: 00007f2a046c7090 R08: 0000000000000000 R09: 0000000000000000
[   41.030565][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.038538][ T3989] R13: 0000000000000000 R14: 00007f2a05be5f80 R15: 00007ffc43b51788
[   41.046522][ T3989]  </TASK>
[   41.103814][ T3947] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.111032][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.120109][ T3947] bridge_slave_0: entered allmulticast mode
[   41.127004][ T3947] bridge_slave_0: entered promiscuous mode
[   41.136264][   T64] hsr_slave_0: left promiscuous mode
[   41.143123][   T64] hsr_slave_1: left promiscuous mode
[   41.153268][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.160695][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.168402][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.175932][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.186617][   T64] veth1_macvtap: left promiscuous mode
[   41.192144][   T64] veth0_macvtap: left promiscuous mode
[   41.197716][   T64] veth1_vlan: left promiscuous mode
[   41.202929][   T64] veth0_vlan: left promiscuous mode
[   41.269883][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.331952][   T64] team0 (unregistering): Port device team_slave_1 removed
[   41.343703][   T64] team0 (unregistering): Port device team_slave_0 removed
[   41.358187][ T4028] loop2: detected capacity change from 0 to 1024
[   41.379562][ T4028] EXT4-fs (loop2): Can't support bigalloc feature without extents feature
[   41.379562][ T4028] 
[   41.390331][ T4028] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   41.410282][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.417365][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.424681][ T3947] bridge_slave_1: entered allmulticast mode
[   41.431019][ T3947] bridge_slave_1: entered promiscuous mode
[   41.438795][ T4033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'.
[   41.494545][ T3947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.506292][ T3947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.536026][ T3947] team0: Port device team_slave_0 added
[   41.546201][ T3947] team0: Port device team_slave_1 added
[   41.552664][ T3970] chnl_net:caif_netlink_parms(): no params data found
[   41.654106][ T3947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.661100][ T3947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.686992][ T3947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.738961][ T4054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.146'.
[   41.748147][ T3947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.755150][ T3947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.781127][ T3947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.792004][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.799082][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.806981][ T3970] bridge_slave_0: entered allmulticast mode
[   41.813658][ T3970] bridge_slave_0: entered promiscuous mode
[   41.820583][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.827643][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.834819][ T3970] bridge_slave_1: entered allmulticast mode
[   41.841285][ T3970] bridge_slave_1: entered promiscuous mode
[   41.881430][ T3970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.916600][ T3947] hsr_slave_0: entered promiscuous mode
[   41.922680][ T3947] hsr_slave_1: entered promiscuous mode
[   41.935860][ T3970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.990551][ T3970] team0: Port device team_slave_0 added
[   42.010675][ T3970] team0: Port device team_slave_1 added
[   42.086118][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.093069][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.119062][ T3970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.171082][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.178063][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.204154][ T3970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.277146][ T3970] hsr_slave_0: entered promiscuous mode
[   42.291590][ T3970] hsr_slave_1: entered promiscuous mode
[   42.306015][ T3970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.323799][ T3970] Cannot create hsr debugfs directory
[   42.396144][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'.
[   42.405006][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'.
[   42.426636][ T4085] geneve2: entered promiscuous mode
[   42.431863][ T4085] geneve2: entered allmulticast mode
[   42.547131][   T24] IPVS: starting estimator thread 0...
[   42.571997][ T3970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.594517][ T3947] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   42.603558][ T3947] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   42.612665][ T3947] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   42.621726][ T3947] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   42.634419][ T4104] IPVS: using max 2928 ests per chain, 146400 per kthread
[   42.655293][ T3970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.713123][ T3970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.733084][ T3947] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.754816][ T3947] 8021q: adding VLAN 0 to HW filter on device team0
[   42.764671][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.771802][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.800918][ T3970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.813389][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.820480][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.859438][ T4128] FAULT_INJECTION: forcing a failure.
[   42.859438][ T4128] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   42.872803][ T4128] CPU: 0 UID: 0 PID: 4128 Comm: syz.0.153 Not tainted 6.11.0-rc3-syzkaller #0
[   42.881706][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   42.891755][ T4128] Call Trace:
[   42.895112][ T4128]  <TASK>
[   42.898047][ T4128]  dump_stack_lvl+0xf2/0x150
[   42.899594][ T3970] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   42.902659][ T4128]  dump_stack+0x15/0x20
[   42.913479][ T4128]  should_fail_ex+0x229/0x230
[   42.918163][ T4128]  should_fail_alloc_page+0xfd/0x110
[   42.923448][ T4128]  __alloc_pages_noprof+0x109/0x360
[   42.928648][ T4128]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   42.934067][ T4128]  alloc_pages_noprof+0xe1/0x100
[   42.939001][ T4128]  get_free_pages_noprof+0xc/0x30
[   42.944048][ T4128]  pgd_alloc+0x22/0x170
[   42.948191][ T4128]  mm_init+0x372/0x730
[   42.952278][ T4128]  ? kmem_cache_alloc_noprof+0x1a6/0x290
[   42.957974][ T4128]  copy_mm+0x11e/0x10e0
[   42.962157][ T4128]  ? kmem_cache_alloc_noprof+0x1a6/0x290
[   42.967779][ T4128]  ? hrtimer_init+0x104/0x1f0
[   42.972518][ T4128]  ? __init_rwsem+0x5d/0x70
[   42.977012][ T4128]  ? copy_signal+0x339/0x370
[   42.981649][ T4128]  copy_process+0xee1/0x1f90
[   42.986232][ T4128]  kernel_clone+0x167/0x5e0
[   42.990738][ T4128]  ? vfs_write+0x5a5/0x900
[   42.995153][ T4128]  __x64_sys_clone+0xe8/0x120
[   42.999891][ T4128]  x64_sys_call+0x2d23/0x2d60
[   43.004590][ T4128]  do_syscall_64+0xc9/0x1c0
[   43.009157][ T4128]  ? clear_bhb_loop+0x55/0xb0
[   43.013923][ T4128]  ? clear_bhb_loop+0x55/0xb0
[   43.018601][ T4128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.024540][ T4128] RIP: 0033:0x7f5a95e799f9
[   43.028947][ T4128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.048857][ T4128] RSP: 002b:00007f5a94af0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   43.057262][ T4128] RAX: ffffffffffffffda RBX: 00007f5a96015f80 RCX: 00007f5a95e799f9
[   43.065239][ T4128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   43.073243][ T4128] RBP: 00007f5a94af1090 R08: 0000000000000000 R09: 0000000000000000
[   43.081287][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.089262][ T4128] R13: 0000000000000000 R14: 00007f5a96015f80 R15: 00007ffea53377a8
[   43.097329][ T4128]  </TASK>
[   43.110441][ T3970] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   43.127636][ T3947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.135290][ T3970] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   43.150990][ T3970] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   43.270853][ T3970] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.306400][ T3970] 8021q: adding VLAN 0 to HW filter on device team0
[   43.339902][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.346993][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.381312][ T3947] veth0_vlan: entered promiscuous mode
[   43.413349][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.420501][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.460167][ T3947] veth1_vlan: entered promiscuous mode
[   43.516875][ T3970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.552008][ T4183] loop3: detected capacity change from 0 to 2048
[   43.592387][ T3947] veth0_macvtap: entered promiscuous mode
[   43.625198][ T3947] veth1_macvtap: entered promiscuous mode
[   43.662858][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.673335][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.683184][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.693731][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.703557][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.713996][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.723833][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.734330][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.759440][ T3947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.768154][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.778638][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.788477][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.800126][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.810457][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.820886][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.830713][ T3947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.841189][ T3947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.853639][ T3947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.893488][ T3970] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.933723][ T3947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.942532][ T3947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.951278][ T3947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.960001][ T3947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.017806][ T4213] bridge0: port 3(vlan2) entered blocking state
[   44.024130][ T4213] bridge0: port 3(vlan2) entered disabled state
[   44.032054][ T4213] vlan2: entered allmulticast mode
[   44.037262][ T4213] geneve0: entered allmulticast mode
[   44.052638][ T4213] vlan2: entered promiscuous mode
[   44.057844][ T4213] geneve0: entered promiscuous mode
[   44.065971][ T4213] bridge0: port 3(vlan2) entered blocking state
[   44.072305][ T4213] bridge0: port 3(vlan2) entered forwarding state
[   44.119970][   T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.159101][ T4253] netlink: 'syz.0.167': attribute type 10 has an invalid length.
[   44.167266][ T4255] FAULT_INJECTION: forcing a failure.
[   44.167266][ T4255] name failslab, interval 1, probability 0, space 0, times 0
[   44.179964][ T4255] CPU: 0 UID: 0 PID: 4255 Comm: syz.1.166 Not tainted 6.11.0-rc3-syzkaller #0
[   44.188803][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   44.198989][ T4255] Call Trace:
[   44.202264][ T4255]  <TASK>
[   44.205235][ T4255]  dump_stack_lvl+0xf2/0x150
[   44.209848][ T4255]  dump_stack+0x15/0x20
[   44.213998][ T4255]  should_fail_ex+0x229/0x230
[   44.218717][ T4255]  ? copy_signal+0x54/0x370
[   44.223219][ T4255]  should_failslab+0x8f/0xb0
[   44.227894][ T4255]  kmem_cache_alloc_noprof+0x4c/0x290
[   44.233295][ T4255]  ? kmem_cache_alloc_noprof+0x1a6/0x290
[   44.239089][ T4255]  copy_signal+0x54/0x370
[   44.243415][ T4255]  copy_process+0xeba/0x1f90
[   44.248011][ T4255]  kernel_clone+0x167/0x5e0
[   44.252516][ T4255]  ? vfs_write+0x5a5/0x900
[   44.256940][ T4255]  __x64_sys_clone+0xe8/0x120
[   44.261614][ T4255]  x64_sys_call+0x2d23/0x2d60
[   44.266297][ T4255]  do_syscall_64+0xc9/0x1c0
[   44.270847][ T4255]  ? clear_bhb_loop+0x55/0xb0
[   44.275557][ T4255]  ? clear_bhb_loop+0x55/0xb0
[   44.280277][ T4255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.286202][ T4255] RIP: 0033:0x7fcc666499f9
[   44.290615][ T4255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.310548][ T4255] RSP: 002b:00007fcc652c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   44.318959][ T4255] RAX: ffffffffffffffda RBX: 00007fcc667e5f80 RCX: 00007fcc666499f9
[   44.326953][ T4255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   44.334912][ T4255] RBP: 00007fcc652c1090 R08: 0000000000000000 R09: 0000000000000000
[   44.342872][ T4255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.350829][ T4255] R13: 0000000000000000 R14: 00007fcc667e5f80 R15: 00007ffdba10f948
[   44.358804][ T4255]  </TASK>
[   44.366665][ T4253] batman_adv: batadv0: Adding interface: team0
[   44.372972][ T4253] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.398245][ T4253] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   44.432068][ T4260] netlink: 'syz.0.167': attribute type 10 has an invalid length.
[   44.440012][ T4260] netlink: 2 bytes leftover after parsing attributes in process `syz.0.167'.
[   44.454411][ T4260] team0: entered promiscuous mode
[   44.459497][ T4260] team_slave_0: entered promiscuous mode
[   44.465265][ T4260] team_slave_1: entered promiscuous mode
[   44.482456][ T4260] 8021q: adding VLAN 0 to HW filter on device team0
[   44.494723][ T4260] batman_adv: batadv0: Interface activated: team0
[   44.501182][ T4260] batman_adv: batadv0: Interface deactivated: team0
[   44.507887][ T4260] batman_adv: batadv0: Removing interface: team0
[   44.544828][ T4260] bridge0: port 4(team0) entered blocking state
[   44.551131][ T4260] bridge0: port 4(team0) entered disabled state
[   44.557608][ T4260] team0: entered allmulticast mode
[   44.562751][ T4260] team_slave_0: entered allmulticast mode
[   44.568488][ T4260] team_slave_1: entered allmulticast mode
[   44.575664][ T4260] bridge0: port 4(team0) entered blocking state
[   44.582015][ T4260] bridge0: port 4(team0) entered forwarding state
[   44.601518][   T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.649355][   T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.670580][ T3970] veth0_vlan: entered promiscuous mode
[   44.690208][ T3970] veth1_vlan: entered promiscuous mode
[   44.699643][   T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.722406][ T3970] veth0_macvtap: entered promiscuous mode
[   44.730035][ T3970] veth1_macvtap: entered promiscuous mode
[   44.741341][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.751923][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.761745][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.772158][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.781976][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.792402][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.802233][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.812794][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.822676][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.833106][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.844998][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.862856][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.873378][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.883192][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.893624][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.903528][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.913992][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.923837][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.934438][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.944285][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.954847][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.966366][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.983494][ T3970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.992328][ T3970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.001103][ T3970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.009867][ T3970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.066126][   T64] bridge_slave_1: left allmulticast mode
[   45.071912][   T64] bridge_slave_1: left promiscuous mode
[   45.077963][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.086591][   T64] bridge_slave_0: left allmulticast mode
[   45.092324][   T64] bridge_slave_0: left promiscuous mode
[   45.098087][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.187463][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.197728][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.207614][   T64] bond0 (unregistering): Released all slaves
[   45.216212][   T64] bond1 (unregistering): Released all slaves
[   45.286793][ T4302] loop4: detected capacity change from 0 to 128
[   45.303699][ T4302] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.306141][ T4267] chnl_net:caif_netlink_parms(): no params data found
[   45.317350][ T4302] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.363694][   T29] kauditd_printk_skb: 26 callbacks suppressed
[   45.363706][   T29] audit: type=1400 audit(1723485388.904:383): avc:  denied  { create } for  pid=4301 comm="syz.4.139" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.415490][ T3970] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.435829][   T29] audit: type=1400 audit(1723485388.924:384): avc:  denied  { write open } for  pid=4301 comm="syz.4.139" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.532365][   T64] hsr_slave_0: left promiscuous mode
[   45.538429][   T64] hsr_slave_1: left promiscuous mode
[   45.544387][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.551830][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.572001][ T4329] loop2: detected capacity change from 0 to 1024
[   45.579013][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.586458][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.602861][ T4329] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   45.613823][ T4329] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   45.625171][   T64] veth1_macvtap: left promiscuous mode
[   45.630689][   T64] veth0_macvtap: left promiscuous mode
[   45.636027][ T4329] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   45.636233][   T64] veth1_vlan: left promiscuous mode
[   45.646255][ T4329] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   45.651460][   T64] veth0_vlan: left promiscuous mode
[   45.660052][ T4329] EXT4-fs (loop2): filesystem has both journal inode and journal device!
[   45.674703][ T4333] loop0: detected capacity change from 0 to 1024
[   45.687897][ T4333] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.701025][ T4333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.737897][ T4336] loop4: detected capacity change from 0 to 512
[   45.746393][ T4333] EXT4-fs (loop0): stripe (10) is not aligned with cluster size (16), stripe is disabled
[   45.756266][ T4333] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   45.869601][   T64] team0 (unregistering): Port device team_slave_1 removed
[   45.878962][   T29] audit: type=1400 audit(1723485389.424:385): avc:  denied  { getopt } for  pid=4332 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   45.899633][   T64] team0 (unregistering): Port device team_slave_0 removed
[   45.950516][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   45.959438][ T4343] netlink: 'syz.1.181': attribute type 14 has an invalid length.
[   45.967383][ T4343] netlink: 'syz.1.181': attribute type 11 has an invalid length.
[   45.977200][   T29] audit: type=1400 audit(1723485389.524:386): avc:  denied  { mounton } for  pid=4347 comm="syz.4.182" path="/proc/14/task" dev="proc" ino=6582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   45.980297][ T4343] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.002144][ T4350] No such timeout policy "syz0"
[   46.008238][ T4343] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.021778][ T4343] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.030676][ T4343] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.039716][ T4343] vxlan0: entered promiscuous mode
[   46.050919][ T4344] netlink: 'syz.2.176': attribute type 10 has an invalid length.
[   46.061718][ T4354] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   46.070694][   T29] audit: type=1326 audit(1723485389.624:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.4.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc7fc99f9 code=0x0
[   46.095809][   T29] audit: type=1400 audit(1723485389.624:388): avc:  denied  { bind } for  pid=4355 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   46.105174][ T4344] team0: Failed to send options change via netlink (err -105)
[   46.123044][ T4344] team0: Port device netdevsim1 added
[   46.136014][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.143099][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.150665][ T4267] bridge_slave_0: entered allmulticast mode
[   46.159927][ T4267] bridge_slave_0: entered promiscuous mode
[   46.170056][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.177128][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.177852][ T4356] loop1: detected capacity change from 0 to 512
[   46.185537][ T4267] bridge_slave_1: entered allmulticast mode
[   46.200954][ T4267] bridge_slave_1: entered promiscuous mode
[   46.216311][ T4356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.239161][ T4356] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.302405][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.336778][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.366450][ T4267] team0: Port device team_slave_0 added
[   46.373132][ T4267] team0: Port device team_slave_1 added
[   46.390078][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.397144][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.423059][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.435267][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.442232][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.468129][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.500918][ T4267] hsr_slave_0: entered promiscuous mode
[   46.508066][ T4267] hsr_slave_1: entered promiscuous mode
[   46.514267][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.522444][ T4267] Cannot create hsr debugfs directory
[   46.545058][ T4384] loop0: detected capacity change from 0 to 128
[   46.556731][   T64] IPVS: stop unused estimator thread 0...
[   46.882519][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   46.892027][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   46.905718][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   46.934651][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   46.997568][ T3947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.017015][   T29] audit: type=1400 audit(1723485390.564:389): avc:  denied  { create } for  pid=4439 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   47.028711][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.121910][ T4457] loop2: detected capacity change from 0 to 2048
[   47.127680][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   47.140861][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.147961][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.174302][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.184798][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.197947][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.231922][   T29] audit: type=1400 audit(1723485390.764:390): avc:  denied  { read append } for  pid=4456 comm="syz.2.190" path="/50/file0/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.256198][   T29] audit: type=1400 audit(1723485390.764:391): avc:  denied  { map } for  pid=4456 comm="syz.2.190" path="/50/file0/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.279627][   T29] audit: type=1400 audit(1723485390.764:392): avc:  denied  { execute } for  pid=4456 comm="syz.2.190" path="/50/file0/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.303180][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.310365][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.327689][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.359000][ T4494] loop4: detected capacity change from 0 to 128
[   47.402865][ T4498] delete_channel: no stack
[   47.423201][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.446008][ T4498] Process accounting resumed
[   47.473013][ T4267] veth0_vlan: entered promiscuous mode
[   47.490729][ T4267] veth1_vlan: entered promiscuous mode
[   47.497668][ T4498] Process accounting resumed
[   47.512394][ T4512] loop4: detected capacity change from 0 to 128
[   47.520403][ T4267] veth0_macvtap: entered promiscuous mode
[   47.536259][ T4267] veth1_macvtap: entered promiscuous mode
[   47.548599][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.559251][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.569314][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.579851][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.589673][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.600087][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.609904][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.620385][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.630346][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.640893][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.647421][ T4523] FAULT_INJECTION: forcing a failure.
[   47.647421][ T4523] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   47.652039][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.663741][ T4523] CPU: 0 UID: 0 PID: 4523 Comm: syz.4.200 Not tainted 6.11.0-rc3-syzkaller #0
[   47.672594][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.679668][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   47.679681][ T4523] Call Trace:
[   47.679687][ T4523]  <TASK>
[   47.679693][ T4523]  dump_stack_lvl+0xf2/0x150
[   47.690107][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.700106][ T4523]  dump_stack+0x15/0x20
[   47.703376][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.706297][ T4523]  should_fail_ex+0x229/0x230
[   47.710869][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.710879][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.720635][ T4523]  should_fail+0xb/0x10
[   47.720662][ T4523]  should_fail_usercopy+0x1a/0x20
[   47.724808][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.735170][ T4523]  _copy_to_user+0x1e/0xa0
[   47.735197][ T4523]  simple_read_from_buffer+0xa0/0x110
[   47.739858][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.749638][ T4523]  proc_fail_nth_read+0xfc/0x140
[   47.749663][ T4523]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.760070][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.760117][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.764235][ T4523]  vfs_read+0x1a2/0x6e0
[   47.769240][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.770571][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.779011][ T4523]  ? __rcu_read_unlock+0x4e/0x70
[   47.779111][ T4523]  ? __fget_files+0x1da/0x210
[   47.791418][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.799242][ T4523]  ksys_read+0xeb/0x1b0
[   47.799276][ T4523]  __x64_sys_read+0x42/0x50
[   47.799301][ T4523]  x64_sys_call+0x27d3/0x2d60
[   47.799323][ T4523]  do_syscall_64+0xc9/0x1c0
[   47.804352][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.809935][ T4523]  ? clear_bhb_loop+0x55/0xb0
[   47.819729][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.830114][ T4523]  ? clear_bhb_loop+0x55/0xb0
[   47.834262][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.844020][ T4523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.928626][ T4523] RIP: 0033:0x7fddc7fc843c
[   47.933021][ T4523] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[   47.952623][ T4523] RSP: 002b:00007fddc6c47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.961045][ T4523] RAX: ffffffffffffffda RBX: 00007fddc8165f80 RCX: 00007fddc7fc843c
[   47.969068][ T4523] RDX: 000000000000000f RSI: 00007fddc6c470a0 RDI: 0000000000000004
[   47.977020][ T4523] RBP: 00007fddc6c47090 R08: 0000000000000000 R09: 0000000000000000
[   47.984979][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.992937][ T4523] R13: 0000000000000000 R14: 00007fddc8165f80 R15: 00007ffc48abd2e8
[   48.000899][ T4523]  </TASK>
[   48.041607][ T4530] loop0: detected capacity change from 0 to 1024
[   48.082460][ T4530] syz.0.201: attempt to access beyond end of device
[   48.082460][ T4530] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[   48.116263][ T4534] loop3: detected capacity change from 0 to 128
[   48.123391][ T4534] vfat: Unknown parameter ''
[   48.130616][ T4530] EXT4-fs (loop0): unable to read superblock
[   48.143015][ T4538] gretap0: entered promiscuous mode
[   48.154733][ T4538] macsec1: entered promiscuous mode
[   48.160015][ T4538] macsec1: entered allmulticast mode
[   48.165446][ T4538] gretap0: entered allmulticast mode
[   48.184297][ T4538] gretap0: left allmulticast mode
[   48.189690][ T4538] gretap0: left promiscuous mode
[   48.263522][ T4550] loop1: detected capacity change from 0 to 256
[   48.289809][ T4552] loop4: detected capacity change from 0 to 512
[   48.305686][ T4552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.318767][ T4552] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.353680][ T4557] loop0: detected capacity change from 0 to 1024
[   48.360576][ T4557] EXT4-fs: Ignoring removed orlov option
[   48.366274][ T4557] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.385746][ T4557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.409388][ T4552] SELinux:  Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped).
[   48.426364][ T3970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.536952][ T4563] loop4: detected capacity change from 0 to 512
[   48.543340][ T4563] journal_path: Lookup failure for './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[   48.564533][ T4563] EXT4-fs: error: could not find journal device path
[   48.610269][ T4568] loop4: detected capacity change from 0 to 512
[   48.617406][ T4568] EXT4-fs: Mount option(s) incompatible with ext2
[   48.711078][ T4571] loop2: detected capacity change from 0 to 1024
[   48.718079][ T4571] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.727604][ T4571] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   48.738509][ T4571] EXT4-fs (loop2): group descriptors corrupted!
[   48.749239][ T4571] netlink: 96 bytes leftover after parsing attributes in process `syz.2.209'.
[   48.998175][ T4593] loop1: detected capacity change from 0 to 512
[   49.025726][ T4593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.082422][ T4593] EXT4-fs (loop1): 1 truncate cleaned up
[   49.088601][ T4593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.102659][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.265932][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.291926][ T4616] syzkaller0: entered allmulticast mode
[   49.313116][ T4616] syzkaller0 (unregistering): left allmulticast mode
[   49.469976][ T4626] futex_wake_op: syz.2.225 tries to shift op by 144; fix this program
[   49.492939][ T4625] loop4: detected capacity change from 0 to 2048
[   49.504630][ T3947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.535334][ T4625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.582593][ T4635] loop2: detected capacity change from 0 to 128
[   49.594455][ T4625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   49.649823][ T4625] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28
[   49.662117][ T4625] EXT4-fs (loop4): This should not happen!! Data will be lost
[   49.662117][ T4625] 
[   49.671926][ T4625] EXT4-fs (loop4): Total free blocks count 0
[   49.677925][ T4625] EXT4-fs (loop4): Free/Dirty block details
[   49.683869][ T4625] EXT4-fs (loop4): free_blocks=2415919104
[   49.689619][ T4625] EXT4-fs (loop4): dirty_blocks=16
[   49.694793][ T4625] EXT4-fs (loop4): Block reservation details
[   49.700774][ T4625] EXT4-fs (loop4): i_reserved_data_blocks=1
[   49.715238][ T4642] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32)
[   49.787449][ T3599] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   49.837202][ T4646] loop2: detected capacity change from 0 to 512
[   49.837851][ T4650] loop4: detected capacity change from 0 to 512
[   49.862798][ T4646] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[   49.874505][ T4646] System zones: 0-2, 18-18, 34-35
[   49.886029][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   49.900299][ T4650] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.914712][ T4646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.930637][ T4646] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.963865][ T3970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   50.067314][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.219583][ T4695] loop4: detected capacity change from 0 to 1764
[   50.235328][ T4695] iso9660: Unknown parameter ' žð-ùËòöè€Ó8/'
[   50.283634][ T4698] ebt_among: dst integrity fail: 10c
[   50.317703][ T4700] loop4: detected capacity change from 0 to 2048
[   50.331516][ T4702] loop2: detected capacity change from 0 to 512
[   50.357543][ T4702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.381371][ T4700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.397035][ T4707] loop0: detected capacity change from 0 to 256
[   50.406837][ T4702] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.418546][ T4707] vfat: Unknown parameter 'uni_xlarset'
[   50.427443][ T4700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   50.451368][   T29] kauditd_printk_skb: 244 callbacks suppressed
[   50.451379][   T29] audit: type=1400 audit(1723485393.994:637): avc:  denied  { write } for  pid=4701 comm="syz.2.244" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   50.480201][   T29] audit: type=1400 audit(1723485393.994:638): avc:  denied  { lock } for  pid=4701 comm="syz.2.244" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   50.504428][ T4700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[   50.505163][   T29] audit: type=1400 audit(1723485394.054:639): avc:  denied  { remount } for  pid=4699 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   50.516990][ T4700] EXT4-fs (loop4): This should not happen!! Data will be lost
[   50.516990][ T4700] 
[   50.540530][ T4702] netlink: 'syz.2.244': attribute type 4 has an invalid length.
[   50.545909][ T4700] EXT4-fs (loop4): Total free blocks count 0
[   50.555839][ T4702] netlink: 'syz.2.244': attribute type 4 has an invalid length.
[   50.559743][ T4700] EXT4-fs (loop4): Free/Dirty block details
[   50.573347][ T4700] EXT4-fs (loop4): free_blocks=2415919104
[   50.579097][ T4700] EXT4-fs (loop4): dirty_blocks=32
[   50.584254][ T4700] EXT4-fs (loop4): Block reservation details
[   50.590319][ T4700] EXT4-fs (loop4): i_reserved_data_blocks=2
[   50.597229][ T4708] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   50.610064][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.641144][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'.
[   50.700424][ T4712] loop2: detected capacity change from 0 to 512
[   50.706761][   T29] audit: type=1400 audit(1723485394.244:640): avc:  denied  { module_load } for  pid=4713 comm="syz.1.247" path=2F6D656D66643A2CEA202864656C6574656429 dev="hugetlbfs" ino=8401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1
[   50.707522][ T4715] loop4: detected capacity change from 0 to 512
[   50.756341][ T4716] loop1: detected capacity change from 0 to 512
[   50.773148][ T4715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.796177][ T4716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.809969][ T4715] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.821787][ T4714] Invalid ELF header magic: != ELF
[   50.821822][ T4716] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.856524][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.901533][ T4727] loop2: detected capacity change from 0 to 512
[   50.935738][ T4727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.950174][ T4727] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.987865][ T4727] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 3: comm syz.2.249: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1
[   51.007022][ T3970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.007813][ T4727] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 3: comm syz.2.249: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1
[   51.054487][   T29] audit: type=1400 audit(1723485394.594:641): avc:  denied  { listen } for  pid=4726 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.088773][ T4738] loop0: detected capacity change from 0 to 2048
[   51.104850][ T4736] bond1: entered promiscuous mode
[   51.108387][ T4738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.109896][ T4736] bond1: entered allmulticast mode
[   51.110332][ T4736] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.135614][ T4727] syz.2.249 (4727) used greatest stack depth: 9544 bytes left
[   51.149770][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.150050][ T4736] bond1 (unregistering): Released all slaves
[   51.161947][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.227526][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.242269][ T4745] loop1: detected capacity change from 0 to 8192
[   51.250876][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.251971][ T4753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'.
[   51.270250][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.274335][ T4753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'.
[   51.288502][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.304641][ T4745]  loop1: p2 p4
[   51.308185][ T4745] loop1: p2 start 452985600 is beyond EOD, truncated
[   51.314941][ T4745] loop1: p4 size 983168 extends beyond EOD, truncated
[   51.480652][ T4766] loop4: detected capacity change from 0 to 512
[   51.487276][ T4766] EXT4-fs: Ignoring removed orlov option
[   51.494181][ T4766] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   51.505721][ T4766] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[   51.515885][ T4766] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.261: Corrupt directory, running e2fsck is recommended
[   51.539342][ T4766] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   51.547476][ T4766] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.261: corrupted in-inode xattr: overlapping e_value 
[   51.561458][ T4766] EXT4-fs (loop4): Remounting filesystem read-only
[   51.568341][ T4766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.580828][ T4766] SELinux: (dev loop4, type ext4) getxattr errno 5
[   51.587834][ T4766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.614774][   T29] audit: type=1400 audit(1723485395.164:642): avc:  denied  { watch } for  pid=4765 comm="syz.4.261" path="/proc/93" dev="proc" ino=8483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   51.639193][   T29] audit: type=1400 audit(1723485395.164:643): avc:  denied  { watch_reads } for  pid=4765 comm="syz.4.261" path="/proc/93" dev="proc" ino=8483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   53.395755][ T4777] loop4: detected capacity change from 0 to 2048
[   53.405674][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.417876][ T4777] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.429493][   T29] audit: type=1400 audit(1723485396.984:644): avc:  denied  { ioctl } for  pid=4776 comm="syz.4.265" path="/33/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.478509][ T3970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.499803][ T4784] loop4: detected capacity change from 0 to 2048
[   53.515632][ T4784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.535856][ T3970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.585630][   T29] audit: type=1400 audit(1723485397.134:645): avc:  denied  { lock } for  pid=4791 comm="syz.4.269" path="socket:[9435]" dev="sockfs" ino=9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   53.608702][   T29] audit: type=1400 audit(1723485397.134:646): avc:  denied  { mount } for  pid=4791 comm="syz.4.269" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   53.639996][ T3601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.687374][ T3601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.739292][ T3601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.797416][ T3601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.871768][ T3601] bridge_slave_1: left allmulticast mode
[   53.877589][ T3601] bridge_slave_1: left promiscuous mode
[   53.883279][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.891085][ T3601] bridge_slave_0: left allmulticast mode
[   53.896758][ T3601] bridge_slave_0: left promiscuous mode
[   53.902379][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.968023][ T3601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.978135][ T3601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.987809][ T3601] bond0 (unregistering): Released all slaves
[   54.015361][ T4795] chnl_net:caif_netlink_parms(): no params data found
[   54.046612][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.053701][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.060893][ T4795] bridge_slave_0: entered allmulticast mode
[   54.067174][ T4795] bridge_slave_0: entered promiscuous mode
[   54.073956][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.081009][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.088089][ T4795] bridge_slave_1: entered allmulticast mode
[   54.094554][ T4795] bridge_slave_1: entered promiscuous mode
[   54.110478][ T3601] hsr_slave_0: left promiscuous mode
[   54.116238][ T3601] hsr_slave_1: left promiscuous mode
[   54.122005][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.129501][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.137413][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.144918][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.153714][ T3601] veth1_macvtap: left promiscuous mode
[   54.159237][ T3601] veth0_macvtap: left promiscuous mode
[   54.164737][ T3601] veth1_vlan: left promiscuous mode
[   54.169945][ T3601] veth0_vlan: left promiscuous mode
[   54.242215][ T3601] team0 (unregistering): Port device team_slave_1 removed
[   54.252253][ T3601] team0 (unregistering): Port device team_slave_0 removed
[   54.285645][ T4795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.296157][ T4795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.317350][ T4795] team0: Port device team_slave_0 added
[   54.323894][ T4795] team0: Port device team_slave_1 added
[   54.340626][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.347602][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.373615][ T4795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.386649][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.393580][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.419533][ T4795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.472121][ T4795] hsr_slave_0: entered promiscuous mode
[   54.483737][ T4795] hsr_slave_1: entered promiscuous mode
[   54.490629][ T4795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.498876][ T4795] Cannot create hsr debugfs directory
[   54.707256][ T4836] loop2: detected capacity change from 0 to 2048
[   54.716580][ T4833] syzkaller0: entered promiscuous mode
[   54.722034][ T4833] syzkaller0: entered allmulticast mode
[   54.730071][ T4836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.752658][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.837672][ T4841] loop2: detected capacity change from 0 to 4096
[   54.845874][ T4841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.887777][ T4795] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.895683][ T4849] loop1: detected capacity change from 0 to 512
[   54.902479][ T4849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   54.904139][ T4795] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.915884][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.929058][ T4795] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.937408][ T4849] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   54.940565][ T4853] FAULT_INJECTION: forcing a failure.
[   54.940565][ T4853] name failslab, interval 1, probability 0, space 0, times 0
[   54.955673][ T4849] EXT4-fs (loop1): get root inode failed
[   54.967733][ T4853] CPU: 0 UID: 0 PID: 4853 Comm: syz.2.281 Not tainted 6.11.0-rc3-syzkaller #0
[   54.973326][ T4849] EXT4-fs (loop1): mount failed
[   54.982139][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   54.982153][ T4853] Call Trace:
[   54.982159][ T4853]  <TASK>
[   54.982165][ T4853]  dump_stack_lvl+0xf2/0x150
[   55.007885][ T4853]  dump_stack+0x15/0x20
[   55.012098][ T4853]  should_fail_ex+0x229/0x230
[   55.016856][ T4853]  ? __get_vm_area_node+0xf7/0x1b0
[   55.021956][ T4853]  should_failslab+0x8f/0xb0
[   55.026543][ T4853]  __kmalloc_cache_node_noprof+0x50/0x2b0
[   55.032294][ T4853]  __get_vm_area_node+0xf7/0x1b0
[   55.037230][ T4853]  __vmalloc_node_range_noprof+0x2eb/0xef0
[   55.043065][ T4853]  ? copy_process+0x3a9/0x1f90
[   55.047857][ T4853]  ? mod_objcg_state+0x3b1/0x4f0
[   55.052825][ T4853]  dup_task_struct+0x4a1/0x710
[   55.057579][ T4853]  ? copy_process+0x3a9/0x1f90
[   55.062329][ T4853]  ? __mod_memcg_state+0x10d/0x200
[   55.067436][ T4853]  ? __rcu_read_unlock+0x4e/0x70
[   55.072365][ T4853]  copy_process+0x3a9/0x1f90
[   55.076945][ T4853]  ? __rcu_read_unlock+0x4e/0x70
[   55.081888][ T4853]  ? __alloc_pages_noprof+0x1bc/0x360
[   55.087328][ T4853]  ? __pfx_io_sq_thread+0x10/0x10
[   55.092376][ T4853]  create_io_thread+0x9e/0xd0
[   55.097043][ T4853]  ? __pfx_io_sq_thread+0x10/0x10
[   55.102056][ T4853]  io_sq_offload_create+0x6dd/0x850
[   55.107278][ T4853]  io_uring_create+0x53d/0x920
[   55.112113][ T4853]  __se_sys_io_uring_setup+0x1d2/0x1e0
[   55.117607][ T4853]  __x64_sys_io_uring_setup+0x31/0x40
[   55.123011][ T4853]  x64_sys_call+0x1f7e/0x2d60
[   55.127686][ T4853]  do_syscall_64+0xc9/0x1c0
[   55.132302][ T4853]  ? clear_bhb_loop+0x55/0xb0
[   55.136987][ T4853]  ? clear_bhb_loop+0x55/0xb0
[   55.141673][ T4853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.147575][ T4853] RIP: 0033:0x7f6dc8a099f9
[   55.151973][ T4853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.171573][ T4853] RSP: 002b:00007f6dc7686fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   55.179995][ T4853] RAX: ffffffffffffffda RBX: 00007f6dc8ba5f80 RCX: 00007f6dc8a099f9
[   55.188042][ T4853] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000002ddd
[   55.196006][ T4853] RBP: 00000000200006c0 R08: 0000000000000000 R09: 0000000000000000
[   55.203960][ T4853] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   55.211995][ T4853] R13: 0000000000000000 R14: 0000000000002ddd R15: 0000000000000000
[   55.219961][ T4853]  </TASK>
[   55.223260][ T4853] syz.2.281: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[   55.238335][ T4853] CPU: 0 UID: 0 PID: 4853 Comm: syz.2.281 Not tainted 6.11.0-rc3-syzkaller #0
[   55.238997][ T4795] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.247168][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   55.247183][ T4853] Call Trace:
[   55.247190][ T4853]  <TASK>
[   55.247196][ T4853]  dump_stack_lvl+0xf2/0x150
[   55.274767][ T4853]  dump_stack+0x15/0x20
[   55.278951][ T4853]  warn_alloc+0x145/0x1b0
[   55.283279][ T4853]  ? __kmalloc_cache_node_noprof+0x50/0x2b0
[   55.289245][ T4853]  __vmalloc_node_range_noprof+0x310/0xef0
[   55.295041][ T4853]  ? mod_objcg_state+0x3b1/0x4f0
[   55.299977][ T4853]  dup_task_struct+0x4a1/0x710
[   55.304780][ T4853]  ? copy_process+0x3a9/0x1f90
[   55.309529][ T4853]  ? __mod_memcg_state+0x10d/0x200
[   55.314695][ T4853]  ? __rcu_read_unlock+0x4e/0x70
[   55.319713][ T4853]  copy_process+0x3a9/0x1f90
[   55.324355][ T4853]  ? __rcu_read_unlock+0x4e/0x70
[   55.329324][ T4853]  ? __alloc_pages_noprof+0x1bc/0x360
[   55.334692][ T4853]  ? __pfx_io_sq_thread+0x10/0x10
[   55.339706][ T4853]  create_io_thread+0x9e/0xd0
[   55.344418][ T4853]  ? __pfx_io_sq_thread+0x10/0x10
[   55.349431][ T4853]  io_sq_offload_create+0x6dd/0x850
[   55.354660][ T4853]  io_uring_create+0x53d/0x920
[   55.359410][ T4853]  __se_sys_io_uring_setup+0x1d2/0x1e0
[   55.364918][ T4853]  __x64_sys_io_uring_setup+0x31/0x40
[   55.370371][ T4853]  x64_sys_call+0x1f7e/0x2d60
[   55.375062][ T4853]  do_syscall_64+0xc9/0x1c0
[   55.379558][ T4853]  ? clear_bhb_loop+0x55/0xb0
[   55.384272][ T4853]  ? clear_bhb_loop+0x55/0xb0
[   55.389013][ T4853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.394910][ T4853] RIP: 0033:0x7f6dc8a099f9
[   55.399312][ T4853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.418991][ T4853] RSP: 002b:00007f6dc7686fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   55.427397][ T4853] RAX: ffffffffffffffda RBX: 00007f6dc8ba5f80 RCX: 00007f6dc8a099f9
[   55.435354][ T4853] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000002ddd
[   55.443312][ T4853] RBP: 00000000200006c0 R08: 0000000000000000 R09: 0000000000000000
[   55.451272][ T4853] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   55.459226][ T4853] R13: 0000000000000000 R14: 0000000000002ddd R15: 0000000000000000
[   55.467198][ T4853]  </TASK>
[   55.470851][ T4853] Mem-Info:
[   55.473977][ T4853] active_anon:2830 inactive_anon:0 isolated_anon:0
[   55.473977][ T4853]  active_file:16507 inactive_file:1896 isolated_file:0
[   55.473977][ T4853]  unevictable:0 dirty:179 writeback:0
[   55.473977][ T4853]  slab_reclaimable:2626 slab_unreclaimable:14858
[   55.473977][ T4853]  mapped:20485 shmem:297 pagetables:613
[   55.473977][ T4853]  sec_pagetables:0 bounce:0
[   55.473977][ T4853]  kernel_misc_reclaimable:0
[   55.473977][ T4853]  free:1910920 free_pcp:3380 free_cma:0
[   55.518806][ T4853] Node 0 active_anon:11228kB inactive_anon:0kB active_file:65980kB inactive_file:7644kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:81952kB dirty:736kB writeback:32kB shmem:1280kB writeback_tmp:0kB kernel_stack:2976kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no
[   55.545900][ T4795] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.546516][ T4853] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   55.580074][ T4853] lowmem_reserve[]: 0 2866 7844 0
[   55.585231][ T4853] Node 0 DMA32 free:2950412kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953944kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[   55.613835][ T4853] lowmem_reserve[]: 0 0 4978 0
[   55.618627][ T4853] Node 0 Normal free:4677860kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:11228kB inactive_anon:0kB active_file:65980kB inactive_file:7644kB unevictable:68kB writepending:768kB present:5242880kB managed:5098208kB mlocked:68kB bounce:0kB free_pcp:9960kB local_pcp:8512kB free_cma:0kB
[   55.648858][ T4853] lowmem_reserve[]: 0 0 0 0
[   55.653368][ T4853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   55.666196][ T4853] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950412kB
[   55.682242][ T4853] Node 0 Normal: 5*4kB (UME) 536*8kB (UM) 537*16kB (UM) 473*32kB (ME) 418*64kB (UME) 100*128kB (UME) 68*256kB (UME) 42*512kB (UME) 42*1024kB (UM) 23*2048kB (UM) 1094*4096kB (UM) = 4677636kB
[   55.701090][ T4853] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   55.710379][ T4853] 18686 total pagecache pages
[   55.715069][ T4853] 0 pages in swap cache
[   55.719222][ T4853] Free swap  = 124996kB
[   55.723360][ T4853] Total swap = 124996kB
[   55.727608][ T4853] 2097051 pages RAM
[   55.731413][ T4853] 0 pages HighMem/MovableOnly
[   55.736101][ T4853] 80173 pages reserved
[   55.748408][ T4795] 8021q: adding VLAN 0 to HW filter on device team0
[   55.761311][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.768396][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.777440][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.784560][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.802682][ T4795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.813053][ T4795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.851023][ T4858] ip6tnl0: Master is either lo or non-ether device
[   55.915014][ T4795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.930170][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   55.930182][   T29] audit: type=1400 audit(1723485399.474:650): avc:  denied  { accept } for  pid=4867 comm="syz.1.284" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.987736][   T29] audit: type=1400 audit(1723485399.524:651): avc:  denied  { map } for  pid=4867 comm="syz.1.284" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1
[   56.010814][   T29] audit: type=1400 audit(1723485399.524:652): avc:  denied  { execute } for  pid=4867 comm="syz.1.284" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1
[   56.037258][ T4879] netlink: 'syz.1.285': attribute type 2 has an invalid length.
[   56.066874][ T4795] veth0_vlan: entered promiscuous mode
[   56.077960][ T4795] veth1_vlan: entered promiscuous mode
[   56.079042][ T4881] netlink: 'syz.2.287': attribute type 3 has an invalid length.
[   56.098680][ T4795] veth0_macvtap: entered promiscuous mode
[   56.106932][ T4795] veth1_macvtap: entered promiscuous mode
[   56.118920][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.129485][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.139315][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.149978][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.160095][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.170744][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.180668][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.191218][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.201109][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.211531][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.229140][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.236898][ T4886] netlink: 'syz.2.290': attribute type 1 has an invalid length.
[   56.248046][ T4889] netlink: 'syz.1.289': attribute type 5 has an invalid length.
[   56.258509][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.269141][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.279037][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.289576][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.299480][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.309936][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.310650][ T4892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'.
[   56.319775][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.319790][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.319802][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.359451][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.369484][ T4892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'.
[   56.370693][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.387328][ T4795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.396144][ T4795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.404979][ T4795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.413746][ T4795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.480934][ T4898] loop1: detected capacity change from 0 to 512
[   56.488521][ T4898] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.497661][ T4898] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   56.507846][ T4898] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   56.520090][   T29] audit: type=1400 audit(1723485400.074:653): avc:  denied  { ioctl } for  pid=4900 comm="syz.3.271" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   56.530168][ T4898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   56.553552][ T4898] System zones: 0-2, 18-18, 34-34
[   56.559189][ T4898] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   56.576246][ T4898] EXT4-fs (loop1): 1 truncate cleaned up
[   56.587071][ T4898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.682880][ T4910] loop3: detected capacity change from 0 to 1024
[   56.697943][ T4910] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.296: bad orphan inode 2097152
[   56.700039][ T4911] EXT4-fs error (device loop1): ext4_generic_delete_entry:2678: inode #12: block 13: comm syz.1.292: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0
[   56.708825][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.731225][   T29] audit: type=1400 audit(1723485400.244:654): avc:  denied  { unlink } for  pid=4897 comm="syz.1.292" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   56.764370][ T4911] EXT4-fs error (device loop1) in ext4_delete_entry:2749: Corrupt filesystem
[   56.939787][ T4795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.956310][ T4919] netlink: 'syz.3.298': attribute type 2 has an invalid length.
[   56.974444][ T4921] FAULT_INJECTION: forcing a failure.
[   56.974444][ T4921] name failslab, interval 1, probability 0, space 0, times 0
[   56.987161][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.3.299 Not tainted 6.11.0-rc3-syzkaller #0
[   56.996136][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   57.006176][ T4921] Call Trace:
[   57.009442][ T4921]  <TASK>
[   57.012386][ T4921]  dump_stack_lvl+0xf2/0x150
[   57.016967][ T4921]  dump_stack+0x15/0x20
[   57.021121][ T4921]  should_fail_ex+0x229/0x230
[   57.025816][ T4921]  ? perf_event_alloc+0x154/0x1750
[   57.030977][ T4921]  should_failslab+0x8f/0xb0
[   57.035734][ T4921]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   57.041553][ T4921]  perf_event_alloc+0x154/0x1750
[   57.046517][ T4921]  ? cgroup_rstat_updated+0x99/0x550
[   57.051910][ T4921]  inherit_event+0x7e/0x780
[   57.056413][ T4921]  ? __kmalloc_cache_noprof+0x10b/0x2a0
[   57.061960][ T4921]  inherit_task_group+0x26b/0x630
[   57.066978][ T4921]  perf_event_init_task+0x242/0x480
[   57.072155][ T4921]  copy_process+0xbcb/0x1f90
[   57.076903][ T4921]  ? __pfx_io_sq_thread+0x10/0x10
[   57.081908][ T4921]  create_io_thread+0x9e/0xd0
[   57.086564][ T4921]  ? __pfx_io_sq_thread+0x10/0x10
[   57.091651][ T4921]  io_sq_offload_create+0x6dd/0x850
[   57.096923][ T4921]  io_uring_create+0x53d/0x920
[   57.101668][ T4921]  __se_sys_io_uring_setup+0x1d2/0x1e0
[   57.107150][ T4921]  __x64_sys_io_uring_setup+0x31/0x40
[   57.112559][ T4921]  x64_sys_call+0x1f7e/0x2d60
[   57.117298][ T4921]  do_syscall_64+0xc9/0x1c0
[   57.121829][ T4921]  ? clear_bhb_loop+0x55/0xb0
[   57.126543][ T4921]  ? clear_bhb_loop+0x55/0xb0
[   57.131227][ T4921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.137102][ T4921] RIP: 0033:0x7f4835bc99f9
[   57.141526][ T4921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.161361][ T4921] RSP: 002b:00007f4834840fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   57.169749][ T4921] RAX: ffffffffffffffda RBX: 00007f4835d65f80 RCX: 00007f4835bc99f9
[   57.177822][ T4921] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000002ddd
[   57.185769][ T4921] RBP: 00000000200006c0 R08: 0000000000000000 R09: 0000000000000000
[   57.193718][ T4921] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   57.201710][ T4921] R13: 0000000000000000 R14: 0000000000002ddd R15: 0000000000000000
[   57.209660][ T4921]  </TASK>
[   57.414209][ T3947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.574202][ T4930] loop1: detected capacity change from 0 to 2048
[   57.617452][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.723566][ T3947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.364369][   T29] audit: type=1400 audit(1723485401.904:655): avc:  denied  { create } for  pid=4956 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   58.440934][ T4960] loop4: detected capacity change from 0 to 1024
[   58.466187][ T4960] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.309: bad orphan inode 2097152
[   58.487365][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.514226][   T29] audit: type=1400 audit(1723485402.054:656): avc:  denied  { execmem } for  pid=4959 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   59.024773][ T4972] loop3: detected capacity change from 0 to 512
[   59.035387][ T4972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.054147][ T4972] EXT4-fs (loop3): 1 truncate cleaned up
[   59.060545][ T4976] FAULT_INJECTION: forcing a failure.
[   59.060545][ T4976] name failslab, interval 1, probability 0, space 0, times 0
[   59.072895][ T4972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.073153][ T4976] CPU: 0 UID: 0 PID: 4976 Comm: syz.1.312 Not tainted 6.11.0-rc3-syzkaller #0
[   59.093962][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   59.104083][ T4976] Call Trace:
[   59.107454][ T4976]  <TASK>
[   59.110443][ T4976]  dump_stack_lvl+0xf2/0x150
[   59.115073][ T4976]  dump_stack+0x15/0x20
[   59.119344][ T4976]  should_fail_ex+0x229/0x230
[   59.124016][ T4976]  ? perf_event_alloc+0x154/0x1750
[   59.129218][ T4976]  should_failslab+0x8f/0xb0
[   59.133898][ T4976]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   59.139809][ T4976]  perf_event_alloc+0x154/0x1750
[   59.144744][ T4976]  ? cgroup_rstat_updated+0x99/0x550
[   59.150018][ T4976]  inherit_event+0x7e/0x780
[   59.154687][ T4976]  ? __kmalloc_cache_noprof+0x10b/0x2a0
[   59.160237][ T4976]  inherit_task_group+0x26b/0x630
[   59.165265][ T4976]  perf_event_init_task+0x242/0x480
[   59.170520][ T4976]  copy_process+0xbcb/0x1f90
[   59.175102][ T4976]  ? __pfx_io_sq_thread+0x10/0x10
[   59.180320][ T4976]  create_io_thread+0x9e/0xd0
[   59.185033][ T4976]  ? __pfx_io_sq_thread+0x10/0x10
[   59.190084][ T4976]  io_sq_offload_create+0x6dd/0x850
[   59.195275][ T4976]  io_uring_create+0x53d/0x920
[   59.200073][ T4976]  __se_sys_io_uring_setup+0x1d2/0x1e0
[   59.205531][ T4976]  __x64_sys_io_uring_setup+0x31/0x40
[   59.210976][ T4976]  x64_sys_call+0x1f7e/0x2d60
[   59.215762][ T4976]  do_syscall_64+0xc9/0x1c0
[   59.220343][ T4976]  ? clear_bhb_loop+0x55/0xb0
[   59.225091][ T4976]  ? clear_bhb_loop+0x55/0xb0
[   59.229762][ T4976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.235693][ T4976] RIP: 0033:0x7fcc666499f9
[   59.240168][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.259784][ T4976] RSP: 002b:00007fcc652c0fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   59.268181][ T4976] RAX: ffffffffffffffda RBX: 00007fcc667e5f80 RCX: 00007fcc666499f9
[   59.276144][ T4976] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000002ddd
[   59.284102][ T4976] RBP: 00000000200006c0 R08: 0000000000000000 R09: 0000000000000000
[   59.292063][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   59.300017][ T4976] R13: 0000000000000000 R14: 0000000000002ddd R15: 0000000000000000
[   59.307983][ T4976]  </TASK>
[   59.321087][   T29] audit: type=1326 audit(1723485402.864:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4835bc99f9 code=0x7ffc0000
[   59.332889][ T4979] loop2: detected capacity change from 0 to 2048
[   59.344950][   T29] audit: type=1326 audit(1723485402.864:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4835bc99f9 code=0x7ffc0000
[   59.374088][   T29] audit: type=1326 audit(1723485402.864:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4835bc8390 code=0x7ffc0000
[   59.475997][ T4990] loop4: detected capacity change from 0 to 512
[   59.520292][ T5000] loop2: detected capacity change from 0 to 512
[   59.547770][ T5000] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   59.555788][ T5000] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   59.585520][ T5000] System zones: 0-1, 15-15, 18-18, 34-34
[   59.591288][ T5000] EXT4-fs (loop2): orphan cleanup on readonly fs
[   59.602657][ T5000] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   59.617211][ T5000] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   59.628128][ T5010] loop3: detected capacity change from 0 to 256
[   59.640924][ T5000] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.317: bad orphan inode 16
[   59.662586][ T5000] ext4_test_bit(bit=15, block=18) = 1
[   59.668054][ T5000] is_bad_inode(inode)=0
[   59.672289][ T5000] NEXT_ORPHAN(inode)=0
[   59.674254][ T5010] FAT-fs (loop3): Directory bread(block 64) failed
[   59.676359][ T5000] max_ino=32
[   59.682961][ T5010] FAT-fs (loop3): Directory bread(block 65) failed
[   59.686289][ T5000] i_nlink=2
[   59.692852][ T5010] FAT-fs (loop3): Directory bread(block 66) failed
[   59.702530][ T5010] FAT-fs (loop3): Directory bread(block 67) failed
[   59.704084][ T5018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5018 comm=syz.1.322
[   59.709277][ T5010] FAT-fs (loop3): Directory bread(block 68) failed
[   59.723278][ T5000] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.317: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[   59.728174][ T5010] FAT-fs (loop3): Directory bread(block 69) failed
[   59.752149][ T5010] FAT-fs (loop3): Directory bread(block 70) failed
[   59.758940][ T5010] FAT-fs (loop3): Directory bread(block 71) failed
[   59.766887][ T5010] FAT-fs (loop3): Directory bread(block 72) failed
[   59.774576][ T5010] FAT-fs (loop3): Directory bread(block 73) failed
[   59.785176][ T5029] loop2: detected capacity change from 0 to 512
[   59.789267][ T5031] loop1: detected capacity change from 0 to 1024
[   59.805388][ T5029] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[   59.808991][ T5031] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.324: bad orphan inode 2097152
[   59.836309][ T5036] loop3: detected capacity change from 0 to 512
[   59.843265][ T5036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.856048][ T5036] EXT4-fs (loop3): 1 truncate cleaned up
[   59.865412][ T5036] No source specified
[   60.351393][ T5051] capability: warning: `syz.1.328' uses 32-bit capabilities (legacy support in use)
[   60.380898][ T5051] loop1: detected capacity change from 0 to 512
[   60.422609][ T5055] loop4: detected capacity change from 0 to 512
[   60.431027][ T5053] loop1: detected capacity change from 0 to 4096
[   60.447296][ T5055] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.458424][ T5055] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.330: corrupted inode contents
[   60.470455][ T5055] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.330: mark_inode_dirty error
[   60.481852][ T5055] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.330: corrupted inode contents
[   60.496694][ T5059] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.330: Directory hole found for htree leaf block 0
[   60.537282][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'.
[   60.546981][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'.
[   60.578996][ T5064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.331'.
[   60.608598][ T5066] netlink: 'syz.4.332': attribute type 3 has an invalid length.
[   60.634610][ T5068] loop2: detected capacity change from 0 to 2048
[   60.641697][ T5068] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   60.653972][ T5068] loop2: detected capacity change from 0 to 512
[   60.660565][ T5068] ext4: Unknown parameter 'fowner'
[   60.667426][ T5069] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   60.667480][ T5068] IPVS: stopping master sync thread 5069 ...
[   60.721632][ T5040] ==================================================================
[   60.729699][ T5040] BUG: KCSAN: data-race in _free_event / perf_pending_task
[   60.736882][ T5040] 
[   60.739185][ T5040] write to 0xffff888113c16a98 of 4 bytes by task 5042 on cpu 0:
[   60.746879][ T5040]  perf_pending_task+0xe8/0x220
[   60.751714][ T5040]  task_work_run+0x13a/0x1a0
[   60.756280][ T5040]  syscall_exit_to_user_mode+0xbe/0x130
[   60.761892][ T5040]  do_syscall_64+0xd6/0x1c0
[   60.766376][ T5040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.772246][ T5040] 
[   60.774555][ T5040] read to 0xffff888113c16a98 of 4 bytes by task 5040 on cpu 1:
[   60.782081][ T5040]  _free_event+0xcf/0xa10
[   60.786387][ T5040]  perf_event_release_kernel+0x61a/0x670
[   60.791995][ T5040]  perf_release+0x25/0x30
[   60.796319][ T5040]  __fput+0x192/0x6f0
[   60.800283][ T5040]  ____fput+0x15/0x20
[   60.804248][ T5040]  task_work_run+0x13a/0x1a0
[   60.808824][ T5040]  syscall_exit_to_user_mode+0xbe/0x130
[   60.814351][ T5040]  do_syscall_64+0xd6/0x1c0
[   60.819008][ T5040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.824891][ T5040] 
[   60.827193][ T5040] value changed: 0x7e97c8ff -> 0x00000000
[   60.832883][ T5040] 
[   60.835184][ T5040] Reported by Kernel Concurrency Sanitizer on:
[   60.841305][ T5040] CPU: 1 UID: 0 PID: 5040 Comm: syz.3.326 Not tainted 6.11.0-rc3-syzkaller #0
[   60.850138][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   60.860172][ T5040] ==================================================================