last executing test programs:

9.209120959s ago: executing program 4 (id=2282):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0xffffffffffffff86, 0x1, 0x30}]}]}]}, 0x2c}}, 0x20000010)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpcgss_bad_seqno\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
process_mrelease(0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x564, &(0x7f00000008c0)="$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") (async)
mknod$loop(&(0x7f00000001c0)='./file0/bus\x00', 0x100, 0x1) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x545, &(0x7f0000000ac0)="$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") (async)
open_by_handle_at(r5, &(0x7f00000000c0)=ANY=[], 0x400) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000ad9750d329d1c1bd92549e829246d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) (async)
io_submit(0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r9 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

8.617436639s ago: executing program 4 (id=2291):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000008c0)=""/139, 0x29, 0x8b, 0x0, 0xfdd, 0x0, @void, @value}, 0x28)

5.204892044s ago: executing program 4 (id=2292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = epoll_create1(0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x60002015})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000))
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000b3180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='afs_flock_ev\x00', r6, 0x0, 0x8}, 0x18)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

5.118758992s ago: executing program 4 (id=2321):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)

5.093509564s ago: executing program 4 (id=2322):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000180)={0x20, 0xc, 0xa, 0x3, 0x0, 0x6, 0x0})
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x6800, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220209f0a"], 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000008c0)=""/139, 0x29, 0x8b, 0x0, 0xfdd, 0x0, @void, @value}, 0x28)

3.332146932s ago: executing program 4 (id=2330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x24}}, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000))
process_vm_readv(r1, &(0x7f0000001340)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=[{&(0x7f00000013c0)=""/134, 0x86}, {&(0x7f0000001480)=""/21, 0x15}, {&(0x7f00000014c0)=""/63, 0x3f}, {&(0x7f0000001500)=""/118, 0x76}, {&(0x7f0000001580)=""/138, 0x8a}], 0x5, 0x0)

3.331748121s ago: executing program 1 (id=2331):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYRES32], 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000080))
write$binfmt_script(0xffffffffffffffff, 0x0, 0xb)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x1}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4903661, 0x7c}}}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="8e93"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4f, 0x5, 0x15}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x180c401, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x101}}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@map_off}, {@map_off}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@block={'block', 0x3d, 0x200}}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@sbsector}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'ascii'}}], [], 0x2c}, 0xff, 0x9be, &(0x7f0000000e00)="$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")
splice(r2, 0x0, r4, 0x0, 0x7151, 0x0)

2.745971071s ago: executing program 2 (id=2334):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xaf, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5c, 0xc, 0x9, 0x10040, r0, 0x8001, '\x00', 0x0, r1, 0x5, 0x5, 0x2, 0xc, @void, @value, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80, 0x2, 0x7, 0x59001, r0, 0x3ff, '\x00', 0x0, r1, 0x4, 0x2, 0x0, 0x4, @value=r1, @void, @value}, 0x50)
r3 = eventfd2(0x1000, 0x80800)
io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f00000001c0)="a0e4b5ebf9ed9c0732f0ff36a28c22f2a1", 0x11, 0x2, 0x0, 0x0, r3}, &(0x7f0000000240))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/3, 0x3}, {&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000001480)=""/14, 0xe}, {&(0x7f00000014c0)=""/70, 0x46}, {&(0x7f0000001540)=""/53, 0x35}, {&(0x7f0000001580)}], 0x7, &(0x7f0000001640)=""/202, 0xca}, 0x2)
r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r6, &(0x7f0000001780)="415fd690511d2f9cd86119075e41df17375586eed83237bb7e71baf5339580fc269386180ac17a0439f69d96ec7440ea8ad31c7a02db28c2125ba609f1f02a95e7372bcf6304300366909c70ffd6178b71b08969572ab79becd7e730da2cc19c003bc54a8e09978482c29d", 0x6b)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000001800)={0xffffffffffffffff, 0x1, 0x1e, 0x80, @vifc_lcl_addr=@private=0xa010100, @rand_addr=0x64010102}, 0x10)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8001)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001840)=0xa)
syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r4)
recvfrom(r4, &(0x7f00000018c0)=""/100, 0x64, 0x10100, &(0x7f0000001940)=@phonet={0x23, 0x38, 0x5}, 0x80)
lsetxattr$security_ima(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), &(0x7f0000001a40)=@v2={0x3, 0x2, 0x17, 0xbaa, 0xe2, "771d9f770c953f910f4701b4c62b16b48c88934dc6d0ec1fc750c1e11c370673e5828403d8ff655d9852b5ca4aa3c07596fb70255f21560ba2d16750683f5211fc7ed1149946080a2cefc0acf13314382c5296f7fd3d642aec684a3ac95a813c48a941eefdd10f0c6cf49c459e939d76023bd6fe7267f2d28e4697b3a0179fbb27080035e6b7b111abc735ad972c558dbbfeb3a4c47ed73917b5f80e471a5446511ec8a1c8ba0b751ffe83549541980daaaaed233fc7b1e12276c7ec5ec0289ee983271a26b799c880a480e7d4c8ce29a7c53c45e6a6876b97d2a5ea5e06cc920d3b"}, 0xeb, 0x3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001b40)=0x11)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001b80)={0x0, 0x1, 0x9a}, 0x8)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000001bc0))
setsockopt$packet_int(r5, 0x107, 0x3, &(0x7f0000001c00)=0xd4, 0x4)
chdir(&(0x7f0000001c40)='./file0\x00')
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000001c80))
connect$netlink(r5, &(0x7f0000001cc0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc)
r8 = signalfd4(r6, &(0x7f0000001d00)={[0x5fa8]}, 0x8, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r8, 0x0, 0x29, 0x0, &(0x7f0000001d40)="4f91e7bff979384c4b39792df2de6c8a8cbaa488fff7a5350ccd59ed252710d39e12e04c64361d9b9d", &(0x7f0000001d80), 0x0, 0x0, 0xbe, 0xea, &(0x7f0000001dc0)="05c118f6cc9d4daefd0cd5aeef12436f5e6c95a8243220c8913d7942438db11b2fa42d8a883916badba74aae58886a4badf1b385971c39e7369ef8f1ac477199cf40d724446791748a913ab44fbcfe61c21c7579690aaab8683be4313d74465d665cce4135c965c343b0805acb189dd6d37841fd2b5e0a5579eab5ad8104ea18ca90f76b8a083da89bc68e8c740dee0ef5df81b5bcad109f4335c3b212ddc45a41794ea8f0ca6f6a534f811371df85593685d6dee99c50411db511bd65e4", &(0x7f0000001e80)="bbfaa763ae6a2e09af34dcd7dea9bc8b0507ebd4ef462059715ccf9afb5f9e54b495bfd6dfe8af7c68c9dddff17f8c32cf97aa464dac8880f5255df78a4f238c139ae4b4c7f30a88df9604b231c069d6bbba273de7f293ff1cd47777a91db98f5df0e93e65ca2e723b2b9d820a3f923ea66b1ae94862b5a45fce64d4102233cc51729b5a5fea638ffcda3ed853cedd31a1e5c1824a332382c5c497111f532ec28ace99f112eaa5464e44c32c6c7f2992b6056ccc258b81cb81a3ea00f3ff797a688cd9c64575f4e078119005fecc3af2613314189448474c59d8680edf2fd898ff8f1a262a0246ae0119", 0x5, 0x0, 0x3}, 0x50)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002300)={r8, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000002100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002140), &(0x7f0000002180), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000021c0)}}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000002340)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000002440)=0xe8)
sendmsg$nl_xfrm(r9, &(0x7f00000026c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)=@getsa={0x1dc, 0x12, 0x102, 0x70bd2b, 0x25dfdbfe, {@in=@multicast2, 0x4d4, 0x2, 0x32}, [@algo_comp={0xcf, 0x3, {{'lzs\x00'}, 0x438, "0c2d8533fbc151f3a9756de3c92ac1c2a621491b5d8784153aaaa450a86cb8374a44cf5d2686c64fec21f9baafe0b8fdc60890dcb209963c3577dff82051a8b6293cafc792354ba126b6a24fdacc70a103e7f06e97036e0d38d72ccb46eeea8d270811d49e4998b25fcff9312f5874b3a9558fb29b5833f2cb11db7be3c0908851dd88afcdbf40"}}, @sa={0xe4, 0x6, {{@in6=@remote, @in=@local, 0x4e23, 0x6, 0x4e20, 0x0, 0x2, 0x70, 0x80, 0x2e, r10, r11}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3, 0x2b}, @in=@empty, {0x4e7, 0x457216b6, 0x0, 0x0, 0xffff, 0xbd8, 0xb3, 0x6}, {0xf, 0xffffffffffffffff, 0xffffffffffff79e5}, {0x6, 0x6, 0xfffff117}, 0x70bd2a, 0x34ff, 0x2, 0xdef593c78eb48460, 0xc0, 0x1}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

2.624999031s ago: executing program 0 (id=2338):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x401, 0x8204, 0xfffff001, 0x80000000, 0x5, 0x9, 0x5}, &(0x7f0000000280)=0x20) (fail_nth: 3)

2.294828098s ago: executing program 0 (id=2339):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000000206050000000000000000000000000005000100060000000900020073797a310000000011000300686173683a6e65742c6e6574000000002ec5c0a058712a9c6e9a5e531eb42c788506db882ee2b176ebca25483112474c4ede6f5b3cb9006a8a5e39d0961d9b101a27ebfb60ad1bfaadac8b2f2f27de6c759bc696484e1a56704b913d49df8a70a5b5aed1ed6df2bdbf454010ec014b89210ca12dc75409dc7cb50f51cdd7370f60da29d94a28af45b24d13e10f14ac2de4ccc7"], 0x3c}}, 0x24000014)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@null, 0x0, 'ip6gre0\x00'})
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r2, 0x84, 0x1b, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)
r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000001a16b651ceb799d4cd423e8bdaf39940c3c3f6dde48bdd54343066e2d80f34f57aab83eafd13fac70ea8588cde8c2fb79142fe73516324630786c800bf9b9ad0d535ed1965e854ac0228d64f52ec85143148f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu~\t\t')
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e)
r9 = fcntl$dupfd(r8, 0x0, r1)
listen(r9, 0xa0f)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x7}, 0x20)
chdir(&(0x7f0000000040)='./file0\x00')
r10 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0)
getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8)

2.138257481s ago: executing program 0 (id=2340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

2.03273173s ago: executing program 0 (id=2341):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x16)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x64, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"a0"}}}}}}}, 0x2a)

1.91630778s ago: executing program 0 (id=2342):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)

1.892399682s ago: executing program 2 (id=2343):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil], &(0x7f0000000140)=[0x8, 0x6], &(0x7f00000002c0), 0x2)
getpgid(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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")
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000000}])
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.807348669s ago: executing program 0 (id=2344):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil], &(0x7f0000000140)=[0x8, 0x6], &(0x7f00000002c0), 0x2)
getpgid(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8")
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000000}])
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r4, 0x0, 0x2, 0x0, 0x0, 0x0)

1.668250501s ago: executing program 2 (id=2345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)

1.645908113s ago: executing program 2 (id=2346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000fff40000e1", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab000000000000000032"], 0x24}}, 0x0)

1.612878145s ago: executing program 2 (id=2347):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x8000, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = epoll_create1(0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x10000004})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = syz_pidfd_open(0x0, 0x0)
r8 = socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x5, 0x8a67, @mcast1, 0xffffffff}, 0x1c)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000137000000000000000300000000000000000000002e0086ec46f0ad7a9671e50ae2764649f94b6a4b18831fd39a3a151400142184b8b43458517f73f727781cda71ce61dfdf046e91dae786d7adfe7015931e38eccf199d59459955228aeb167d02db708d1fcd366470aa3b3f8d5e75"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x8085)
syz_emit_ethernet(0xc2, &(0x7f0000000800)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f311b72aaaea643c1c9a87585fe8503b329782e1a4a6dbfdd8b39a1254fd7e8a", "e43bda61ac19fa87af003eb4aa39028bbedc82e1d769b77666494e68a23995eaf644833880d4ada79ed7ce3f5c75dc9c", "70c484567d4b4083d1f2f5415c4ab8aad74be8f354246d02ea72a7ba", {"a3beb9c77909d894dd83e214e137120f", "2237bcf520af9aec3638c394f03c9233"}}}}}}}, 0x0)

1.454995709s ago: executing program 1 (id=2348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)

1.4398879s ago: executing program 1 (id=2349):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x8916, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600010095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
io_uring_setup(0x4c20, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc)
fstat(r3, &(0x7f0000000c40))
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000cc0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
linkat(0xffffffffffffffff, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000)
r6 = syz_io_uring_setup(0x727f, &(0x7f0000000400)={0x0, 0xa5c4, 0x1, 0x2}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="00042bbd7000fddbdf255d0000000c009900000000001c0000002800a6800a00060069256653000100000a00060008021100000000000a000600ffffffffffff00005800a6800a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff0000"], 0xa0}, 0x1, 0x0, 0x0, 0x4048000}, 0x40)
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000040), 0x8)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

589.582171ms ago: executing program 1 (id=2355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)

531.556256ms ago: executing program 1 (id=2357):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)

486.86607ms ago: executing program 1 (id=2358):
r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0xffffff0c)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@nodelalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6c3, 0x5}, 0x0, 0x412, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000240)=@abs={0x1}, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$selinux_status(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)

284.035317ms ago: executing program 3 (id=2360):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r4, &(0x7f0000002180)=""/4105, 0x1009, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

232.293221ms ago: executing program 3 (id=2361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)

232.014831ms ago: executing program 3 (id=2362):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)

231.554911ms ago: executing program 3 (id=2363):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x100001, 0x10c, 0x100000}, 0x20) (async, rerun: 64)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') (rerun: 64)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xbe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64)
r3 = socket(0xa, 0x801, 0x0) (rerun: 64)
getsockopt(r3, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8901)
move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x10010, r6, 0x10000000) (async, rerun: 64)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) (rerun: 64)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')

177.698215ms ago: executing program 3 (id=2364):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xacd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}}, 0x0)

177.148826ms ago: executing program 3 (id=2365):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x8916, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600010095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
io_uring_setup(0x4c20, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc)
fstat(r3, &(0x7f0000000c40))
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000cc0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
linkat(0xffffffffffffffff, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000)
r6 = syz_io_uring_setup(0x727f, &(0x7f0000000400)={0x0, 0xa5c4, 0x1, 0x2}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="00042bbd7000fddbdf255d0000000c009900000000001c0000002800a6800a00060069256653000100000a00060008021100000000000a000600ffffffffffff00005800a6800a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff0000"], 0xa0}, 0x1, 0x0, 0x0, 0x4048000}, 0x40)
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000040), 0x8)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

0s ago: executing program 2 (id=2366):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000010002104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e000100776972656775617264000000040002800800", @ANYBLOB], 0x48}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
getsockname$netlink(r2, 0x0, 0x0)
listen(r5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4)

kernel console output (not intermixed with test programs):

x1510
[  220.260728][T11366]  ? should_fail_ex+0xd7/0x230
[  220.265498][T11366]  usb_submit_urb+0xa80/0xb70
[  220.270227][T11366]  usbfs_start_wait_urb+0x97/0x1c0
[  220.275349][T11366]  do_proc_control+0x3aa/0x850
[  220.280212][T11366]  usbdev_ioctl+0x283f/0x3e00
[  220.284905][T11366]  ? do_vfs_ioctl+0x96e/0x1530
[  220.289673][T11366]  ? selinux_file_ioctl+0x2f7/0x380
[  220.294865][T11366]  ? __fget_files+0x1d4/0x210
[  220.299550][T11366]  ? __pfx_usbdev_ioctl+0x10/0x10
[  220.304671][T11366]  __se_sys_ioctl+0xcd/0x140
[  220.309266][T11366]  __x64_sys_ioctl+0x43/0x50
[  220.313923][T11366]  x64_sys_call+0x15cc/0x2d60
[  220.318641][T11366]  do_syscall_64+0xc9/0x1c0
[  220.323138][T11366]  ? clear_bhb_loop+0x55/0xb0
[  220.327820][T11366]  ? clear_bhb_loop+0x55/0xb0
[  220.332512][T11366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.338470][T11366] RIP: 0033:0x7f46f94ddff9
[  220.342941][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.362621][T11366] RSP: 002b:00007f46f8157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  220.371028][T11366] RAX: ffffffffffffffda RBX: 00007f46f9695f80 RCX: 00007f46f94ddff9
[  220.379047][T11366] RDX: 0000000020000000 RSI: 00000000c0105500 RDI: 0000000000000006
[  220.387009][T11366] RBP: 00007f46f8157090 R08: 0000000000000000 R09: 0000000000000000
[  220.394972][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.403059][T11366] R13: 0000000000000000 R14: 00007f46f9695f80 R15: 00007ffdfeacf128
[  220.411029][T11366]  </TASK>
[  220.448255][   T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.491061][T11379] IPv6: Can't replace route, no match found
[  220.536012][T11388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2131'.
[  220.546849][T11388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2131'.
[  220.590680][T11355] chnl_net:caif_netlink_parms(): no params data found
[  220.599673][   T40] bridge_slave_1: left allmulticast mode
[  220.605496][   T40] bridge_slave_1: left promiscuous mode
[  220.611118][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.620354][   T40] bridge_slave_0: left allmulticast mode
[  220.626282][   T40] bridge_slave_0: left promiscuous mode
[  220.632074][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.757008][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.767533][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.778021][   T40] bond0 (unregistering): Released all slaves
[  220.811395][T11401] syzkaller0: entered promiscuous mode
[  220.817006][T11401] syzkaller0: entered allmulticast mode
[  220.828135][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2139'.
[  220.837243][   T40] hsr_slave_0: left promiscuous mode
[  220.842977][   T40] hsr_slave_1: left promiscuous mode
[  220.848802][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.856321][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.863798][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.871294][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.880041][   T40] veth1_macvtap: left promiscuous mode
[  220.885584][   T40] veth0_macvtap: left promiscuous mode
[  220.891079][   T40] veth1_vlan: left promiscuous mode
[  220.896468][   T40] veth0_vlan: left promiscuous mode
[  220.970745][   T40] team0 (unregistering): Port device team_slave_1 removed
[  220.982644][   T40] team0 (unregistering): Port device team_slave_0 removed
[  221.043043][T11355] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.050147][T11355] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.058200][T11355] bridge_slave_0: entered allmulticast mode
[  221.064777][T11355] bridge_slave_0: entered promiscuous mode
[  221.071744][T11355] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.078951][T11355] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.086105][T11355] bridge_slave_1: entered allmulticast mode
[  221.092331][T11355] bridge_slave_1: entered promiscuous mode
[  221.113614][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.124386][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.147290][T11355] team0: Port device team_slave_0 added
[  221.156560][T11355] team0: Port device team_slave_1 added
[  221.183360][T11355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.190464][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.216625][T11355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.228543][T11355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.235582][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.261877][T11355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.297590][T11355] hsr_slave_0: entered promiscuous mode
[  221.303867][T11355] hsr_slave_1: entered promiscuous mode
[  221.309199][T11410] syz.2.2141[11410] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  221.309457][T11410] syz.2.2141[11410] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  221.322156][T11410] syz.2.2141[11410] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  221.334450][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.353468][T11418] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.361206][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.368700][T11418] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.449191][T11422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  221.455797][T11422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  221.463557][T11422] vhci_hcd vhci_hcd.0: Device attached
[  221.481175][T11423] vhci_hcd: unknown pdu 2
[  221.500866][ T3367] vhci_hcd: stop threads
[  221.505209][ T3367] vhci_hcd: release socket
[  221.509624][ T3367] vhci_hcd: disconnect device
[  221.542340][T11420] loop3: detected capacity change from 0 to 8192
[  221.549622][T11420] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615	'
[  221.565303][T11435] tipc: Started in network mode
[  221.570212][T11435] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  221.579242][T11435] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  221.587589][T11435] tipc: Enabled bearer <udp:syz1>, priority 10
[  221.680024][T11355] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  221.689187][T11355] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  221.698230][T11355] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  221.706938][T11355] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  221.719293][T11449] __nla_validate_parse: 1 callbacks suppressed
[  221.719309][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2154'.
[  221.737341][T11449] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2154'.
[  221.752537][T11355] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.759734][T11355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.767121][T11355] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.774148][T11355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.800582][T11355] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.811199][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.819435][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.835779][T11355] 8021q: adding VLAN 0 to HW filter on device team0
[  221.847053][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.854245][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.866023][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.873143][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.946180][T11355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.959045][T11464] syz_tun: entered promiscuous mode
[  221.966136][T11464] batadv_slave_0: entered promiscuous mode
[  221.972538][T11464] hsr1: entered allmulticast mode
[  221.977631][T11464] syz_tun: entered allmulticast mode
[  221.982939][T11464] batadv_slave_0: entered allmulticast mode
[  222.008587][T11464] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  222.052092][T11097] syz_tun (unregistering): left promiscuous mode
[  222.085157][T11355] veth0_vlan: entered promiscuous mode
[  222.094091][T11355] veth1_vlan: entered promiscuous mode
[  222.102394][   T29] kauditd_printk_skb: 175 callbacks suppressed
[  222.102408][   T29] audit: type=1400 audit(1729495180.847:4954): avc:  denied  { watch watch_reads } for  pid=11479 comm="syz.2.2162" path="/11/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  222.136440][T11480] process 'syz.2.2162' launched './file0' with NULL argv: empty string added
[  222.138300][T11355] veth0_macvtap: entered promiscuous mode
[  222.153549][   T29] audit: type=1400 audit(1729495180.887:4955): avc:  denied  { execute_no_trans } for  pid=11479 comm="syz.2.2162" path="/11/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  222.156815][T11355] veth1_macvtap: entered promiscuous mode
[  222.189413][T11355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.200080][T11355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.201164][T11482] loop2: detected capacity change from 0 to 512
[  222.210180][T11355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.217439][T11482] ext4: Unknown parameter '"'
[  222.226840][T11355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.227838][T11355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.250890][T11355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.261512][T11355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.271503][T11355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.282017][T11355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.292672][T11355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.302440][T11355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.303072][T11484] loop2: detected capacity change from 0 to 512
[  222.311177][T11355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.326214][T11355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.331683][T11484] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  222.334978][T11355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.344071][T11484] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  222.362245][T11484] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  222.372640][T11484] EXT4-fs (loop2): 1 truncate cleaned up
[  222.380303][T11484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.404035][ T5801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.416379][T11484] netlink: 'syz.2.2164': attribute type 4 has an invalid length.
[  222.439166][T11484] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.461058][T11122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.474436][ T5801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.511574][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'.
[  222.520558][T11496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.528031][T11496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.549435][T11496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.556950][T11496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.586159][ T5801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.596753][ T3344] tipc: Node number set to 1
[  222.603006][T11503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  222.614973][T11490] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  222.621502][T11490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  222.629174][T11490] vhci_hcd vhci_hcd.0: Device attached
[  222.638289][T11505] vhci_hcd: unknown pdu 2
[  222.653354][   T40] vhci_hcd: stop threads
[  222.657720][   T40] vhci_hcd: release socket
[  222.662149][   T40] vhci_hcd: disconnect device
[  222.692911][ T5801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.712321][T11490] loop4: detected capacity change from 0 to 8192
[  222.719165][T11490] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615	'
[  222.732424][T11508] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  222.764124][T11491] chnl_net:caif_netlink_parms(): no params data found
[  222.793315][T11519] syz.2.2175[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.793449][T11519] syz.2.2175[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.806504][T11519] syz.2.2175[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.823082][   T29] audit: type=1326 audit(1729495181.557:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  222.863133][ T5801] bridge_slave_1: left allmulticast mode
[  222.868983][ T5801] bridge_slave_1: left promiscuous mode
[  222.874715][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.875027][T11519] loop2: detected capacity change from 0 to 512
[  222.882275][   T29] audit: type=1326 audit(1729495181.557:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  222.898576][T11519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  222.911497][   T29] audit: type=1326 audit(1729495181.557:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  222.933686][T11519] EXT4-fs (loop2): 1 truncate cleaned up
[  222.944827][   T29] audit: type=1326 audit(1729495181.557:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  222.951578][T11519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.973918][   T29] audit: type=1326 audit(1729495181.557:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  223.009767][   T29] audit: type=1326 audit(1729495181.577:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  223.033378][   T29] audit: type=1326 audit(1729495181.577:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  223.057086][   T29] audit: type=1326 audit(1729495181.577:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf013dff9 code=0x7ffc0000
[  223.081064][ T5801] bridge_slave_0: left allmulticast mode
[  223.086843][ T5801] bridge_slave_0: left promiscuous mode
[  223.092542][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.101424][T11519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.187160][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.197348][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.207569][ T5801] bond0 (unregistering): Released all slaves
[  223.220763][T11491] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.227899][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.236100][T11491] bridge_slave_0: entered allmulticast mode
[  223.242636][T11491] bridge_slave_0: entered promiscuous mode
[  223.252842][T11530] netlink: 'syz.2.2176': attribute type 29 has an invalid length.
[  223.263521][T11531] netlink: 'syz.2.2176': attribute type 29 has an invalid length.
[  223.272799][T11491] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.279937][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.287902][T11491] bridge_slave_1: entered allmulticast mode
[  223.295021][T11491] bridge_slave_1: entered promiscuous mode
[  223.314853][ T5801] tipc: Disabling bearer <udp:syz1>
[  223.320142][ T5801] tipc: Left network mode
[  223.333485][T11491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.345163][ T5801] batadv_slave_0: left promiscuous mode
[  223.352558][ T5801] hsr_slave_0: left promiscuous mode
[  223.358434][ T5801] hsr_slave_1: left promiscuous mode
[  223.366379][ T5801] veth1_macvtap: left promiscuous mode
[  223.371900][ T5801] veth0_macvtap: left promiscuous mode
[  223.377598][ T5801] veth1_vlan: left promiscuous mode
[  223.383075][ T5801] veth0_vlan: left promiscuous mode
[  223.480605][ T5801] team0 (unregistering): Port device team_slave_1 removed
[  223.490239][ T5801] team0 (unregistering): Port device team_slave_0 removed
[  223.522133][T11491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.554054][T11491] team0: Port device team_slave_0 added
[  223.566188][T11491] team0: Port device team_slave_1 added
[  223.591169][T11491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.598190][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.624254][T11491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.635922][T11491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.642865][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.668766][T11491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.697734][T11491] hsr_slave_0: entered promiscuous mode
[  223.703647][T11491] hsr_slave_1: entered promiscuous mode
[  223.709650][T11491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.717337][T11491] Cannot create hsr debugfs directory
[  223.766359][T11521] chnl_net:caif_netlink_parms(): no params data found
[  223.859967][T11521] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.867177][T11521] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.874408][T11521] bridge_slave_0: entered allmulticast mode
[  223.881035][T11521] bridge_slave_0: entered promiscuous mode
[  223.889591][T11521] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.896704][T11521] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.903869][T11521] bridge_slave_1: entered allmulticast mode
[  223.910364][T11521] bridge_slave_1: entered promiscuous mode
[  223.939887][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.953868][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.979660][T11521] team0: Port device team_slave_0 added
[  223.986237][T11521] team0: Port device team_slave_1 added
[  224.002264][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.009344][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.035378][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.046695][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.053727][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.079727][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.097810][ T5801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.127337][T11521] hsr_slave_0: entered promiscuous mode
[  224.133540][T11521] hsr_slave_1: entered promiscuous mode
[  224.139592][T11521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.147195][T11521] Cannot create hsr debugfs directory
[  224.163844][ T5801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.191524][T11550] chnl_net:caif_netlink_parms(): no params data found
[  224.235979][ T5801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.260391][T11550] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.267584][T11550] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.275059][T11550] bridge_slave_0: entered allmulticast mode
[  224.281448][T11550] bridge_slave_0: entered promiscuous mode
[  224.308228][ T5801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.319534][T11550] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.326752][T11550] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.333967][T11550] bridge_slave_1: entered allmulticast mode
[  224.340897][T11550] bridge_slave_1: entered promiscuous mode
[  224.347479][T11491] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  224.355980][T11491] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  224.384076][T11491] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  224.396537][T11491] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  224.406034][T11550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.416847][T11550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.431585][T11571] FAULT_INJECTION: forcing a failure.
[  224.431585][T11571] name failslab, interval 1, probability 0, space 0, times 0
[  224.444447][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.3.2184 Not tainted 6.12.0-rc4-syzkaller #0
[  224.453538][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  224.463584][T11571] Call Trace:
[  224.466851][T11571]  <TASK>
[  224.469766][T11571]  dump_stack_lvl+0xf2/0x150
[  224.474390][T11571]  dump_stack+0x15/0x20
[  224.478529][T11571]  should_fail_ex+0x223/0x230
[  224.483220][T11571]  ? ipv6_add_addr+0x39e/0x820
[  224.488078][T11571]  should_failslab+0x8f/0xb0
[  224.492650][T11571]  __kmalloc_cache_noprof+0x4b/0x2a0
[  224.497940][T11571]  ipv6_add_addr+0x39e/0x820
[  224.502583][T11571]  inet6_addr_add+0x3ff/0x660
[  224.507264][T11571]  addrconf_add_ifaddr+0xe4/0x120
[  224.512319][T11571]  inet6_ioctl+0xb1/0x190
[  224.516642][T11571]  ? ioctl_has_perm+0x286/0x2e0
[  224.521534][T11571]  sock_do_ioctl+0x81/0x260
[  224.526035][T11571]  sock_ioctl+0x46a/0x640
[  224.530392][T11571]  ? __pfx_sock_ioctl+0x10/0x10
[  224.535235][T11571]  __se_sys_ioctl+0xcd/0x140
[  224.539825][T11571]  __x64_sys_ioctl+0x43/0x50
[  224.544547][T11571]  x64_sys_call+0x15cc/0x2d60
[  224.549230][T11571]  do_syscall_64+0xc9/0x1c0
[  224.553767][T11571]  ? clear_bhb_loop+0x55/0xb0
[  224.558486][T11571]  ? clear_bhb_loop+0x55/0xb0
[  224.563225][T11571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.569123][T11571] RIP: 0033:0x7f19099fdff9
[  224.573561][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.593163][T11571] RSP: 002b:00007f1908677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  224.601829][T11571] RAX: ffffffffffffffda RBX: 00007f1909bb5f80 RCX: 00007f19099fdff9
[  224.609793][T11571] RDX: 0000000020000040 RSI: 0000000000008916 RDI: 0000000000000007
[  224.617758][T11571] RBP: 00007f1908677090 R08: 0000000000000000 R09: 0000000000000000
[  224.625721][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.633687][T11571] R13: 0000000000000000 R14: 00007f1909bb5f80 R15: 00007ffc85c396e8
[  224.641655][T11571]  </TASK>
[  224.650031][T11521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.672278][T11550] team0: Port device team_slave_0 added
[  224.688836][T11550] team0: Port device team_slave_1 added
[  224.705986][T11521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.729133][T11550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.736288][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.762371][T11550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.773704][T11550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.780740][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.799452][T11578] syz.3.2187[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.806711][T11550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.807723][T11578] syz.3.2187[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.829412][T11578] syz.3.2187[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.843479][T11521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.883975][T11550] hsr_slave_0: entered promiscuous mode
[  224.890040][T11550] hsr_slave_1: entered promiscuous mode
[  224.896277][T11550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.903839][T11550] Cannot create hsr debugfs directory
[  224.919812][T11521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.940200][T11491] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.961251][T11491] 8021q: adding VLAN 0 to HW filter on device team0
[  224.981728][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.988804][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.997000][ T5801] bridge_slave_1: left allmulticast mode
[  225.002651][ T5801] bridge_slave_1: left promiscuous mode
[  225.008310][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.015997][ T5801] bridge_slave_0: left allmulticast mode
[  225.021710][ T5801] bridge_slave_0: left promiscuous mode
[  225.027427][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.035699][ T5801] bridge_slave_1: left allmulticast mode
[  225.041412][ T5801] bridge_slave_1: left promiscuous mode
[  225.047064][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.055089][ T5801] bridge_slave_0: left allmulticast mode
[  225.060739][ T5801] bridge_slave_0: left promiscuous mode
[  225.066409][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.256133][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.266335][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.276377][ T5801] bond0 (unregistering): Released all slaves
[  225.285179][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.295888][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.306197][ T5801] bond0 (unregistering): Released all slaves
[  225.327590][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.334754][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.350835][T11521] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  225.359826][T11521] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  225.372469][ T5801] hsr_slave_0: left promiscuous mode
[  225.378552][ T5801] hsr_slave_1: left promiscuous mode
[  225.385948][ T5801] hsr_slave_0: left promiscuous mode
[  225.391547][ T5801] hsr_slave_1: left promiscuous mode
[  225.399129][ T5801] veth1_macvtap: left promiscuous mode
[  225.404823][ T5801] veth0_macvtap: left promiscuous mode
[  225.410472][ T5801] veth1_vlan: left promiscuous mode
[  225.415756][ T5801] veth0_vlan: left promiscuous mode
[  225.421349][ T5801] veth1_macvtap: left promiscuous mode
[  225.426968][ T5801] veth0_macvtap: left promiscuous mode
[  225.432533][ T5801] veth1_vlan: left promiscuous mode
[  225.437808][ T5801] veth0_vlan: left promiscuous mode
[  225.558133][ T5801] team0 (unregistering): Port device team_slave_1 removed
[  225.568524][ T5801] team0 (unregistering): Port device team_slave_0 removed
[  225.582474][T11583] syz.4.2189[11583] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.629313][ T5801] team0 (unregistering): Port device team_slave_1 removed
[  225.651154][ T5801] team0 (unregistering): Port device team_slave_0 removed
[  225.682754][T11521] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  225.691765][T11521] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  225.751081][T11521] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.764885][T11521] 8021q: adding VLAN 0 to HW filter on device team0
[  225.774981][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.782103][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.793253][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.800413][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.806636][    C1] net_ratelimit: 599 callbacks suppressed
[  225.806653][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  225.819216][T11521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.833170][T11521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.858669][T11491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.866021][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2191'.
[  225.877357][T11595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2191'.
[  225.911812][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.955600][T11491] veth0_vlan: entered promiscuous mode
[  225.963716][T11491] veth1_vlan: entered promiscuous mode
[  225.995098][T11521] veth0_vlan: entered promiscuous mode
[  226.001823][T11550] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  226.010418][T11550] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  226.022175][T11521] veth1_vlan: entered promiscuous mode
[  226.028745][T11550] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  226.037209][T11550] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  226.051042][T11491] veth0_macvtap: entered promiscuous mode
[  226.065136][T11491] veth1_macvtap: entered promiscuous mode
[  226.077804][T11521] veth0_macvtap: entered promiscuous mode
[  226.086478][T11521] veth1_macvtap: entered promiscuous mode
[  226.102099][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.112733][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.122607][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.133060][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.143806][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.152067][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.162549][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.172462][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.183056][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.192916][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.203392][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.213968][T11491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.227085][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.237603][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.247462][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.257980][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.268827][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.276767][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.287304][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.297181][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.307622][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.317526][T11491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.328010][T11491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.338495][T11491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.352025][T11521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.360851][T11521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.369723][T11521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.378519][T11521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.390283][T11491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.399100][T11491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.408036][T11491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.416904][T11491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.454331][T11550] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.484087][T11550] 8021q: adding VLAN 0 to HW filter on device team0
[  226.500706][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.507836][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.521641][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.528838][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.542439][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'.
[  226.551499][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.559046][T11620] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.567010][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.574544][T11620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.588528][T11624] netlink: 'syz.4.2195': attribute type 10 has an invalid length.
[  226.598438][T11624] batman_adv: batadv0: Adding interface: team0
[  226.604659][T11624] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.629993][T11624] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  226.649335][T11550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.663479][T11626] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.670680][T11626] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.678167][T11624] loop4: detected capacity change from 0 to 1024
[  226.681967][T11626] bridge0: entered allmulticast mode
[  226.695905][T11624] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  226.736005][T11550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.773867][T11624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.786526][T11636] 9pnet: Could not find request transport: O
[  226.807084][T11642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.831334][T11644] syz.4.2195 (11644) used greatest stack depth: 10016 bytes left
[  226.840694][T11550] veth0_vlan: entered promiscuous mode
[  226.853346][T11550] veth1_vlan: entered promiscuous mode
[  226.869084][T11550] veth0_macvtap: entered promiscuous mode
[  226.876785][T11550] veth1_macvtap: entered promiscuous mode
[  226.886281][T11650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.889087][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.906379][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.916264][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.926721][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.936621][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.947085][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.961892][T11550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.971367][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.981973][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.991976][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.002420][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.012311][T11550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.022767][T11550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.033966][T11550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.045671][T11550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.054581][T11550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.063406][T11550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.072170][T11550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.091935][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2200'.
[  227.113551][T11355] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.179983][T11653] loop3: detected capacity change from 0 to 8192
[  227.187185][T11653] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.211820][T11661] 9pnet: Could not find request transport: O
[  227.252418][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  227.279828][T11670] IPv6: Can't replace route, no match found
[  227.304304][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2205'.
[  227.315072][T11673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2205'.
[  227.398669][T11680] syz_tun: entered promiscuous mode
[  227.405205][T11680] batadv_slave_0: entered promiscuous mode
[  227.411573][T11680] hsr1: entered allmulticast mode
[  227.416655][T11680] syz_tun: entered allmulticast mode
[  227.421939][T11680] batadv_slave_0: entered allmulticast mode
[  227.446940][T11680] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  227.469732][T11550] syz_tun (unregistering): left promiscuous mode
[  227.603369][T11684] syz_tun: entered promiscuous mode
[  227.609426][T11684] batadv_slave_0: entered promiscuous mode
[  227.615892][T11684] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  227.623471][T11684] Cannot create hsr debugfs directory
[  227.629648][T11684] hsr1: entered allmulticast mode
[  227.634729][T11684] syz_tun: entered allmulticast mode
[  227.640024][T11684] batadv_slave_0: entered allmulticast mode
[  227.668963][T11684] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  227.697964][T11521] syz_tun (unregistering): left promiscuous mode
[  228.066271][T11694] FAULT_INJECTION: forcing a failure.
[  228.066271][T11694] name failslab, interval 1, probability 0, space 0, times 0
[  228.079066][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.4.2218 Not tainted 6.12.0-rc4-syzkaller #0
[  228.088095][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  228.098178][T11694] Call Trace:
[  228.101541][T11694]  <TASK>
[  228.104540][T11694]  dump_stack_lvl+0xf2/0x150
[  228.109160][T11694]  dump_stack+0x15/0x20
[  228.113318][T11694]  should_fail_ex+0x223/0x230
[  228.118056][T11694]  ? proc_alloc_inode+0x34/0x90
[  228.122944][T11694]  should_failslab+0x8f/0xb0
[  228.127560][T11694]  kmem_cache_alloc_lru_noprof+0x51/0x2a0
[  228.133403][T11694]  proc_alloc_inode+0x34/0x90
[  228.138075][T11694]  ? __pfx_proc_alloc_inode+0x10/0x10
[  228.143512][T11694]  alloc_inode+0x3c/0x160
[  228.147846][T11694]  new_inode+0x1e/0x100
[  228.151983][T11694]  proc_pid_make_inode+0x1d/0xd0
[  228.156909][T11694]  proc_map_files_instantiate+0x74/0x120
[  228.162596][T11694]  proc_fill_cache+0x1b9/0x230
[  228.167410][T11694]  ? __pfx_proc_map_files_instantiate+0x10/0x10
[  228.173646][T11694]  proc_map_files_readdir+0x522/0x690
[  228.179118][T11694]  iterate_dir+0x11d/0x310
[  228.183526][T11694]  __se_sys_getdents64+0x88/0x1a0
[  228.188567][T11694]  ? __pfx_filldir64+0x10/0x10
[  228.193339][T11694]  __x64_sys_getdents64+0x43/0x50
[  228.198353][T11694]  x64_sys_call+0x29b3/0x2d60
[  228.203126][T11694]  do_syscall_64+0xc9/0x1c0
[  228.207616][T11694]  ? clear_bhb_loop+0x55/0xb0
[  228.212314][T11694]  ? clear_bhb_loop+0x55/0xb0
[  228.217044][T11694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.222980][T11694] RIP: 0033:0x7fde3b7edff9
[  228.227410][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.247148][T11694] RSP: 002b:00007fde3a467038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  228.255649][T11694] RAX: ffffffffffffffda RBX: 00007fde3b9a5f80 RCX: 00007fde3b7edff9
[  228.263624][T11694] RDX: 0000000000001002 RSI: 0000000020002f40 RDI: 0000000000000004
[  228.271618][T11694] RBP: 00007fde3a467090 R08: 0000000000000000 R09: 0000000000000000
[  228.279575][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.287563][T11694] R13: 0000000000000000 R14: 00007fde3b9a5f80 R15: 00007ffca787ec98
[  228.295525][T11694]  </TASK>
[  228.338414][T11698] syz_tun: entered promiscuous mode
[  228.344716][T11698] batadv_slave_0: entered promiscuous mode
[  228.351073][T11698] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  228.359384][T11698] Cannot create hsr debugfs directory
[  228.365591][T11698] hsr1: entered allmulticast mode
[  228.370753][T11698] syz_tun: entered allmulticast mode
[  228.376278][T11698] batadv_slave_0: entered allmulticast mode
[  228.399366][T11700] 9pnet: Could not find request transport: O
[  228.403546][T11698] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  228.427161][T11355] syz_tun (unregistering): left promiscuous mode
[  228.569496][   T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.652065][T11717] 9pnet: Could not find request transport: O
[  228.662090][   T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.719803][   T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.751346][T11709] chnl_net:caif_netlink_parms(): no params data found
[  228.780942][   T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.796482][T11709] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.803664][T11709] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.810900][T11709] bridge_slave_0: entered allmulticast mode
[  228.817888][T11709] bridge_slave_0: entered promiscuous mode
[  228.824997][T11709] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.832078][T11709] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.839409][T11709] bridge_slave_1: entered allmulticast mode
[  228.845835][T11709] bridge_slave_1: entered promiscuous mode
[  228.865146][T11709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.875620][T11709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.897171][T11709] team0: Port device team_slave_0 added
[  228.906158][T11709] team0: Port device team_slave_1 added
[  228.916308][   T58] bridge_slave_1: left allmulticast mode
[  228.921956][   T58] bridge_slave_1: left promiscuous mode
[  228.927673][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.935835][   T58] bridge_slave_0: left allmulticast mode
[  228.941464][   T58] bridge_slave_0: left promiscuous mode
[  228.947152][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.026551][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.036781][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.047281][   T58] bond0 (unregistering): Released all slaves
[  229.067909][T11709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.075123][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.101027][T11709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.112345][T11709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.119319][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.145698][T11709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.159330][   T58] batadv_slave_0: left promiscuous mode
[  229.166758][   T58] hsr_slave_0: left promiscuous mode
[  229.172407][   T58] hsr_slave_1: left promiscuous mode
[  229.178430][   T58] batman_adv: batadv0: Removing interface: team0
[  229.185205][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.192654][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.200175][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.207597][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.216466][   T58] veth1_macvtap: left promiscuous mode
[  229.221939][   T58] veth0_macvtap: left promiscuous mode
[  229.227465][   T58] veth1_vlan: left promiscuous mode
[  229.232779][   T58] veth0_vlan: left promiscuous mode
[  229.343724][   T58] team0 (unregistering): Port device team_slave_1 removed
[  229.354663][T11739] loop3: detected capacity change from 0 to 1024
[  229.355418][   T58] team0 (unregistering): Port device team_slave_0 removed
[  229.361474][T11739] ext4: Unknown parameter 'euid<00000000000000000000'
[  229.416023][T11709] hsr_slave_0: entered promiscuous mode
[  229.422132][T11709] hsr_slave_1: entered promiscuous mode
[  229.472168][T11747] netlink: 'syz.3.2232': attribute type 2 has an invalid length.
[  229.512538][T11749] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  229.589066][T11758] IPv6: Can't replace route, no match found
[  229.613030][T11735] chnl_net:caif_netlink_parms(): no params data found
[  229.644350][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  229.674441][T11735] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.681597][T11735] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.688811][T11735] bridge_slave_0: entered allmulticast mode
[  229.695412][T11735] bridge_slave_0: entered promiscuous mode
[  229.702410][T11735] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.709624][T11735] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.716938][T11735] bridge_slave_1: entered allmulticast mode
[  229.723423][T11735] bridge_slave_1: entered promiscuous mode
[  229.733894][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2240'.
[  229.758104][T11777] IPv6: Can't replace route, no match found
[  229.769458][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.794946][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.821990][T11735] team0: Port device team_slave_0 added
[  229.832117][T11781] loop3: detected capacity change from 0 to 512
[  229.832413][T11783] loop1: detected capacity change from 0 to 256
[  229.845368][T11783] FAT-fs (loop1): bogus number of FAT sectors
[  229.851466][T11783] FAT-fs (loop1): Can't find a valid FAT filesystem
[  229.853479][T11735] team0: Port device team_slave_1 added
[  229.872466][T11781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.908402][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.915411][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.927877][   T29] kauditd_printk_skb: 245 callbacks suppressed
[  229.927892][   T29] audit: type=1400 audit(1729495188.657:5209): avc:  denied  { bind } for  pid=11786 comm="syz.1.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  229.941659][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.978765][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'.
[  229.988112][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.995058][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.021129][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.036721][T11709] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  230.046100][T11709] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  230.055171][T11709] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  230.081326][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.085942][T11792] bpf_get_probe_write_proto: 2 callbacks suppressed
[  230.085956][T11792] syz.1.2247[11792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.098869][T11709] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  230.100681][T11792] syz.1.2247[11792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.117300][T11792] syz.1.2247[11792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.131642][T11735] hsr_slave_0: entered promiscuous mode
[  230.149638][T11152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.159056][T11735] hsr_slave_1: entered promiscuous mode
[  230.165242][T11735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.174674][T11735] Cannot create hsr debugfs directory
[  230.198556][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.210404][T11755] chnl_net:caif_netlink_parms(): no params data found
[  230.225591][T11794] IPv6: Can't replace route, no match found
[  230.238059][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.297334][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.320611][T11755] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.327820][T11755] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.335927][T11755] bridge_slave_0: entered allmulticast mode
[  230.342386][T11755] bridge_slave_0: entered promiscuous mode
[  230.352213][T11755] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.359412][T11755] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.366576][T11755] bridge_slave_1: entered allmulticast mode
[  230.372911][T11755] bridge_slave_1: entered promiscuous mode
[  230.397202][   T29] audit: type=1326 audit(1729495189.137:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.422471][   T29] audit: type=1326 audit(1729495189.137:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.428478][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2250'.
[  230.446045][   T29] audit: type=1326 audit(1729495189.137:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.478469][   T29] audit: type=1326 audit(1729495189.157:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.502107][   T29] audit: type=1326 audit(1729495189.157:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.527619][   T29] audit: type=1326 audit(1729495189.197:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.551035][   T29] audit: type=1326 audit(1729495189.197:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.574640][   T29] audit: type=1326 audit(1729495189.197:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.598256][   T29] audit: type=1326 audit(1729495189.197:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19099fdff9 code=0x7ffc0000
[  230.633898][T11755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.654139][T11755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.678546][   T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.701932][T11815] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  230.712397][T11755] team0: Port device team_slave_0 added
[  230.729299][T11709] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.740098][T11755] team0: Port device team_slave_1 added
[  230.756329][T11755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.763478][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.789413][T11755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.801013][T11755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.808034][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.834163][T11755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.866242][T11709] 8021q: adding VLAN 0 to HW filter on device team0
[  230.882377][T11755] hsr_slave_0: entered promiscuous mode
[  230.888484][T11755] hsr_slave_1: entered promiscuous mode
[  230.894938][T11755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.902506][T11755] Cannot create hsr debugfs directory
[  230.908106][T11821] IPv6: Can't replace route, no match found
[  230.924258][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.931342][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.951932][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.959050][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.000373][T11828] syz_tun: entered promiscuous mode
[  231.008856][T11828] batadv_slave_0: entered promiscuous mode
[  231.015171][T11828] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  231.022769][T11828] Cannot create hsr debugfs directory
[  231.029307][T11828] hsr1: entered allmulticast mode
[  231.034377][T11828] syz_tun: entered allmulticast mode
[  231.039652][T11828] batadv_slave_0: entered allmulticast mode
[  231.061845][   T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.064630][T11831] devtmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ€–˜'
[  231.108398][T11832] loop1: detected capacity change from 0 to 2048
[  231.109359][   T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.138437][T11832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.158712][T11574] syz_tun (unregistering): left promiscuous mode
[  231.176477][T11491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.188932][   T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.204100][T11840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  231.205622][T11709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.253378][   T58] bridge_slave_1: left allmulticast mode
[  231.259186][   T58] bridge_slave_1: left promiscuous mode
[  231.264895][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.277648][   T58] bridge_slave_0: left allmulticast mode
[  231.283310][   T58] bridge_slave_0: left promiscuous mode
[  231.289007][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.302174][   T58] bridge_slave_1: left allmulticast mode
[  231.308197][   T58] bridge_slave_1: left promiscuous mode
[  231.313899][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.323695][   T58] bridge_slave_0: left allmulticast mode
[  231.329465][   T58] bridge_slave_0: left promiscuous mode
[  231.335218][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.516449][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.526910][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.537435][   T58] bond0 (unregistering): Released all slaves
[  231.546795][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.557336][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.567318][   T58] bond0 (unregistering): Released all slaves
[  231.656257][   T58] batadv_slave_0: left promiscuous mode
[  231.663515][   T58] hsr_slave_0: left promiscuous mode
[  231.669262][   T58] hsr_slave_1: left promiscuous mode
[  231.675000][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.682423][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.690318][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.697954][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.707076][   T58] batadv_slave_0: left promiscuous mode
[  231.714736][   T58] hsr_slave_0: left promiscuous mode
[  231.720499][   T58] hsr_slave_1: left promiscuous mode
[  231.724053][T11870] 9pnet: Could not find request transport: O
[  231.731888][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.739356][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.747285][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.754697][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.764609][   T58] veth1_macvtap: left promiscuous mode
[  231.770073][   T58] veth0_macvtap: left promiscuous mode
[  231.775802][   T58] veth1_vlan: left promiscuous mode
[  231.781047][   T58] veth0_vlan: left promiscuous mode
[  231.786912][   T58] veth1_macvtap: left promiscuous mode
[  231.792418][   T58] veth0_macvtap: left promiscuous mode
[  231.798060][   T58] veth1_vlan: left promiscuous mode
[  231.803353][   T58] veth0_vlan: left promiscuous mode
[  231.916318][   T58] team0 (unregistering): Port device team_slave_1 removed
[  231.926421][   T58] team0 (unregistering): Port device team_slave_0 removed
[  231.983347][   T58] team0 (unregistering): Port device team_slave_1 removed
[  231.993162][   T58] team0 (unregistering): Port device team_slave_0 removed
[  232.040976][T11709] veth0_vlan: entered promiscuous mode
[  232.053320][T11709] veth1_vlan: entered promiscuous mode
[  232.092303][T11709] veth0_macvtap: entered promiscuous mode
[  232.101255][T11852] chnl_net:caif_netlink_parms(): no params data found
[  232.120659][T11709] veth1_macvtap: entered promiscuous mode
[  232.154113][T11852] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.161299][T11852] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.168553][T11852] bridge_slave_0: entered allmulticast mode
[  232.175290][T11852] bridge_slave_0: entered promiscuous mode
[  232.182054][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.192629][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.203255][T11709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.214975][T11852] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.222013][T11852] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.229394][T11852] bridge_slave_1: entered allmulticast mode
[  232.235975][T11852] bridge_slave_1: entered promiscuous mode
[  232.253534][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.262848][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.273352][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.283944][T11709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.292808][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.309164][T11709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.317925][T11709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.326662][T11709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.335444][T11709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.351043][T11852] team0: Port device team_slave_0 added
[  232.359113][T11852] team0: Port device team_slave_1 added
[  232.377835][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.384892][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.410804][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.424904][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.431875][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.457777][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.484849][T11852] hsr_slave_0: entered promiscuous mode
[  232.490860][T11852] hsr_slave_1: entered promiscuous mode
[  232.497009][T11852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.504653][T11852] Cannot create hsr debugfs directory
[  232.592362][T11884] IPv6: Can't replace route, no match found
[  232.641933][T11886] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  232.722580][T11755] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.741730][T11755] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.759989][   T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.771681][T11755] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.782595][T11755] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.796596][T11735] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  232.818682][   T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.830039][T11735] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  232.843706][T11735] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  232.852980][T11735] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  232.867012][T11896] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  232.879343][   T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.938944][   T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.964992][T11904] syz.4.2277[11904] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.965048][T11904] syz.4.2277[11904] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.965260][T11735] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.986937][T11904] syz.4.2277[11904] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.995424][T11755] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.020732][T11755] 8021q: adding VLAN 0 to HW filter on device team0
[  233.034884][T11735] 8021q: adding VLAN 0 to HW filter on device team0
[  233.051050][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.058231][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.068440][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.075519][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.088180][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.095252][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.111853][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.118941][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.131178][   T58] bridge_slave_1: left allmulticast mode
[  233.136989][   T58] bridge_slave_1: left promiscuous mode
[  233.142597][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.150925][   T58] bridge_slave_0: left allmulticast mode
[  233.156629][   T58] bridge_slave_0: left promiscuous mode
[  233.162445][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.219103][T11908] loop1: detected capacity change from 0 to 1764
[  233.230661][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.236477][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.242119][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.247957][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.253592][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.259252][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.264931][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.270552][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.276219][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.281839][T11908] blackhole_netdev_xmit(): Dropping skb.
[  233.326720][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.337339][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.347431][   T58] bond0 (unregistering): Released all slaves
[  233.416773][   T58] batadv_slave_0: left promiscuous mode
[  233.424821][   T58] hsr_slave_0: left promiscuous mode
[  233.430615][   T58] hsr_slave_1: left promiscuous mode
[  233.436734][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.444160][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.451589][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.459139][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.467784][   T58] veth1_macvtap: left promiscuous mode
[  233.473267][   T58] veth0_macvtap: left promiscuous mode
[  233.478790][   T58] veth1_vlan: left promiscuous mode
[  233.483986][   T58] veth0_vlan: left promiscuous mode
[  233.557710][   T58] team0 (unregistering): Port device team_slave_1 removed
[  233.567838][   T58] team0 (unregistering): Port device team_slave_0 removed
[  233.618167][T11755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.636128][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.699066][T11928] loop4: detected capacity change from 0 to 512
[  233.707420][T11755] veth0_vlan: entered promiscuous mode
[  233.717632][T11755] veth1_vlan: entered promiscuous mode
[  233.717670][T11928] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2281: corrupted in-inode xattr: invalid ea_ino
[  233.729691][T11755] veth0_macvtap: entered promiscuous mode
[  233.743609][T11928] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2281: couldn't read orphan inode 15 (err -117)
[  233.757008][T11755] veth1_macvtap: entered promiscuous mode
[  233.757625][T11928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.771300][T11735] veth0_vlan: entered promiscuous mode
[  233.782859][T11852] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  233.791781][T11852] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  233.799293][T11709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.805412][T11735] veth1_vlan: entered promiscuous mode
[  233.817742][T11852] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  233.829819][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.840345][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.851261][T11755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.860574][T11852] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  233.880882][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.891529][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.902052][T11755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.913951][T11755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.922677][T11755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.931407][T11755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.940303][T11755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.962425][T11735] veth0_macvtap: entered promiscuous mode
[  233.973070][T11735] veth1_macvtap: entered promiscuous mode
[  234.017366][T11852] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.036865][T11852] 8021q: adding VLAN 0 to HW filter on device team0
[  234.047007][T11943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  234.054348][T11852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.066935][T11852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.078783][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.089361][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.099241][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.109702][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.121677][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.131313][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.138444][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.147952][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.155041][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.171118][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'.
[  234.186592][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.197157][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.207009][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.217509][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.228624][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.246569][T11735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.255390][T11735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.264136][T11735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.272949][T11735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.297952][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.349138][   T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.362928][T11960] loop0: detected capacity change from 0 to 512
[  234.385640][T11960] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2289: corrupted in-inode xattr: invalid ea_ino
[  234.403612][T11960] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2289: couldn't read orphan inode 15 (err -117)
[  234.418980][   T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.424777][T11960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.450798][T11755] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.471124][T11852] veth0_vlan: entered promiscuous mode
[  234.486600][T11852] veth1_vlan: entered promiscuous mode
[  234.493584][T11974] loop1: detected capacity change from 0 to 1764
[  234.508982][T11977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2294'.
[  234.522478][   T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.535844][T11852] veth0_macvtap: entered promiscuous mode
[  234.543227][T11852] veth1_macvtap: entered promiscuous mode
[  234.561825][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.572349][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.582314][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.592775][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.602576][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.613107][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.624279][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.632053][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2295'.
[  234.657256][   T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.669632][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.680133][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.689962][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.700416][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.710245][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.720678][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.732475][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.747191][T11852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.756051][T11852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.764788][T11852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.773470][T11852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.774618][T11989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  234.810978][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'.
[  234.820023][T11991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.827427][T11991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.835306][T11991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.842788][T11991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.888556][T11972] chnl_net:caif_netlink_parms(): no params data found
[  234.928690][   T29] kauditd_printk_skb: 139 callbacks suppressed
[  234.928704][   T29] audit: type=1326 audit(1729495193.667:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f882bd0fdc4 code=0x7ffc0000
[  234.958417][   T29] audit: type=1326 audit(1729495193.667:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f882bd0cc8a code=0x7ffc0000
[  234.983794][   T29] audit: type=1326 audit(1729495193.677:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.007374][   T29] audit: type=1326 audit(1729495193.677:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.030870][   T29] audit: type=1326 audit(1729495193.677:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.054302][   T29] audit: type=1326 audit(1729495193.677:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.077893][   T29] audit: type=1326 audit(1729495193.677:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.101420][   T29] audit: type=1326 audit(1729495193.677:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.124950][   T29] audit: type=1326 audit(1729495193.677:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.148551][   T29] audit: type=1326 audit(1729495193.677:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.3.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882bd0dff9 code=0x7ffc0000
[  235.173166][T11972] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.180256][T11972] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.187639][T11972] bridge_slave_0: entered allmulticast mode
[  235.194020][T11972] bridge_slave_0: entered promiscuous mode
[  235.200839][   T58] bridge_slave_1: left allmulticast mode
[  235.206632][   T58] bridge_slave_1: left promiscuous mode
[  235.212455][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.221084][   T58] bridge_slave_0: left allmulticast mode
[  235.226926][   T58] bridge_slave_0: left promiscuous mode
[  235.232595][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.346255][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.356612][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.366871][   T58] bond0 (unregistering): Released all slaves
[  235.376965][T11972] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.384042][T11972] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.391405][T11972] bridge_slave_1: entered allmulticast mode
[  235.397911][T11972] bridge_slave_1: entered promiscuous mode
[  235.422977][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.436277][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.459012][   T58] hsr_slave_0: left promiscuous mode
[  235.471956][   T58] hsr_slave_1: left promiscuous mode
[  235.485218][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.492714][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.500327][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.507829][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.516644][   T58] veth1_macvtap: left promiscuous mode
[  235.522144][   T58] veth0_macvtap: left promiscuous mode
[  235.527713][   T58] veth1_vlan: left promiscuous mode
[  235.532982][   T58] veth0_vlan: left promiscuous mode
[  235.605973][   T58] team0 (unregistering): Port device team_slave_1 removed
[  235.616421][   T58] team0 (unregistering): Port device team_slave_0 removed
[  235.652284][T11972] team0: Port device team_slave_0 added
[  235.658303][T12019] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  235.658834][T11972] team0: Port device team_slave_1 added
[  235.695500][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.702462][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.728500][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.741112][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.748117][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.774142][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.787340][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'.
[  235.812522][T12023] wireguard0: entered promiscuous mode
[  235.818122][T12023] wireguard0: entered allmulticast mode
[  235.853867][T11972] hsr_slave_0: entered promiscuous mode
[  235.862517][T11972] hsr_slave_1: entered promiscuous mode
[  236.001451][T12043] loop3: detected capacity change from 0 to 1764
[  236.056411][T12013] chnl_net:caif_netlink_parms(): no params data found
[  236.109668][T12013] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.116769][T12013] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.123895][T12013] bridge_slave_0: entered allmulticast mode
[  236.130599][T12013] bridge_slave_0: entered promiscuous mode
[  236.139279][T12054] loop2: detected capacity change from 0 to 1764
[  236.162206][T12013] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.169388][T12013] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.176605][T12013] bridge_slave_1: entered allmulticast mode
[  236.183145][T12013] bridge_slave_1: entered promiscuous mode
[  236.193696][T12031] chnl_net:caif_netlink_parms(): no params data found
[  236.213833][T12013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.230938][T12013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.253171][T12013] team0: Port device team_slave_0 added
[  236.266303][T12013] team0: Port device team_slave_1 added
[  236.280891][T12031] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.288000][T12031] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.295442][T12031] bridge_slave_0: entered allmulticast mode
[  236.301918][T12031] bridge_slave_0: entered promiscuous mode
[  236.313359][T12031] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.320495][T12031] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.327670][T12031] bridge_slave_1: entered allmulticast mode
[  236.334026][T12031] bridge_slave_1: entered promiscuous mode
[  236.345255][T12013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.352209][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.378174][T12013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.396168][T12031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.405633][T12013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.412764][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.438701][T12013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.453787][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.466566][T12031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.502175][T12013] hsr_slave_0: entered promiscuous mode
[  236.508934][T12013] hsr_slave_1: entered promiscuous mode
[  236.514781][T12013] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.522350][T12013] Cannot create hsr debugfs directory
[  236.530821][T12031] team0: Port device team_slave_0 added
[  236.537513][T12031] team0: Port device team_slave_1 added
[  236.546245][T11972] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  236.567233][T11972] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  236.576050][T12031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.583021][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.609030][T12031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.619990][T11972] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  236.628963][T12031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.636049][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.662084][T12031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.680981][T11972] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  236.706451][T12031] hsr_slave_0: entered promiscuous mode
[  236.712744][T12031] hsr_slave_1: entered promiscuous mode
[  236.718852][T12031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.726605][T12031] Cannot create hsr debugfs directory
[  236.785878][T12013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.837534][T12013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.857521][T11972] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.869588][T11972] 8021q: adding VLAN 0 to HW filter on device team0
[  236.881297][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.888391][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.899332][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.906476][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.919708][T12013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.969677][T12013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.011383][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.100924][T12013] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  237.111618][T12013] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  237.127657][T12013] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  237.136421][T12013] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  237.171063][T11972] veth0_vlan: entered promiscuous mode
[  237.188675][T11972] veth1_vlan: entered promiscuous mode
[  237.197078][T12067] chnl_net:caif_netlink_parms(): no params data found
[  237.253096][T12067] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.260323][T12067] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.267524][T12067] bridge_slave_0: entered allmulticast mode
[  237.273945][T12067] bridge_slave_0: entered promiscuous mode
[  237.285685][T12067] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.292839][T12067] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.300258][T12067] bridge_slave_1: entered allmulticast mode
[  237.306851][T12067] bridge_slave_1: entered promiscuous mode
[  237.314554][T11972] veth0_macvtap: entered promiscuous mode
[  237.333004][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.343784][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.358789][T11972] veth1_macvtap: entered promiscuous mode
[  237.371187][T12067] team0: Port device team_slave_0 added
[  237.378126][T12067] team0: Port device team_slave_1 added
[  237.395694][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.402655][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.428778][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.439969][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.446964][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.472877][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.503908][T12067] hsr_slave_0: entered promiscuous mode
[  237.509898][T12067] hsr_slave_1: entered promiscuous mode
[  237.515947][T12067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.523479][T12067] Cannot create hsr debugfs directory
[  237.529839][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.540466][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.550379][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.560800][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.571420][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.593496][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.604017][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.613879][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.624343][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.634948][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.644645][T11972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.653366][T11972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.662172][T11972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.670913][T11972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.683262][T12013] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.706967][T12013] 8021q: adding VLAN 0 to HW filter on device team0
[  237.717423][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.740826][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.747982][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.769880][T12105] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  237.778316][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.785394][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.811296][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.830707][T12110] FAULT_INJECTION: forcing a failure.
[  237.830707][T12110] name failslab, interval 1, probability 0, space 0, times 0
[  237.839799][T12013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.843358][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.2.2320 Not tainted 6.12.0-rc4-syzkaller #0
[  237.862633][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  237.872728][T12110] Call Trace:
[  237.876030][T12110]  <TASK>
[  237.878967][T12110]  dump_stack_lvl+0xf2/0x150
[  237.883566][T12110]  dump_stack+0x15/0x20
[  237.887727][T12110]  should_fail_ex+0x223/0x230
[  237.892419][T12110]  ? security_context_to_sid_core+0x66/0x3b0
[  237.898410][T12110]  should_failslab+0x8f/0xb0
[  237.902984][T12110]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[  237.909370][T12110]  kmemdup_nul+0x30/0x80
[  237.913710][T12110]  security_context_to_sid_core+0x66/0x3b0
[  237.919518][T12110]  security_context_to_sid+0x2f/0x40
[  237.924812][T12110]  selinux_lsm_setattr+0x2c7/0x640
[  237.929930][T12110]  selinux_setprocattr+0x4e/0x70
[  237.934986][T12110]  security_setprocattr+0x198/0x1c0
[  237.940207][T12110]  proc_pid_attr_write+0x1e7/0x220
[  237.945302][T12110]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  237.950956][T12110]  vfs_write+0x26c/0x910
[  237.955194][T12110]  ? __fget_files+0x1d4/0x210
[  237.959872][T12110]  ksys_write+0xeb/0x1b0
[  237.964135][T12110]  __x64_sys_write+0x42/0x50
[  237.968758][T12110]  x64_sys_call+0x27dd/0x2d60
[  237.973471][T12110]  do_syscall_64+0xc9/0x1c0
[  237.978080][T12110]  ? clear_bhb_loop+0x55/0xb0
[  237.982756][T12110]  ? clear_bhb_loop+0x55/0xb0
[  237.987492][T12110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.993454][T12110] RIP: 0033:0x7f9f9f49dff9
[  237.997862][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.017548][T12110] RSP: 002b:00007f9f9e111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  238.025943][T12110] RAX: ffffffffffffffda RBX: 00007f9f9f655f80 RCX: 00007f9f9f49dff9
[  238.033898][T12110] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000005
[  238.041854][T12110] RBP: 00007f9f9e111090 R08: 0000000000000000 R09: 0000000000000000
[  238.049980][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.057944][T12110] R13: 0000000000000000 R14: 00007f9f9f655f80 R15: 00007fff76282e38
[  238.065923][T12110]  </TASK>
[  238.088420][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.140866][   T58] bridge_slave_1: left allmulticast mode
[  238.146573][   T58] bridge_slave_1: left promiscuous mode
[  238.152241][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.160075][   T58] bridge_slave_0: left allmulticast mode
[  238.166063][   T58] bridge_slave_0: left promiscuous mode
[  238.171896][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.177381][T12122] loop2: detected capacity change from 0 to 1764
[  238.187137][   T58] bridge_slave_1: left allmulticast mode
[  238.192871][   T58] bridge_slave_1: left promiscuous mode
[  238.198724][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.206578][   T58] bridge_slave_0: left allmulticast mode
[  238.212227][   T58] bridge_slave_0: left promiscuous mode
[  238.217944][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.416791][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.427196][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.437763][   T58] bond0 (unregistering): Released all slaves
[  238.446891][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.457085][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.467332][   T58] bond0 (unregistering): Released all slaves
[  238.478633][T12013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.509609][   T58] hsr_slave_0: left promiscuous mode
[  238.515457][   T58] hsr_slave_1: left promiscuous mode
[  238.521065][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.528673][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.536190][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.543718][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.552719][   T58] hsr_slave_0: left promiscuous mode
[  238.558412][   T58] hsr_slave_1: left promiscuous mode
[  238.566391][   T58] veth1_macvtap: left promiscuous mode
[  238.571857][   T58] veth0_macvtap: left promiscuous mode
[  238.577492][   T58] veth1_vlan: left promiscuous mode
[  238.582695][   T58] veth0_vlan: left promiscuous mode
[  238.588437][   T58] veth1_macvtap: left promiscuous mode
[  238.593896][   T58] veth0_macvtap: left promiscuous mode
[  238.599413][   T58] veth1_vlan: left promiscuous mode
[  238.604661][   T58] veth0_vlan: left promiscuous mode
[  238.719943][   T58] team0 (unregistering): Port device team_slave_1 removed
[  238.729573][   T58] team0 (unregistering): Port device team_slave_0 removed
[  238.788104][   T58] team0 (unregistering): Port device team_slave_1 removed
[  238.798131][   T58] team0 (unregistering): Port device team_slave_0 removed
[  238.866233][T12013] veth0_vlan: entered promiscuous mode
[  238.874026][T12013] veth1_vlan: entered promiscuous mode
[  238.888143][T12013] veth0_macvtap: entered promiscuous mode
[  238.896821][T12013] veth1_macvtap: entered promiscuous mode
[  238.907869][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.918612][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.928470][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.938970][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.950612][T12013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.961659][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.972206][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.982124][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.992691][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.004225][T12013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.014338][T12013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.023057][T12013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.031938][T12013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.040857][T12013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.074057][T12067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.085636][T12031] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  239.094159][T12031] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  239.103954][T12031] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  239.113354][T12031] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  239.126856][T12067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.181918][    C1] net_ratelimit: 1806 callbacks suppressed
[  239.181954][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  239.183526][T12031] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.209277][T12031] 8021q: adding VLAN 0 to HW filter on device team0
[  239.218676][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.225840][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.238251][T12067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.251310][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.258449][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.266648][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2304'.
[  239.309267][T12144] wireguard0: entered promiscuous mode
[  239.314819][T12144] wireguard0: entered allmulticast mode
[  239.328323][T12067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.349633][T12031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.360734][T12149] loop1: detected capacity change from 0 to 512
[  239.367910][T12149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  239.391888][T12149] EXT4-fs (loop1): 1 truncate cleaned up
[  239.395474][T12067] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  239.398221][T12149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.418916][T12067] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  239.429827][T12067] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  239.441911][T12067] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  239.450770][T12013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.469299][T12031] veth0_vlan: entered promiscuous mode
[  239.485421][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'.
[  239.497160][T12161] wireguard0: entered promiscuous mode
[  239.502650][T12161] wireguard0: entered allmulticast mode
[  239.516943][T12031] veth1_vlan: entered promiscuous mode
[  239.562859][T12031] veth0_macvtap: entered promiscuous mode
[  239.571454][T12067] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.579862][T12031] veth1_macvtap: entered promiscuous mode
[  239.591347][T12067] 8021q: adding VLAN 0 to HW filter on device team0
[  239.601561][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.612113][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.621938][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.632639][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.642541][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.653026][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.667531][T12031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.680888][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.699813][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.706903][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.720197][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.730833][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.740683][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.751262][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.761122][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.771559][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.783267][T12031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.795430][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.802472][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.815772][T12031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.824556][T12031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.833247][T12031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.841996][T12031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.851939][T12173] loop1: detected capacity change from 0 to 1764
[  239.862055][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.867768][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.870260][T12067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  239.873452][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.883834][T12067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.889510][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.905508][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.911180][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.916913][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.922621][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.928340][T12173] blackhole_netdev_xmit(): Dropping skb.
[  239.963493][T12067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.976035][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  239.976049][   T29] audit: type=1326 audit(1729495198.717:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.021880][   T29] audit: type=1326 audit(1729495198.717:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.045422][   T29] audit: type=1326 audit(1729495198.727:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.068910][   T29] audit: type=1326 audit(1729495198.727:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.092453][   T29] audit: type=1326 audit(1729495198.727:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.132462][   T29] audit: type=1326 audit(1729495198.807:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.156034][   T29] audit: type=1326 audit(1729495198.807:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.179663][   T29] audit: type=1326 audit(1729495198.807:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.189573][T12067] veth0_vlan: entered promiscuous mode
[  240.203148][   T29] audit: type=1326 audit(1729495198.807:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.232067][   T29] audit: type=1326 audit(1729495198.807:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f49dff9 code=0x7ffc0000
[  240.235728][T12067] veth1_vlan: entered promiscuous mode
[  240.277437][T12167] chnl_net:caif_netlink_parms(): no params data found
[  240.313806][T12204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  240.320776][T12067] veth0_macvtap: entered promiscuous mode
[  240.343577][T12067] veth1_macvtap: entered promiscuous mode
[  240.367916][T12167] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.375155][T12167] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.384211][T12167] bridge_slave_0: entered allmulticast mode
[  240.387899][T12213] FAULT_INJECTION: forcing a failure.
[  240.387899][T12213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.403273][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.0.2338 Not tainted 6.12.0-rc4-syzkaller #0
[  240.403724][T12167] bridge_slave_0: entered promiscuous mode
[  240.412283][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  240.412296][T12213] Call Trace:
[  240.412302][T12213]  <TASK>
[  240.412310][T12213]  dump_stack_lvl+0xf2/0x150
[  240.412355][T12213]  dump_stack+0x15/0x20
[  240.420346][T12167] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.428166][T12213]  should_fail_ex+0x223/0x230
[  240.428215][T12213]  should_fail+0xb/0x10
[  240.431558][T12167] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.434376][T12213]  should_fail_usercopy+0x1a/0x20
[  240.439311][T12167] bridge_slave_1: entered allmulticast mode
[  240.443154][T12213]  _copy_to_user+0x1e/0xa0
[  240.450898][T12167] bridge_slave_1: entered promiscuous mode
[  240.454853][T12213]  sctp_getsockopt_default_send_param+0x3ab/0x400
[  240.454966][T12213]  ? lock_sock_nested+0x10f/0x140
[  240.454992][T12213]  sctp_getsockopt+0x50c/0xab0
[  240.503428][T12213]  sock_common_getsockopt+0x5b/0x70
[  240.508652][T12213]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  240.514670][T12213]  do_sock_getsockopt+0x1ca/0x260
[  240.519766][T12213]  __sys_getsockopt+0x18a/0x200
[  240.524616][T12213]  __x64_sys_getsockopt+0x66/0x80
[  240.529648][T12213]  x64_sys_call+0x11cd/0x2d60
[  240.534343][T12213]  do_syscall_64+0xc9/0x1c0
[  240.538909][T12213]  ? clear_bhb_loop+0x55/0xb0
[  240.543587][T12213]  ? clear_bhb_loop+0x55/0xb0
[  240.548285][T12213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.554254][T12213] RIP: 0033:0x7f127476dff9
[  240.558663][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.578388][T12213] RSP: 002b:00007f12733e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  240.586789][T12213] RAX: ffffffffffffffda RBX: 00007f1274925f80 RCX: 00007f127476dff9
[  240.594806][T12213] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003
[  240.602767][T12213] RBP: 00007f12733e7090 R08: 0000000020000280 R09: 0000000000000000
[  240.610734][T12213] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[  240.618740][T12213] R13: 0000000000000000 R14: 00007f1274925f80 R15: 00007fff3156b5b8
[  240.626703][T12213]  </TASK>
[  240.631114][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.641634][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.651562][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.662104][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.672187][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.682632][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.692439][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.702945][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.713798][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.731073][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.742548][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.762384][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.772992][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.783342][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.793842][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.803723][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.814132][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.824014][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.834476][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.845566][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.856654][T12167] team0: Port device team_slave_0 added
[  240.863285][T12167] team0: Port device team_slave_1 added
[  240.872395][T12067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.881358][T12067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.890300][T12067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.899076][T12067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.921669][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.926457][T12217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  240.928744][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.964109][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.976352][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.983400][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.009499][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.047832][T12167] hsr_slave_0: entered promiscuous mode
[  241.054027][T12167] hsr_slave_1: entered promiscuous mode
[  241.060218][T12167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.067831][T12167] Cannot create hsr debugfs directory
[  241.119105][T12225] loop0: detected capacity change from 0 to 512
[  241.128263][T12225] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2342: corrupted in-inode xattr: invalid ea_ino
[  241.146356][T12225] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2342: couldn't read orphan inode 15 (err -117)
[  241.159079][T12225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.161878][T12228] loop2: detected capacity change from 0 to 512
[  241.179990][T12031] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  241.182606][T12228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.201785][T12031] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  241.226023][T12031] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  241.340298][T11735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.378972][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2346'.
[  241.677526][T12272] syz.1.2349[12272] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.677701][T12272] syz.1.2349[12272] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.690312][T12272] syz.1.2349[12272] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.968815][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.991572][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2350'.
[  242.037564][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.105176][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.201741][   T50] bridge_slave_1: left allmulticast mode
[  242.207501][   T50] bridge_slave_1: left promiscuous mode
[  242.213259][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.221593][   T50] bridge_slave_0: left allmulticast mode
[  242.227306][   T50] bridge_slave_0: left promiscuous mode
[  242.233104][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.259740][T12392] loop3: detected capacity change from 0 to 256
[  242.267426][T12392] FAT-fs (loop3): bogus number of FAT sectors
[  242.273533][T12392] FAT-fs (loop3): Can't find a valid FAT filesystem
[  242.377568][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.388844][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.400593][   T50] bond0 (unregistering): Released all slaves
[  242.423459][T12396] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  242.458588][   T50] hsr_slave_0: left promiscuous mode
[  242.470202][   T50] hsr_slave_1: left promiscuous mode
[  242.476438][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.483975][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.492285][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.499852][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.509210][   T50] veth1_macvtap: left promiscuous mode
[  242.514949][   T50] veth0_macvtap: left promiscuous mode
[  242.520624][   T50] veth1_vlan: left promiscuous mode
[  242.525973][   T50] veth0_vlan: left promiscuous mode
[  242.552369][T12427] loop1: detected capacity change from 0 to 1024
[  242.559457][T12427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  242.572211][T12427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.616538][   T50] team0 (unregistering): Port device team_slave_1 removed
[  242.627341][   T50] team0 (unregistering): Port device team_slave_0 removed
[  242.662709][T12422] IPv6: Can't replace route, no match found
[  242.735445][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'.
[  242.877811][T12167] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  242.886251][T12167] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  242.897072][T12167] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  242.906020][T12167] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  242.941223][T12167] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.953315][T12447] syz.3.2365[12447] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  242.953433][T12447] syz.3.2365[12447] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  242.965011][T12447] syz.3.2365[12447] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  242.968323][T12167] 8021q: adding VLAN 0 to HW filter on device team0
[  243.001801][T12031] ==================================================================
[  243.009908][T12031] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked
[  243.017209][T12031] 
[  243.019530][T12031] read-write to 0xffff8881069876b0 of 8 bytes by task 53 on cpu 1:
[  243.021688][T12167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.027415][T12031]  xas_clear_mark+0x90/0x180
[  243.027441][T12031]  __folio_start_writeback+0x2e2/0x440
[  243.037756][T12167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.042304][T12031]  __block_write_full_folio+0x506/0x8c0
[  243.063638][T12031]  block_write_full_folio+0x293/0x2b0
[  243.069012][T12031]  write_cache_pages+0x62/0x100
[  243.073870][T12031]  blkdev_writepages+0x59/0x90
[  243.078643][T12031]  do_writepages+0x1d8/0x480
[  243.083228][T12031]  __writeback_single_inode+0x89/0x850
[  243.088865][T12031]  writeback_sb_inodes+0x461/0xa30
[  243.094004][T12031]  __writeback_inodes_wb+0x9a/0x1a0
[  243.099205][T12031]  wb_writeback+0x274/0x640
[  243.103701][T12031]  wb_workfn+0x67f/0x940
[  243.107946][T12031]  process_scheduled_works+0x483/0x9a0
[  243.113407][T12031]  worker_thread+0x51d/0x6f0
[  243.117996][T12031]  kthread+0x1d1/0x210
[  243.122061][T12031]  ret_from_fork+0x4b/0x60
[  243.126470][T12031]  ret_from_fork_asm+0x1a/0x30
[  243.131227][T12031] 
[  243.133537][T12031] read to 0xffff8881069876b0 of 8 bytes by task 12031 on cpu 0:
[  243.141165][T12031]  xas_find_marked+0x216/0x660
[  243.145927][T12031]  find_get_entry+0x54/0x390
[  243.150521][T12031]  filemap_get_folios_tag+0x136/0x210
[  243.155899][T12031]  writeback_iter+0x4b0/0x830
[  243.160572][T12031]  write_cache_pages+0x4b/0x100
[  243.165417][T12031]  blkdev_writepages+0x59/0x90
[  243.170182][T12031]  do_writepages+0x1d8/0x480
[  243.174766][T12031]  filemap_fdatawrite_wbc+0xdb/0x100
[  243.180050][T12031]  filemap_flush+0x61/0x90
[  243.184460][T12031]  sync_blockdev_nowait+0x29/0x40
[  243.189484][T12031]  sync_filesystem+0xe3/0x190
[  243.194161][T12031]  generic_shutdown_super+0x46/0x220
[  243.199451][T12031]  kill_block_super+0x2a/0x70
[  243.204127][T12031]  ext4_kill_sb+0x44/0x80
[  243.208452][T12031]  deactivate_locked_super+0x7d/0x1c0
[  243.213823][T12031]  deactivate_super+0x9f/0xb0
[  243.218512][T12031]  cleanup_mnt+0x268/0x2e0
[  243.222927][T12031]  __cleanup_mnt+0x19/0x20
[  243.227338][T12031]  task_work_run+0x13a/0x1a0
[  243.231924][T12031]  do_exit+0x5dd/0x17f0
[  243.236078][T12031]  do_group_exit+0x142/0x150
[  243.240668][T12031]  __x64_sys_exit_group+0x1f/0x20
[  243.245779][T12031]  x64_sys_call+0x2d5d/0x2d60
[  243.250458][T12031]  do_syscall_64+0xc9/0x1c0
[  243.254954][T12031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.260853][T12031] 
[  243.263163][T12031] value changed: 0x000000000000000a -> 0x0000000000000000
[  243.270257][T12031] 
[  243.272574][T12031] Reported by Kernel Concurrency Sanitizer on:
[  243.278752][T12031] CPU: 0 UID: 0 PID: 12031 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller #0
[  243.287943][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  243.298076][T12031] ==================================================================
[  243.310441][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'.
[  243.321348][T12031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.330622][T12451] wireguard0: entered promiscuous mode
[  243.336199][T12451] wireguard0: entered allmulticast mode
[  243.345135][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.352201][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.360803][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.367942][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.400476][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.412741][T12013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.453338][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.575158][T12167] veth0_vlan: entered promiscuous mode
[  243.585839][T12167] veth1_vlan: entered promiscuous mode
[  243.602160][T12167] veth0_macvtap: entered promiscuous mode
[  243.610933][T12167] veth1_macvtap: entered promiscuous mode
[  243.621833][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.632334][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.642230][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.652768][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.662589][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.673071][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.683039][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.693593][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.706084][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.719464][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.729982][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.739828][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.750297][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.760127][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.770559][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.780464][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.790962][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.803377][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.813367][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.828343][T12167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.837169][T12167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.846050][T12167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.854811][T12167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.900485][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.937914][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.021764][   T50] bridge_slave_1: left allmulticast mode
[  244.027468][   T50] bridge_slave_1: left promiscuous mode
[  244.033164][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.040839][   T50] bridge_slave_0: left allmulticast mode
[  244.046594][   T50] bridge_slave_0: left promiscuous mode
[  244.052273][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.137192][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.148549][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.158871][   T50] bond0 (unregistering): Released all slaves
[  244.208083][   T50] hsr_slave_0: left promiscuous mode
[  244.213835][   T50] hsr_slave_1: left promiscuous mode
[  244.219598][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.227108][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.235634][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.243145][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.252519][   T50] veth1_macvtap: left promiscuous mode
[  244.258184][   T50] veth0_macvtap: left promiscuous mode
[  244.263703][   T50] veth1_vlan: left promiscuous mode
[  244.268970][   T50] veth0_vlan: left promiscuous mode
[  244.356471][   T50] team0 (unregistering): Port device team_slave_1 removed
[  244.367792][   T50] team0 (unregistering): Port device team_slave_0 removed