last executing test programs:

18.432658593s ago: executing program 4 (id=7005):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f0000000700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
epoll_create(0x1ff)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8)

17.128465853s ago: executing program 4 (id=7011):
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac1414"], 0xfdef)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}})
write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}})
stat(&(0x7f0000000a80)='./file0\x00', 0x0)
lchown(&(0x7f0000000900)='./file0\x00', 0x0, 0x0)

16.214310587s ago: executing program 4 (id=7019):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ptrace(0x10, 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x0, 0x2, 0x100000000000000})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)

4.549539121s ago: executing program 0 (id=7091):
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[@ANYBLOB="bbaa8600ff0200000000e5ffffffffb7e2efbd00000000013800"/39], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mlockall(0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
kcmp(0x0, 0x0, 0x1, r6, r4)
r7 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)

4.475796188s ago: executing program 3 (id=7092):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x2}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000c, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x100, 0x70bd2b, 0x10000, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)

4.433893142s ago: executing program 2 (id=7093):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xffffffffffffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x8004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x200000005c831, 0xffffffffffffffff, 0x78e2c000)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)

4.176546826s ago: executing program 0 (id=7095):
io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x1, 0x40})
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
listen(r0, 0x82)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="36130c902e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r4=>0x0)
io_getevents(r4, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
socket(0x15, 0x5, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

4.087855524s ago: executing program 2 (id=7096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000100), &(0x7f0000000140)='%pB    \x00'}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000200)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)

4.087357714s ago: executing program 2 (id=7097):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
sched_setaffinity(0x0, 0x0, 0x0)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r0, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_io_uring_setup(0x2ddd, 0x0, &(0x7f0000000180), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x0)
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0)

4.068726136s ago: executing program 1 (id=7099):
ptrace(0x10, 0x0)
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={0x0})
sched_getparam(0x0, 0x0)
r0 = socket$inet(0x2, 0x2000080001, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x4, 0x0, 0x36)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
bind$inet6(r1, 0x0, 0x0)

4.055866246s ago: executing program 3 (id=7100):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = dup(0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = dup2(r2, r1)
truncate(&(0x7f00000002c0)='./file0\x00', 0x0)
io_uring_setup(0x1b91, &(0x7f0000000000))
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)

4.008626061s ago: executing program 1 (id=7101):
socket$inet6_udplite(0xa, 0x2, 0x88)
io_uring_setup(0x2000, &(0x7f0000000240)={0x0, 0xeb23, 0x80})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)

3.969643965s ago: executing program 1 (id=7102):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000340), &(0x7f00000000c0)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000280), 0x5, 0x200202)
unshare(0x68060200)

3.9119604s ago: executing program 0 (id=7103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0)
r4 = socket(0x200000100000011, 0x803, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000140)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c52", 0x27, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
add_key$keyring(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0)

3.907041331s ago: executing program 2 (id=7104):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_read_part_table(0x5c7, &(0x7f0000000000)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0)
unshare(0x64000600)

1.277817372s ago: executing program 4 (id=7089):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r2 = socket$inet6(0xa, 0x80803, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0x40, 0x4d4, 0x32}, 0x0, @in6=@loopback, 0x34ff, 0x0, 0x0, 0x5, 0x28, 0x0, 0x8}}, 0xe8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
connect$inet6(r2, &(0x7f00000000c0), 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0x1ac, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@remote}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback}, 0x0, 0x800}, [@policy={0xac, 0x7, {{@in=@multicast1, @in6=@empty}}}, @extra_flags={0x8}]}, 0x1ac}}, 0x0)

1.276920762s ago: executing program 0 (id=7114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000001040)={0x2, 'pim6reg\x00', {0xaee}, 0x9})
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
getdents64(0xffffffffffffffff, &(0x7f0000001fc0)=""/4086, 0xff6)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x129)

1.276136992s ago: executing program 1 (id=7115):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.270364773s ago: executing program 2 (id=7116):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x4f8, &(0x7f0000000700)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38)

1.267384824s ago: executing program 3 (id=7117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r2=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x10})
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
io_getevents(r2, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r5, 0xfffffffffffffffd, 0x58)
io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)

1.20166914s ago: executing program 4 (id=7105):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
readlink(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000280)={[{@shortname_mixed}, {@utf8}, {@fat=@errors_remount}, {@uni_xlate}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@rodir}, {@fat=@check_strict}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {}, {@fat=@showexec}]}, 0x6, 0x2b8, &(0x7f0000000640)="$eJzs3U9rK1UYB+B30mQSdZEsXInggC5cXW7v1k2K3AtiV16yUBdabAvSBKGFgn8wduXWjQsXfgJB8IO48RsIbgV3ViiMzGSmSdqYJtJUvH2eTd+eOb+Zd6aHdrro6Ycvj472szg8++LX6HSSaPSjH+dJ9KIRta9iTv+bAAD+z87zPP7IJ9bJJRHR2VxbAMAGrfbzvzktf7qTtgCADXr67ntv7+zuPn4nyzrxZPT16aD4zb74ODm+cxgfxzAO4mF04yKifFFoRfm2UJRP8jwfN7NCL14bjU8HRXL0wc/V+Xd+jyjz29GNXjl0+bZR5t/afbydTczkx0Ufz1fX7xf5R9GNFy/Dc/lHC/IxSOP1V2f6fxDd+OWj+CSGsV82Mc1/uZ1lb+bf/vn5+0V7RT4Znw7a5bypfOuOvzQAAAAAAAAAAAAAAAAAAAAAADzDHlR757Sj3L+nGKr239m6KD5pRVbrze/PM8kn9Ylm9wfK83ycx/f1/joPsyzLq4nTfDNeas5uLAgAAAAAAAAAAAAAAAAAAAD318mnnx3tDYcHx7dS1LsBNCPir6cR//Y8/ZmRV2L55HZ1zb3hsFGV83OasyOxVc9JIpa2UdzELT2Wm4rnrvVcFT/8uO4JOzfPaS2+1m0W9eo62ksWP8N21COdapF8l0ZM56Sx4rXSfzqUxzrLL114qLv2vacvlMV4yZxIljX2xm+TJ1eNJFfvIi2f6sJ4qypm4lfWxkrrOTqT+PXvFYndOgAAAAAAAAAAAAAAAAAAYKOmf/274ODZ0mgjb2+sLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9P//79GMa7CK0xO4/jkP75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oG/AwAA//83x1yS")
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

966.077161ms ago: executing program 3 (id=7106):
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100008859f1108205e600064e010203010902120001000000000904000000ffe2b200cdef8462fcd6b92621c1c4254f1b3aaad0a1427aa0ef424c7f68b8b0e594a8466299324c29330aeb47a5ff10ce731c7636e4a66e70d91dcb5deab134eee3b4400b01763dd1cddefce5c4211fcbe939275c6b95f8dac5cc2a21e22dcd4666"], 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="efd4", 0x2}], 0x1}}], 0x1, 0x40080)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x2}, 0x8)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

724.969764ms ago: executing program 3 (id=7107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002401a00000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a31"], 0xcc}}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0))
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

561.406488ms ago: executing program 2 (id=7108):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
ioperm(0x0, 0x12e, 0x8000000000008)
setuid(0xee00)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7c000}], 0x1, 0x33000, 0x0, 0x3)

535.686171ms ago: executing program 0 (id=7109):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$getownex(r5, 0x10, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
open_by_handle_at(r6, 0x0, 0x9e4b)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)

421.230951ms ago: executing program 0 (id=7110):
r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close(r0)
syz_usbip_server_init(0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004a00003c008e6512e6c7fa9957c93c4c9cc7402900e0a0040c4dc64e030001ac1414bb44120801ac1467aa00000000ac141405000000000d00907800"/89], 0x0)
unshare(0x62040200)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x3, 0x2, {"c94a905074760d46ff0938df1eee9f64"}, 0xea9, 0x7, 0x7fffffffffffffff}}}, 0xa0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
socket$inet_udp(0x2, 0x2, 0x0)

419.323872ms ago: executing program 3 (id=7124):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv0}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@barrier}, {@quota}]}, 0x3, 0x44b, &(0x7f00000001c0)="$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")
timerfd_create(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000640)=0x1)
openat(0xffffffffffffff9c, 0x0, 0x5c7341, 0x20)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x301100, 0x110)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

329.13967ms ago: executing program 1 (id=7111):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x2}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000c, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x100, 0x70bd2b, 0x10000, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)

201.636302ms ago: executing program 4 (id=7112):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r0, 0x0, 0x7ffff000)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10)
sendfile(r3, r4, 0x0, 0x10001)

0s ago: executing program 1 (id=7113):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080), 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10)
r7 = fcntl$dupfd(r0, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
write$sndseq(r7, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x1f, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x80000}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @quote={{0x81}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7f}, {0x0, 0x5}, {}, @note={0x4}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x2}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce1300000000000000b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfc}, {}, @raw8={"b134b141793d8609365bda4d"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0xfc)

kernel console output (not intermixed with test programs):

/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  504.828341][   T29] audit: type=1326 audit(1727978642.818:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21276 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  504.851887][   T29] audit: type=1326 audit(1727978642.818:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21276 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  504.877424][   T29] audit: type=1326 audit(1727978642.818:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21276 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  504.908843][T21288] loop4: detected capacity change from 0 to 128
[  504.925906][T20879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.981505][T21299] syz.2.6886[21299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  504.981562][T21299] syz.2.6886[21299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  505.008633][T21299] syz.2.6886[21299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  505.101032][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'.
[  505.195454][T21316] loop2: detected capacity change from 0 to 512
[  505.206502][T21316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.219460][T21316] ext4 filesystem being mounted at /35/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.252490][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  505.275127][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 12: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  505.299204][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 13: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  505.338042][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 14: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  505.360348][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 15: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  505.382645][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  505.407376][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  505.430157][T21316] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.6896: lblock 23 mapped to illegal pblock 18 (length 1)
[  505.454065][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  505.477591][T21316] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.6896: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  505.813099][T21324] ebtables: ebtables: counters copy to user failed while replacing table
[  505.928616][T21330] loop1: detected capacity change from 0 to 512
[  505.968450][T21330] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6899: Failed to acquire dquot type 1
[  505.987052][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6898'.
[  506.014903][T21330] EXT4-fs (loop1): 1 truncate cleaned up
[  506.034620][T21330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.070553][T21330] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.089466][T20879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.104597][T21330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.153337][T21330] loop1: detected capacity change from 0 to 1024
[  506.186578][T21330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.201472][T21330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6899'.
[  506.210466][T21330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6899'.
[  506.278840][T20874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.182423][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6909'.
[  508.229618][  T244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.278452][  T244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.301197][T21364] chnl_net:caif_netlink_parms(): no params data found
[  508.322680][  T244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.351870][T21364] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.359077][T21364] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.368391][T21364] bridge_slave_0: entered allmulticast mode
[  508.375706][T21364] bridge_slave_0: entered promiscuous mode
[  508.387906][  T244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.399384][T21364] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.406466][T21364] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.415825][T21364] bridge_slave_1: entered allmulticast mode
[  508.422272][T21364] bridge_slave_1: entered promiscuous mode
[  508.450804][  T244] bridge_slave_1: left allmulticast mode
[  508.456553][  T244] bridge_slave_1: left promiscuous mode
[  508.462191][  T244] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.471922][  T244] bridge_slave_0: left allmulticast mode
[  508.477625][  T244] bridge_slave_0: left promiscuous mode
[  508.483226][  T244] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.586662][  T244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.599144][  T244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.610739][  T244] bond0 (unregistering): Released all slaves
[  508.626004][T21364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.639567][T21364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.660666][T21364] team0: Port device team_slave_0 added
[  508.667715][T21364] team0: Port device team_slave_1 added
[  508.677024][  T244] hsr_slave_0: left promiscuous mode
[  508.682975][  T244] hsr_slave_1: left promiscuous mode
[  508.688997][  T244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.696474][  T244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.704131][  T244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.711525][  T244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.722087][  T244] veth1_macvtap: left promiscuous mode
[  508.727594][  T244] veth0_macvtap: left promiscuous mode
[  508.733082][  T244] veth1_vlan: left promiscuous mode
[  508.738324][  T244] veth0_vlan: left promiscuous mode
[  508.921468][  T244] team0 (unregistering): Port device team_slave_1 removed
[  508.932448][  T244] team0 (unregistering): Port device team_slave_0 removed
[  509.149111][T21364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.156157][T21364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.182116][T21364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.289548][T21364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.296542][T21364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.322505][T21364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.517157][T21364] hsr_slave_0: entered promiscuous mode
[  509.526018][T21364] hsr_slave_1: entered promiscuous mode
[  509.964265][T21407] loop1: detected capacity change from 0 to 1024
[  509.997413][T21404] loop4: detected capacity change from 0 to 736
[  510.003749][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  510.003761][   T29] audit: type=1326 audit(1727978648.148:11840): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="syz.3.6918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f628decdff9 code=0x0
[  510.034654][T21407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.064862][T21404] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  510.101594][T20888] Symlink component flag not implemented
[  510.122685][T20874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.230736][   T29] audit: type=1400 audit(1727978648.388:11841): avc:  denied  { mac_admin } for  pid=21418 comm="syz.1.6920" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  510.231097][T21419] netlink: 'syz.1.6920': attribute type 9 has an invalid length.
[  510.264693][T21419] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  510.329372][T21420] loop4: detected capacity change from 0 to 512
[  510.428591][T21420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.441192][T21420] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  510.596629][T21364] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  510.611139][T21364] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  510.627117][T21364] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  510.639382][T21364] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  510.685551][T21364] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.685758][T21429] loop1: detected capacity change from 0 to 256
[  510.697058][T21364] 8021q: adding VLAN 0 to HW filter on device team0
[  510.712120][T21429] FAT-fs (loop1): Directory bread(block 64) failed
[  510.719938][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.726988][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.735500][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.742608][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.754372][T21429] FAT-fs (loop1): Directory bread(block 65) failed
[  510.763476][T21429] FAT-fs (loop1): Directory bread(block 66) failed
[  510.765031][T21364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  510.780380][T21429] FAT-fs (loop1): Directory bread(block 67) failed
[  510.788651][T21429] FAT-fs (loop1): Directory bread(block 68) failed
[  510.795899][T21429] FAT-fs (loop1): Directory bread(block 69) failed
[  510.802454][T21429] FAT-fs (loop1): Directory bread(block 70) failed
[  510.809088][T21429] FAT-fs (loop1): Directory bread(block 71) failed
[  510.818908][T21429] FAT-fs (loop1): Directory bread(block 72) failed
[  510.825572][T21429] FAT-fs (loop1): Directory bread(block 73) failed
[  510.851184][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6924'.
[  510.869514][T21431] dummy0: entered promiscuous mode
[  510.874840][T21431] macvtap1: entered promiscuous mode
[  510.880173][T21431] macvtap1: entered allmulticast mode
[  510.885620][T21431] dummy0: entered allmulticast mode
[  510.897280][T21364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.907570][T21429] tipc: Started in network mode
[  510.912443][T21429] tipc: Node identity a6df8d1bd5bc, cluster identity 4711
[  510.919680][T21429] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  510.927919][T21436] dummy0: left allmulticast mode
[  510.933002][T21436] dummy0: left promiscuous mode
[  510.941929][T21429] ªªªªªª: renamed from syzkaller0
[  510.948592][T21429] tipc: Disabling bearer <eth:syzkaller0>
[  511.006656][T20888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.166201][T21364] veth0_vlan: entered promiscuous mode
[  511.177095][T21364] veth1_vlan: entered promiscuous mode
[  511.186001][T21451] loop4: detected capacity change from 0 to 164
[  511.250807][T21454] loop1: detected capacity change from 0 to 256
[  511.264035][T21453] team0: entered promiscuous mode
[  511.269182][T21453] team_slave_0: entered promiscuous mode
[  511.275019][T21453] team_slave_1: entered promiscuous mode
[  511.359166][T21454] FAT-fs (loop1): codepage cp1250 not found
[  511.383205][T21453] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  511.481554][T21453] team0: left promiscuous mode
[  511.486482][T21453] team_slave_0: left promiscuous mode
[  511.491882][T21453] team_slave_1: left promiscuous mode
[  511.522717][T21364] veth0_macvtap: entered promiscuous mode
[  511.530523][T21364] veth1_macvtap: entered promiscuous mode
[  511.544682][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.555253][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.565084][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.575537][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.585360][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.595803][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.595894][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.616099][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.616115][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.616128][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.646475][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.646488][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.646496][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.677262][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.687098][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.687190][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.709599][T21364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.718684][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.729291][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.729303][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.749526][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.759352][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.769812][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.779716][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.790197][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.790216][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.790234][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.790244][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.830734][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.830748][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.850987][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.860826][T21364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.871263][T21364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.873112][T21364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.912509][T21461] loop3: detected capacity change from 0 to 256
[  511.927770][T21364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.936588][T21364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.945387][T21364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.954213][T21364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.969872][T21463] ref_ctr increment failed for inode: 0xb8 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881106064c0
[  511.987461][T21461] FAT-fs (loop3): Directory bread(block 64) failed
[  511.994103][T21461] FAT-fs (loop3): Directory bread(block 65) failed
[  512.001327][T21463] uprobe: syz.1.6932:21463 failed to unregister, leaking uprobe
[  512.011090][T21461] FAT-fs (loop3): Directory bread(block 66) failed
[  512.047419][T21461] FAT-fs (loop3): Directory bread(block 67) failed
[  512.071381][T21461] FAT-fs (loop3): Directory bread(block 68) failed
[  512.087020][T21461] FAT-fs (loop3): Directory bread(block 69) failed
[  512.100421][T21461] FAT-fs (loop3): Directory bread(block 70) failed
[  512.108732][T21461] FAT-fs (loop3): Directory bread(block 71) failed
[  512.117729][T21461] FAT-fs (loop3): Directory bread(block 72) failed
[  512.125717][T21461] FAT-fs (loop3): Directory bread(block 73) failed
[  512.176192][   T29] audit: type=1400 audit(1727978650.328:11842): avc:  denied  { execute } for  pid=21469 comm="syz.0.6934" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=85035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  512.250934][T21461] bio_check_eod: 7187 callbacks suppressed
[  512.250989][T21461] syz.3.6931: attempt to access beyond end of device
[  512.250989][T21461] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  512.287441][   T29] audit: type=1326 audit(1727978650.448:11843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.311131][   T29] audit: type=1326 audit(1727978650.448:11844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.336154][   T29] audit: type=1326 audit(1727978650.448:11845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.359891][   T29] audit: type=1326 audit(1727978650.448:11846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.383595][   T29] audit: type=1326 audit(1727978650.448:11847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.407123][   T29] audit: type=1326 audit(1727978650.448:11848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6978dff9 code=0x7ffc0000
[  512.430712][   T29] audit: type=1326 audit(1727978650.448:11849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21481 comm="syz.4.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a697c00e5 code=0x7ffc0000
[  512.436691][T21480] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  513.388918][T21492] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.397051][T21492] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.407048][T21492] bridge0: entered allmulticast mode
[  513.536987][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6945'.
[  513.680798][T21508] loop0: detected capacity change from 0 to 128
[  513.696944][T21508] vfat: Unknown parameter '00000000000000000000000'
[  513.796522][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6943'.
[  513.976342][T21513] loop1: detected capacity change from 0 to 1024
[  513.986063][T21513] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  514.065968][T21513] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  514.076002][T21513] EXT4-fs (loop1): too many log groups per flexible block group
[  514.083822][T21513] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  514.102300][T21513] EXT4-fs (loop1): mount failed
[  514.127620][T21515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6950'.
[  514.136657][T21515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6950'.
[  514.145602][T21515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6950'.
[  514.154598][T21515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6950'.
[  514.204797][T21519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6951'.
[  514.228810][T21521] loop4: detected capacity change from 0 to 1024
[  514.235759][T21521] EXT4-fs: Ignoring removed oldalloc option
[  514.247816][T21521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.297011][T21526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  514.305595][T21526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  514.313468][T21521] loop4: detected capacity change from 1024 to 0
[  514.322493][T21521] syz.4.6952: attempt to access beyond end of device
[  514.322493][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.339802][T21521] syz.4.6952: attempt to access beyond end of device
[  514.339802][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.357778][T21521] syz.4.6952: attempt to access beyond end of device
[  514.357778][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.370844][T21521] syz.4.6952: attempt to access beyond end of device
[  514.370844][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.385715][T21521] syz.4.6952: attempt to access beyond end of device
[  514.385715][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.398898][T21521] syz.4.6952: attempt to access beyond end of device
[  514.398898][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.413659][T21521] syz.4.6952: attempt to access beyond end of device
[  514.413659][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.429909][T21521] syz.4.6952: attempt to access beyond end of device
[  514.429909][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.443202][T21521] syz.4.6952: attempt to access beyond end of device
[  514.443202][T21521] loop4: rw=0, sector=800, nr_sectors = 2 limit=0
[  514.456817][T21521] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.4.6952: unable to read itable block
[  514.473490][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.490193][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.497009][T21521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  514.509233][T21528] loop0: detected capacity change from 0 to 512
[  514.515655][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.524367][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.524598][T21528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  514.531199][T21521] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.6952: mark_inode_dirty error
[  514.553253][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.561552][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.562154][T21528] EXT4-fs (loop0): 1 truncate cleaned up
[  514.568510][T21521] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.4.6952: unable to read itable block
[  514.586902][T21528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.586939][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.607320][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.614131][T21521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  514.622885][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.631194][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.638049][T21521] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.6952: mark_inode_dirty error
[  514.649500][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.658409][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.665554][T21521] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.4.6952: unable to read itable block
[  514.678429][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.686710][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.693542][T21521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  514.702385][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.710707][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.717510][T21521] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.6952: mark_inode_dirty error
[  514.728895][T21521] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.737183][T21521] EXT4-fs (loop4): I/O error while writing superblock
[  514.773916][T20888] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block
[  514.794067][T20888] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  514.973232][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.974767][T21532] loop1: detected capacity change from 0 to 512
[  514.996860][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.019815][T21534] loop0: detected capacity change from 0 to 1024
[  515.028885][T21532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  515.039731][T21534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.055413][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.057121][T21532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.091306][T21532] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.144621][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.178915][T21532] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  515.643339][T21539] chnl_net:caif_netlink_parms(): no params data found
[  515.744745][T21539] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.751845][T21539] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.759606][T21539] bridge_slave_0: entered allmulticast mode
[  515.768072][T21539] bridge_slave_0: entered promiscuous mode
[  515.775114][T21539] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.782235][T21539] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.791083][T21539] bridge_slave_1: entered allmulticast mode
[  515.797647][T21539] bridge_slave_1: entered promiscuous mode
[  515.818266][T21539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.966805][T21539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.002866][T21539] team0: Port device team_slave_0 added
[  516.014343][T21539] team0: Port device team_slave_1 added
[  516.053868][T20874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.078785][T21539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.085843][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.111884][T21539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.132723][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.206779][T21539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.213743][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.239666][T21539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.275533][T21539] hsr_slave_0: entered promiscuous mode
[  516.281524][T21539] hsr_slave_1: entered promiscuous mode
[  516.287427][T21539] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  516.296755][T21539] Cannot create hsr debugfs directory
[  516.320410][   T11] bridge_slave_1: left allmulticast mode
[  516.326132][   T11] bridge_slave_1: left promiscuous mode
[  516.331771][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.339437][   T11] bridge_slave_0: left allmulticast mode
[  516.345290][   T11] bridge_slave_0: left promiscuous mode
[  516.350944][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.359900][   T11] batman_adv: batadv0: Interface deactivated: gretap1
[  516.447717][   T11] batman_adv: batadv0: Removing interface: gretap1
[  516.482732][T21557] loop1: detected capacity change from 0 to 1024
[  516.511268][T21557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  516.527571][T21557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.613253][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.623477][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.632698][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.632803][T20874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.654737][   T11] bond0 (unregistering): Released all slaves
[  516.696593][   T29] kauditd_printk_skb: 102 callbacks suppressed
[  516.696607][   T29] audit: type=1326 audit(1727978654.858:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  516.727974][T21566] loop1: detected capacity change from 0 to 128
[  516.784485][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.792013][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.818136][   T29] audit: type=1326 audit(1727978654.898:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff76a9adff9 code=0x7ffc0000
[  516.842000][   T29] audit: type=1326 audit(1727978654.898:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff76a9ae033 code=0x7ffc0000
[  516.865487][   T29] audit: type=1326 audit(1727978654.898:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff76a9acadf code=0x7ffc0000
[  516.888946][   T29] audit: type=1326 audit(1727978654.898:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff76a9ae087 code=0x7ffc0000
[  516.912631][   T29] audit: type=1326 audit(1727978654.898:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff76a9ac990 code=0x7ffc0000
[  516.936352][   T29] audit: type=1326 audit(1727978654.898:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff76a9adbfb code=0x7ffc0000
[  516.959821][   T29] audit: type=1326 audit(1727978654.918:11959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff76a9acc8a code=0x7ffc0000
[  516.983353][   T29] audit: type=1326 audit(1727978654.918:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff76a9acc8a code=0x7ffc0000
[  517.006903][   T29] audit: type=1326 audit(1727978654.918:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.1.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff76a9ac897 code=0x7ffc0000
[  517.033752][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.041248][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.055612][   T11] veth1_vlan: left promiscuous mode
[  517.060902][   T11] veth0_vlan: left promiscuous mode
[  517.091747][T21575] loop0: detected capacity change from 0 to 1024
[  517.160565][T21575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.180670][T21575] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.205056][   T11] team0 (unregistering): Port device team_slave_1 removed
[  517.230187][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.241727][   T11] team0 (unregistering): Port device team_slave_0 removed
[  517.332327][T21583] loop1: detected capacity change from 0 to 1024
[  517.344238][T21583] EXT4-fs: Ignoring removed oldalloc option
[  517.358046][T21583] EXT4-fs (loop1): stripe (222) is not aligned with cluster size (16), stripe is disabled
[  517.419824][T21583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.434082][T21560] chnl_net:caif_netlink_parms(): no params data found
[  517.451376][T21583] netlink: 'syz.1.6967': attribute type 1 has an invalid length.
[  517.499136][T20874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.607064][T21560] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.614220][T21560] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.624936][T21560] bridge_slave_0: entered allmulticast mode
[  517.642180][T21560] bridge_slave_0: entered promiscuous mode
[  517.649920][T21560] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.657028][T21560] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.701925][T21560] bridge_slave_1: entered allmulticast mode
[  517.743731][T21560] bridge_slave_1: entered promiscuous mode
[  517.798653][T21604] loop0: detected capacity change from 0 to 1024
[  517.820854][T21604] EXT4-fs: Ignoring removed oldalloc option
[  517.852857][T21560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.898375][T21539] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  517.908658][T21604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.931072][T21560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.941392][T21539] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  518.037702][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.075537][T21560] team0: Port device team_slave_0 added
[  518.081373][T21539] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  518.107726][T21560] team0: Port device team_slave_1 added
[  518.119277][T21539] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  518.208009][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.224099][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.238260][T21560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.245281][T21560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.271323][T21560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.292741][T21560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.296455][T21610] loop0: detected capacity change from 0 to 128
[  518.299880][T21560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.332154][T21560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.439248][   T11] team0: Port device netdevsim1 removed
[  518.448408][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.461039][T21612] IPv6: Can't replace route, no match found
[  518.475218][T21560] hsr_slave_0: entered promiscuous mode
[  518.481194][T21560] hsr_slave_1: entered promiscuous mode
[  518.490208][T21560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  518.508264][T21560] Cannot create hsr debugfs directory
[  518.536940][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.571316][T21539] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.606380][T21539] 8021q: adding VLAN 0 to HW filter on device team0
[  518.614936][T21610] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups)
[  518.637498][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.644577][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.676706][   T11] bridge_slave_1: left allmulticast mode
[  518.682396][   T11] bridge_slave_1: left promiscuous mode
[  518.688079][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.698446][   T11] bridge_slave_0: left allmulticast mode
[  518.704232][   T11] bridge_slave_0: left promiscuous mode
[  518.709896][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.845859][T21539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  518.856303][T21539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  518.870606][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.877663][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.937374][   T11] hsr_slave_0: left promiscuous mode
[  518.943013][   T11] hsr_slave_1: left promiscuous mode
[  518.952608][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.960155][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.969779][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.977261][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.987906][   T11] veth1_macvtap: left promiscuous mode
[  518.993534][   T11] veth0_macvtap: left promiscuous mode
[  518.999059][   T11] veth1_vlan: left promiscuous mode
[  519.004307][   T11] veth0_vlan: left promiscuous mode
[  519.095185][   T11] team0 (unregistering): Port device team_slave_1 removed
[  519.107094][   T11] team0 (unregistering): Port device team_slave_0 removed
[  519.178233][T21539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.239272][T21626] loop0: detected capacity change from 0 to 1024
[  519.250971][T21626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  519.264752][T21626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.318836][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.349096][T21539] veth0_vlan: entered promiscuous mode
[  519.362844][T21539] veth1_vlan: entered promiscuous mode
[  519.372749][T21637] loop0: detected capacity change from 0 to 2048
[  519.393376][T21539] veth0_macvtap: entered promiscuous mode
[  519.400646][T21539] veth1_macvtap: entered promiscuous mode
[  519.457962][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.468460][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.478301][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.488750][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.498565][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.509156][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.518959][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.529388][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.539330][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.550011][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.559828][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.570237][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.580045][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.590459][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.614269][T21539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.680918][T21639] loop0: detected capacity change from 0 to 128
[  519.689693][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.700140][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.710010][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.720453][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.730315][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.740727][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.743536][T21639] vfat: Unknown parameter ''
[  519.750551][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.765684][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.775531][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.786074][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.796010][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.806428][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.816281][T21539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.826774][T21539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.837291][T21539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.846836][T21539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.855606][T21539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.864341][T21539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.873068][T21539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.912902][T21560] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  519.922646][T21560] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  519.943154][T21560] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  519.956115][T21560] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  519.996989][T21560] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.029113][T21560] 8021q: adding VLAN 0 to HW filter on device team0
[  520.038013][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.045078][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.084665][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.091952][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.101729][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6959'.
[  520.122124][T21560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  520.136804][T21644] loop4: detected capacity change from 0 to 164
[  520.186157][T21652] loop4: detected capacity change from 0 to 512
[  520.194207][T21560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.234063][T21652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.248186][T21652] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  520.291907][T21560] veth0_vlan: entered promiscuous mode
[  520.302081][T21560] veth1_vlan: entered promiscuous mode
[  520.321417][T21560] veth0_macvtap: entered promiscuous mode
[  520.337277][T21560] veth1_macvtap: entered promiscuous mode
[  520.356483][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.367006][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.376873][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.387369][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.397259][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.407688][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.417518][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.428182][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.438043][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.448678][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.458578][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.469077][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.478936][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.489441][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.499274][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.509741][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.521903][T21560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.530360][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.540814][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.550817][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.561267][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.571147][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.581602][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.591864][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.602329][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.612156][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.622641][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.632535][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.642958][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.652774][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.663205][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.673097][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.683549][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.695618][T21560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.719131][T21560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.727963][T21560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.736787][T21560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.745564][T21560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.796226][   T11] bridge_slave_1: left allmulticast mode
[  520.801882][   T11] bridge_slave_1: left promiscuous mode
[  520.807639][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.818295][   T11] bridge_slave_0: left allmulticast mode
[  520.824035][   T11] bridge_slave_0: left promiscuous mode
[  520.829691][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.965826][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.977862][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.988362][   T11] bond0 (unregistering): Released all slaves
[  521.054380][T21671] loop0: detected capacity change from 0 to 512
[  521.070082][T21671] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  521.105959][T21539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.106429][T21671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6979: bg 0: block 64: padding at end of block bitmap is not set
[  521.131906][   T11] hsr_slave_0: left promiscuous mode
[  521.139308][T21671] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.6979: Failed to acquire dquot type 0
[  521.152402][   T11] hsr_slave_1: left promiscuous mode
[  521.158308][T21671] EXT4-fs (loop0): 1 truncate cleaned up
[  521.165991][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.173467][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.180950][T21671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.194033][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.201510][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.215019][   T11] veth1_macvtap: left promiscuous mode
[  521.220712][   T11] veth0_macvtap: left promiscuous mode
[  521.226308][   T11] veth1_vlan: left promiscuous mode
[  521.231659][   T11] veth0_vlan: left promiscuous mode
[  521.247781][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.320756][   T11] team0 (unregistering): Port device team_slave_1 removed
[  521.339323][   T11] team0 (unregistering): Port device team_slave_0 removed
[  521.404582][T21685] hub 9-0:1.0: USB hub found
[  521.420556][T21679] netlink: 'syz.4.6980': attribute type 39 has an invalid length.
[  521.430415][T21679] veth1_macvtap: left promiscuous mode
[  521.434044][T21685] hub 9-0:1.0: 8 ports detected
[  521.452833][T21677] netlink: 'syz.2.6981': attribute type 6 has an invalid length.
[  521.462290][T21687] loop1: detected capacity change from 0 to 164
[  521.487135][T21687] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  521.715119][T21687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.737629][T21687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.561058][T21702] loop0: detected capacity change from 0 to 128
[  522.573842][T21703] loop1: detected capacity change from 0 to 512
[  522.586072][T21703] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.6987: corrupted in-inode xattr: invalid ea_ino
[  522.601103][T21703] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6987: couldn't read orphan inode 15 (err -117)
[  522.638923][T21702] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  522.847218][T21702] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  522.871379][T21709] syzkaller0: entered promiscuous mode
[  522.876902][T21709] syzkaller0: entered allmulticast mode
[  522.920137][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6991'.
[  522.991178][T21713] syz_tun: entered promiscuous mode
[  523.001839][T21713] syz_tun: left promiscuous mode
[  523.027208][T21716] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  523.033738][T21716] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  523.041427][T21716] vhci_hcd vhci_hcd.0: Device attached
[  523.064881][T21716] loop0: detected capacity change from 0 to 1024
[  523.076781][T21716] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.092459][T21717] vhci_hcd: connection closed
[  523.092845][   T40] vhci_hcd: stop threads
[  523.101783][   T40] vhci_hcd: release socket
[  523.106213][   T40] vhci_hcd: disconnect device
[  523.147083][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6993'.
[  523.156301][T21722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.164063][T21722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.173362][T21722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.180829][T21722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.272063][T21724] loop1: detected capacity change from 0 to 1024
[  523.280310][T21724] EXT4-fs: Ignoring removed orlov option
[  523.285982][T21724] EXT4-fs: Ignoring removed nomblk_io_submit option
[  523.306351][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  523.306381][   T29] audit: type=1400 audit(1727978661.449:12067): avc:  denied  { read } for  pid=21723 comm="syz.1.6994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  523.344684][T21724] EXT4-fs (loop1): shut down requested (0)
[  523.366705][T21729] loop4: detected capacity change from 0 to 512
[  523.482292][T21729] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.909716][T21736] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.6995: corrupted inode contents
[  523.968597][T21736] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.6995: mark_inode_dirty error
[  524.011114][T21736] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.6995: corrupted inode contents
[  524.033639][T21742] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  524.063149][T21736] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.6995: mark_inode_dirty error
[  524.104769][T21736] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.6995: mark inode dirty (error -117)
[  524.147565][T21736] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[  524.341960][T21738] chnl_net:caif_netlink_parms(): no params data found
[  524.407295][T21738] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.414360][T21738] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.438190][T21738] bridge_slave_0: entered allmulticast mode
[  524.453949][T21738] bridge_slave_0: entered promiscuous mode
[  524.466923][T21738] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.474014][T21738] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.498051][T21738] bridge_slave_1: entered allmulticast mode
[  524.512191][T21738] bridge_slave_1: entered promiscuous mode
[  524.548932][T21738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.573231][T21738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.613874][T21738] team0: Port device team_slave_0 added
[  524.626887][T21738] team0: Port device team_slave_1 added
[  524.660827][T21738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.667824][T21738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.693827][T21738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.754181][T21738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.761149][T21738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.787148][T21738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.880451][T21738] hsr_slave_0: entered promiscuous mode
[  524.894734][T21738] hsr_slave_1: entered promiscuous mode
[  524.906581][T21738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.924432][T21738] Cannot create hsr debugfs directory
[  525.081891][T21737] syz.1.6996 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  525.096007][T21737] CPU: 1 UID: 0 PID: 21737 Comm: syz.1.6996 Tainted: G        W          6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  525.108254][T21737] Tainted: [W]=WARN
[  525.112052][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  525.122189][T21737] Call Trace:
[  525.125477][T21737]  <TASK>
[  525.128398][T21737]  dump_stack_lvl+0xf2/0x150
[  525.132984][T21737]  dump_stack+0x15/0x20
[  525.137179][T21737]  dump_header+0x83/0x2d0
[  525.141586][T21737]  oom_kill_process+0x341/0x4c0
[  525.146490][T21737]  out_of_memory+0x9af/0xbe0
[  525.151123][T21737]  ? css_next_descendant_pre+0x11c/0x140
[  525.156856][T21737]  mem_cgroup_out_of_memory+0x13e/0x190
[  525.162417][T21737]  try_charge_memcg+0x51b/0x810
[  525.167311][T21737]  obj_cgroup_charge_pages+0xbd/0x1a0
[  525.172734][T21737]  __memcg_kmem_charge_page+0x9d/0x170
[  525.178219][T21737]  __alloc_pages_noprof+0x1bc/0x360
[  525.183413][T21737]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  525.188811][T21737]  alloc_pages_noprof+0xe1/0x100
[  525.193847][T21737]  __vmalloc_node_range_noprof+0x72e/0xec0
[  525.199655][T21737]  __kvmalloc_node_noprof+0x121/0x170
[  525.205088][T21737]  ? ip_set_alloc+0x1f/0x30
[  525.209591][T21737]  ip_set_alloc+0x1f/0x30
[  525.213920][T21737]  hash_netiface_create+0x273/0x730
[  525.219118][T21737]  ? __nla_parse+0x40/0x60
[  525.223581][T21737]  ? __pfx_hash_netiface_create+0x10/0x10
[  525.229336][T21737]  ip_set_create+0x359/0x8a0
[  525.233989][T21737]  ? memchr+0x21/0x50
[  525.238040][T21737]  ? __nla_parse+0x40/0x60
[  525.242462][T21737]  nfnetlink_rcv_msg+0x4a9/0x570
[  525.247402][T21737]  netlink_rcv_skb+0x12c/0x230
[  525.252195][T21737]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  525.257657][T21737]  nfnetlink_rcv+0x16c/0x15c0
[  525.262367][T21737]  ? kmem_cache_free+0xdc/0x2d0
[  525.267223][T21737]  ? nlmon_xmit+0x51/0x60
[  525.271745][T21737]  ? __kfree_skb+0x102/0x150
[  525.276363][T21737]  ? consume_skb+0x49/0x160
[  525.280903][T21737]  ? nlmon_xmit+0x51/0x60
[  525.285230][T21737]  ? dev_hard_start_xmit+0x3c1/0x3f0
[  525.290529][T21737]  ? __dev_queue_xmit+0xb8a/0x1fe0
[  525.295727][T21737]  ? ref_tracker_free+0x3a5/0x410
[  525.300818][T21737]  ? __rcu_read_unlock+0x4e/0x70
[  525.305771][T21737]  ? __dev_queue_xmit+0x161/0x1fe0
[  525.310890][T21737]  ? __netlink_deliver_tap+0x495/0x4c0
[  525.316363][T21737]  netlink_unicast+0x599/0x670
[  525.321174][T21737]  netlink_sendmsg+0x5cc/0x6e0
[  525.325946][T21737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  525.331271][T21737]  __sock_sendmsg+0x140/0x180
[  525.335973][T21737]  ____sys_sendmsg+0x312/0x410
[  525.340749][T21737]  __sys_sendmsg+0x1d9/0x270
[  525.345493][T21737]  ? futex_wait+0x18e/0x1c0
[  525.350119][T21737]  __x64_sys_sendmsg+0x46/0x50
[  525.354914][T21737]  x64_sys_call+0x2689/0x2d60
[  525.359695][T21737]  do_syscall_64+0xc9/0x1c0
[  525.364190][T21737]  ? clear_bhb_loop+0x55/0xb0
[  525.368920][T21737]  ? clear_bhb_loop+0x55/0xb0
[  525.373685][T21737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.379594][T21737] RIP: 0033:0x7ff76a9adff9
[  525.384066][T21737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  525.403680][T21737] RSP: 002b:00007ff7695df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  525.412137][T21737] RAX: ffffffffffffffda RBX: 00007ff76ab66130 RCX: 00007ff76a9adff9
[  525.420106][T21737] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007
[  525.428109][T21737] RBP: 00007ff76aa20296 R08: 0000000000000000 R09: 0000000000000000
[  525.436077][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.444042][T21737] R13: 0000000000000000 R14: 00007ff76ab66130 R15: 00007ffdc714dba8
[  525.452017][T21737]  </TASK>
[  525.458673][T21737] memory: usage 307200kB, limit 307200kB, failcnt 207
[  525.465675][T21737] memory+swap: usage 370456kB, limit 9007199254740988kB, failcnt 0
[  525.473659][T21737] kmem: usage 307008kB, limit 9007199254740988kB, failcnt 0
[  525.480947][T21737] Memory cgroup stats for /syz1:
[  525.481215][T21737] cache 188416
[  525.489509][T21737] rss 0
[  525.492257][T21737] shmem 0
[  525.495183][T21737] mapped_file 188416
[  525.499188][T21737] dirty 188416
[  525.502582][T21737] writeback 0
[  525.505854][T21737] workingset_refault_anon 16
[  525.510526][T21737] workingset_refault_file 0
[  525.515021][T21737] swap 64774144
[  525.518475][T21737] swapcached 0
[  525.521852][T21737] pgpgin 223457
[  525.525295][T21737] pgpgout 223409
[  525.528863][T21737] pgfault 277876
[  525.532414][T21737] pgmajfault 17
[  525.535853][T21737] inactive_anon 0
[  525.539526][T21737] active_anon 0
[  525.543113][T21737] inactive_file 196608
[  525.547207][T21737] active_file 0
[  525.550703][T21737] unevictable 0
[  525.554311][T21737] hierarchical_memory_limit 314572800
[  525.559700][T21737] hierarchical_memsw_limit 9223372036854771712
[  525.565878][T21737] total_cache 188416
[  525.569758][T21737] total_rss 0
[  525.573029][T21737] total_shmem 0
[  525.576496][T21737] total_mapped_file 188416
[  525.580999][T21737] total_dirty 188416
[  525.584881][T21737] total_writeback 0
[  525.588702][T21737] total_workingset_refault_anon 16
[  525.593881][T21737] total_workingset_refault_file 0
[  525.599006][T21737] total_swap 64774144
[  525.602980][T21737] total_swapcached 0
[  525.606863][T21737] total_pgpgin 223457
[  525.610844][T21737] total_pgpgout 223409
[  525.614954][T21737] total_pgfault 277876
[  525.619078][T21737] total_pgmajfault 17
[  525.623116][T21737] total_inactive_anon 0
[  525.627311][T21737] total_active_anon 0
[  525.631297][T21737] total_inactive_file 196608
[  525.635907][T21737] total_active_file 0
[  525.639956][T21737] total_unevictable 0
[  525.643923][T21737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6517,pid=19923,uid=0
[  525.658597][T21737] Memory cgroup out of memory: Killed process 19927 (syz.1.6517) total-vm:87116kB, anon-rss:612kB, file-rss:16292kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000
[  526.694337][T21738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.704863][T21738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.850389][T21738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.860745][T21738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.965640][T21738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.976008][T21738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.083864][T21738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.094176][T21738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.221087][T21738] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  527.255922][T21738] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  527.277785][T21738] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  527.300102][T21738] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  527.423296][T21738] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.455277][T21738] 8021q: adding VLAN 0 to HW filter on device team0
[  527.505534][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.512587][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.547708][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.554770][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.604824][T21738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  527.743297][T21738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.952370][T21738] veth0_vlan: entered promiscuous mode
[  527.982792][   T30] oom_reaper: reaped process 19927 (syz.1.6517), now anon-rss:76kB, file-rss:15240kB, shmem-rss:0kB
[  527.999967][T21738] veth1_vlan: entered promiscuous mode
[  528.003999][T21737] syz.1.6996 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  528.019515][T21737] CPU: 1 UID: 0 PID: 21737 Comm: syz.1.6996 Tainted: G        W          6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  528.031823][T21737] Tainted: [W]=WARN
[  528.035670][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  528.038964][T21738] veth0_macvtap: entered promiscuous mode
[  528.045792][T21737] Call Trace:
[  528.045800][T21737]  <TASK>
[  528.045807][T21737]  dump_stack_lvl+0xf2/0x150
[  528.062273][T21737]  dump_stack+0x15/0x20
[  528.066456][T21737]  dump_header+0x83/0x2d0
[  528.070791][T21737]  oom_kill_process+0x341/0x4c0
[  528.071905][T21738] veth1_macvtap: entered promiscuous mode
[  528.075652][T21737]  out_of_memory+0x9af/0xbe0
[  528.085932][T21737]  ? css_next_descendant_pre+0x11c/0x140
[  528.091601][T21737]  mem_cgroup_out_of_memory+0x13e/0x190
[  528.097191][T21737]  try_charge_memcg+0x51b/0x810
[  528.102124][T21737]  obj_cgroup_charge_pages+0xbd/0x1a0
[  528.104664][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.107581][T21737]  __memcg_kmem_charge_page+0x9d/0x170
[  528.117977][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.123389][T21737]  __alloc_pages_noprof+0x1bc/0x360
[  528.133250][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.138331][T21737]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  528.138369][T21737]  alloc_pages_noprof+0xe1/0x100
[  528.148796][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.154117][T21737]  __vmalloc_node_range_noprof+0x72e/0xec0
[  528.159032][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.168804][T21737]  __kvmalloc_node_noprof+0x121/0x170
[  528.174587][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.184955][T21737]  ? ip_set_alloc+0x1f/0x30
[  528.190366][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.200070][T21737]  ip_set_alloc+0x1f/0x30
[  528.200092][T21737]  hash_netiface_create+0x273/0x730
[  528.200144][T21737]  ? __nla_parse+0x40/0x60
[  528.200162][T21737]  ? __pfx_hash_netiface_create+0x10/0x10
[  528.200182][T21737]  ip_set_create+0x359/0x8a0
[  528.204696][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.204708][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.215071][T21737]  ? memchr+0x21/0x50
[  528.219387][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.224549][T21737]  ? __nla_parse+0x40/0x60
[  528.228945][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.228957][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.228974][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.234676][T21737]  nfnetlink_rcv_msg+0x4a9/0x570
[  528.239238][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.249084][T21737]  netlink_rcv_skb+0x12c/0x230
[  528.327998][T21737]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  528.333514][T21737]  nfnetlink_rcv+0x16c/0x15c0
[  528.338192][T21737]  ? kmem_cache_free+0xdc/0x2d0
[  528.343051][T21737]  ? nlmon_xmit+0x51/0x60
[  528.347389][T21737]  ? __kfree_skb+0x102/0x150
[  528.352041][T21737]  ? consume_skb+0x49/0x160
[  528.356586][T21737]  ? nlmon_xmit+0x51/0x60
[  528.360995][T21737]  ? dev_hard_start_xmit+0x3c1/0x3f0
[  528.366331][T21737]  ? __dev_queue_xmit+0xb8a/0x1fe0
[  528.371453][T21737]  ? ref_tracker_free+0x3a5/0x410
[  528.376483][T21737]  ? __rcu_read_unlock+0x4e/0x70
[  528.381579][T21737]  ? __dev_queue_xmit+0x161/0x1fe0
[  528.386718][T21737]  ? __netlink_deliver_tap+0x495/0x4c0
[  528.392277][T21737]  netlink_unicast+0x599/0x670
[  528.397128][T21737]  netlink_sendmsg+0x5cc/0x6e0
[  528.402083][T21737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  528.407372][T21737]  __sock_sendmsg+0x140/0x180
[  528.412050][T21737]  ____sys_sendmsg+0x312/0x410
[  528.416923][T21737]  __sys_sendmsg+0x1d9/0x270
[  528.421521][T21737]  ? futex_wait+0x18e/0x1c0
[  528.425019][T21738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.426021][T21737]  __x64_sys_sendmsg+0x46/0x50
[  528.437946][T21737]  x64_sys_call+0x2689/0x2d60
[  528.442729][T21737]  do_syscall_64+0xc9/0x1c0
[  528.446639][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.447215][T21737]  ? clear_bhb_loop+0x55/0xb0
[  528.447246][T21737]  ? clear_bhb_loop+0x55/0xb0
[  528.457733][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.462316][T21737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.466966][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.466979][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.466987][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.466999][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.467008][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.476774][T21737] RIP: 0033:0x7ff76a9adff9
[  528.476793][T21737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.482659][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.493024][T21737] RSP: 002b:00007ff7695df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.502859][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.513196][T21737] RAX: ffffffffffffffda RBX: 00007ff76ab66130 RCX: 00007ff76a9adff9
[  528.513216][T21737] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007
[  528.513230][T21737] RBP: 00007ff76aa20296 R08: 0000000000000000 R09: 0000000000000000
[  528.513244][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.513258][T21737] R13: 0000000000000000 R14: 00007ff76ab66130 R15: 00007ffdc714dba8
[  528.523049][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.533440][T21737]  </TASK>
[  528.533560][T21737] memory: usage 307200kB, limit 307200kB, failcnt 2818
[  528.537896][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.557757][T21737] memory+swap: usage 370408kB, limit 9007199254740988kB, failcnt 0
[  528.567286][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.575688][T21737] kmem: usage 307008kB, limit 9007199254740988kB, failcnt 0
[  528.586076][T21738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.594041][T21737] Memory cgroup stats for 
[  528.601980][T21738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.609942][T21737] /syz1:
[  528.610143][T21737] cache 188416
[  528.712111][T21737] rss 0
[  528.714899][T21737] shmem 0
[  528.717838][T21737] mapped_file 188416
[  528.721723][T21737] dirty 188416
[  528.725080][T21737] writeback 0
[  528.728372][T21737] workingset_refault_anon 17
[  528.732951][T21737] workingset_refault_file 0
[  528.737441][T21737] swap 64724992
[  528.740897][T21737] swapcached 0
[  528.744249][T21737] pgpgin 223458
[  528.747686][T21737] pgpgout 223410
[  528.751239][T21737] pgfault 277877
[  528.754773][T21737] pgmajfault 18
[  528.758219][T21737] inactive_anon 0
[  528.761849][T21737] active_anon 0
[  528.765293][T21737] inactive_file 188416
[  528.769344][T21737] active_file 8192
[  528.773074][T21737] unevictable 0
[  528.776523][T21737] hierarchical_memory_limit 314572800
[  528.781894][T21737] hierarchical_memsw_limit 9223372036854771712
[  528.788101][T21737] total_cache 188416
[  528.791985][T21737] total_rss 0
[  528.795335][T21737] total_shmem 0
[  528.795812][T21738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.798769][T21737] total_mapped_file 188416
[  528.810375][T21737] total_dirty 188416
[  528.814313][T21737] total_writeback 0
[  528.818110][T21737] total_workingset_refault_anon 17
[  528.823206][T21737] total_workingset_refault_file 0
[  528.826092][T21738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.828227][T21737] total_swap 64724992
[  528.836914][T21738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.840809][T21737] total_swapcached 0
[  528.849494][T21738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.853329][T21737] total_pgpgin 223458
[  528.853338][T21737] total_pgpgout 223410
[  528.853345][T21737] total_pgfault 277877
[  528.853351][T21737] total_pgmajfault 18
[  528.853358][T21737] total_inactive_anon 0
[  528.862029][T21738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.865969][T21737] total_active_anon 0
[  528.894921][T21737] total_inactive_file 188416
[  528.899511][T21737] total_active_file 8192
[  528.903755][T21737] total_unevictable 0
[  528.907727][T21737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6996,pid=21730,uid=0
[  528.922426][T21737] Memory cgroup out of memory: Killed process 21730 (syz.1.6996) total-vm:89296kB, anon-rss:612kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  529.143678][T21737] syz.1.6996 (21737) used greatest stack depth: 5320 bytes left
[  529.191412][T21539] EXT4-fs unmount: 9 callbacks suppressed
[  529.191425][T21539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.252728][T21772] 9pnet_fd: Insufficient options for proto=fd
[  529.275178][T21771] loop2: detected capacity change from 0 to 512
[  529.282809][T21774] loop0: detected capacity change from 0 to 512
[  529.289308][T21774] EXT4-fs: Ignoring removed mblk_io_submit option
[  529.304118][T21771] EXT4-fs: Ignoring removed orlov option
[  529.328937][T21771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  529.338899][T21774] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  529.347392][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7004'.
[  529.368331][T21774] EXT4-fs (loop0): 1 truncate cleaned up
[  529.371944][T21779] loop3: detected capacity change from 0 to 8192
[  529.376367][T21786] loop4: detected capacity change from 0 to 256
[  529.387090][T21774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.411060][T21786] FAT-fs (loop4): codepage cp857 not found
[  529.411261][T21771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  529.449771][T21771] System zones: 1-12
[  529.544529][T21790] netlink: 'syz.1.7006': attribute type 4 has an invalid length.
[  529.554883][T21771] EXT4-fs (loop2): 1 truncate cleaned up
[  529.555145][T21790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7006'.
[  529.561734][T21771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.611714][T21790] netlink: 'syz.1.7006': attribute type 17 has an invalid length.
[  530.414914][T21798] lo speed is unknown, defaulting to 1000
[  530.428493][T21798] lo speed is unknown, defaulting to 1000
[  530.445276][T21798] lo speed is unknown, defaulting to 1000
[  530.462727][T21798] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  530.478207][T21792] xt_CT: No such helper "syz1"
[  530.516523][T21798] lo speed is unknown, defaulting to 1000
[  530.531137][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.536776][T21798] lo speed is unknown, defaulting to 1000
[  530.546292][T21798] lo speed is unknown, defaulting to 1000
[  530.546693][T21798] lo speed is unknown, defaulting to 1000
[  530.547082][T21798] lo speed is unknown, defaulting to 1000
[  530.554594][T21560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.558925][T21798] lo speed is unknown, defaulting to 1000
[  530.580832][T21798] lo speed is unknown, defaulting to 1000
[  530.581131][T21798] lo speed is unknown, defaulting to 1000
[  530.581510][T21798] lo speed is unknown, defaulting to 1000
[  530.932427][   T29] audit: type=1400 audit(1727978668.492:12068): avc:  denied  { setattr } for  pid=21804 comm="syz.4.7011" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  531.554875][T21832] loop0: detected capacity change from 0 to 512
[  531.576536][T21832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.598351][T21832] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  531.714033][   T29] audit: type=1400 audit(1727978669.212:12069): avc:  denied  { lock } for  pid=21837 comm="syz.4.7019" path="socket:[87161]" dev="sockfs" ino=87161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  531.984253][T21874] loop2: detected capacity change from 0 to 512
[  532.002313][T21874] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002]
[  532.015126][T21874] System zones: 0-2, 18-18, 34-34
[  532.021687][T21874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7022: bg 0: block 248: padding at end of block bitmap is not set
[  532.049475][T21874] Quota error (device loop2): write_blk: dquota write failed
[  532.056958][T21874] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  532.078886][T21874] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.7022: Failed to acquire dquot type 1
[  532.116137][T21874] EXT4-fs (loop2): 1 truncate cleaned up
[  532.133916][T21874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.166236][T21874] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  532.289568][T21874] lo speed is unknown, defaulting to 1000
[  532.360550][T21911] lo speed is unknown, defaulting to 1000
[  532.675943][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.717277][T21560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.788877][   T29] audit: type=1400 audit(1727978670.199:12070): avc:  denied  { unmount } for  pid=21917 comm="syz.2.7025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  532.820631][   T29] audit: type=1400 audit(1727978670.227:12071): avc:  denied  { ioctl } for  pid=21917 comm="syz.2.7025" path="socket:[87226]" dev="sockfs" ino=87226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  532.898310][   T29] audit: type=1326 audit(1727978670.301:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21921 comm="syz.0.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  532.922010][   T29] audit: type=1326 audit(1727978670.301:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21921 comm="syz.0.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  532.970569][   T29] audit: type=1326 audit(1727978670.347:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21921 comm="syz.0.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  532.970778][T21922] loop0: detected capacity change from 0 to 2048
[  532.994240][   T29] audit: type=1326 audit(1727978670.347:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21921 comm="syz.0.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  533.089531][T21928] loop1: detected capacity change from 0 to 128
[  533.097264][T21922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.115652][T21922] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.158233][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.303042][T21942] loop0: detected capacity change from 0 to 8192
[  533.353824][T21942]  loop0: p1[EZD] p2 p4
[  533.361678][T21942] loop0: p1 size 1465778176 extends beyond EOD, truncated
[  533.377704][T21942] loop0: p2 start 65535 is beyond EOD, truncated
[  533.384054][T21942] loop0: p4 size 65536 extends beyond EOD, truncated
[  533.651642][T21956] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  533.995715][T21962] tipc: Started in network mode
[  534.000628][T21962] tipc: Node identity 4ec24dc457c7, cluster identity 4711
[  534.007843][T21962] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  534.016590][T21962] ªªªªªª: renamed from syzkaller0
[  534.022907][T21962] tipc: Disabling bearer <eth:syzkaller0>
[  534.193335][T21971] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  534.199880][T21971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  534.207510][T21971] vhci_hcd vhci_hcd.0: Device attached
[  534.265076][T21971] lo speed is unknown, defaulting to 1000
[  534.304039][T21975] lo speed is unknown, defaulting to 1000
[  534.379374][T21972] vhci_hcd: connection closed
[  534.379903][T21905] vhci_hcd: stop threads
[  534.388906][T21905] vhci_hcd: release socket
[  534.393393][T21905] vhci_hcd: disconnect device
[  534.439574][T14277] vhci_hcd: vhci_device speed not set
[  534.972150][T21978] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  535.106152][T21986] loop1: detected capacity change from 0 to 128
[  535.113241][T21986] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  535.130668][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7044'.
[  535.130731][T21986] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  535.155206][T21986] ext2 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  535.193752][T21990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7046'.
[  535.216732][T20874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.886322][T22000] lo speed is unknown, defaulting to 1000
[  535.946496][T22000] chnl_net:caif_netlink_parms(): no params data found
[  536.051698][T22000] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.058759][T22000] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.066058][T22000] bridge_slave_0: entered allmulticast mode
[  536.072585][T22000] bridge_slave_0: entered promiscuous mode
[  536.079693][T22000] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.086847][T22000] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.094197][T22000] bridge_slave_1: entered allmulticast mode
[  536.100679][T22000] bridge_slave_1: entered promiscuous mode
[  536.141594][T22000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.161159][T22000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.260277][T22000] team0: Port device team_slave_0 added
[  536.305276][T22000] team0: Port device team_slave_1 added
[  536.361023][T22000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.368074][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.394122][T22000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.452883][T22000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.459908][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.485882][T22000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.524669][T22000] hsr_slave_0: entered promiscuous mode
[  536.540428][T22000] hsr_slave_1: entered promiscuous mode
[  536.550211][T22000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.561893][T22000] Cannot create hsr debugfs directory
[  536.671999][T22000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.739731][T22000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.794222][T22000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.836122][T22000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.940275][T22000] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  536.958257][T22000] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  536.972413][T22000] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  537.031107][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  537.031192][   T29] audit: type=1400 audit(1727978930.120:12141): avc:  denied  { ioctl } for  pid=22028 comm="syz.3.7053" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  537.071726][T22000] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  537.328680][T22000] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.353221][T22000] 8021q: adding VLAN 0 to HW filter on device team0
[  537.375357][T21871] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.382414][T21871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.383797][   T29] audit: type=1400 audit(1727978930.434:12142): avc:  denied  { write } for  pid=22032 comm="syz.2.7054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  537.413912][T21871] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.420992][T21871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.491925][T22000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.502301][T22000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.608511][T22038] loop0: detected capacity change from 0 to 4096
[  537.645191][T22038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.668865][T22000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.702718][T22038] siw: device registration error -23
[  537.732827][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.797884][T22000] veth0_vlan: entered promiscuous mode
[  537.854366][T22000] veth1_vlan: entered promiscuous mode
[  537.876469][T22056] lo speed is unknown, defaulting to 1000
[  537.899795][T22000] veth0_macvtap: entered promiscuous mode
[  537.934154][T22000] veth1_macvtap: entered promiscuous mode
[  537.996258][T22061] loop3: detected capacity change from 0 to 256
[  538.015400][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.025931][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.035766][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.046283][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.046490][T22061] FAT-fs (loop3): Directory bread(block 64) failed
[  538.056085][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.056101][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.056114][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.093470][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.101581][T22061] FAT-fs (loop3): Directory bread(block 65) failed
[  538.103284][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.117944][T22061] FAT-fs (loop3): Directory bread(block 66) failed
[  538.120134][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.136552][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.137510][T22061] FAT-fs (loop3): Directory bread(block 67) failed
[  538.146957][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.146978][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.170691][T22061] FAT-fs (loop3): Directory bread(block 68) failed
[  538.173672][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.190001][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.192251][T22061] FAT-fs (loop3): Directory bread(block 69) failed
[  538.200461][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.258538][T22063] loop0: detected capacity change from 0 to 256
[  538.322923][T22063] FAT-fs (loop0): codepage cp1250 not found
[  538.443975][T22061] FAT-fs (loop3): Directory bread(block 70) failed
[  538.476050][T22000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.518488][T22061] FAT-fs (loop3): Directory bread(block 71) failed
[  538.541406][T22061] FAT-fs (loop3): Directory bread(block 72) failed
[  538.547996][T22061] FAT-fs (loop3): Directory bread(block 73) failed
[  538.590856][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.601420][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.611381][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.621890][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.631706][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.642131][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.651965][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.662411][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.672206][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.682650][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.692462][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.702877][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.712697][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.723098][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.732921][T22000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.743326][T22000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.754479][T22000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.770292][T22000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.779086][T22000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.787781][T22000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.796490][T22000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.860117][T22061] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  538.869142][T22061] ªªªªªª: renamed from syzkaller0
[  538.880563][   T29] audit: type=1326 audit(1727978931.828:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  538.888542][T22061] tipc: Disabling bearer <eth:syzkaller0>
[  538.904195][   T29] audit: type=1326 audit(1727978931.828:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.020232][   T29] audit: type=1326 audit(1727978931.828:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.043869][   T29] audit: type=1326 audit(1727978931.828:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.067504][   T29] audit: type=1326 audit(1727978931.828:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.091275][   T29] audit: type=1326 audit(1727978931.883:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.114965][   T29] audit: type=1326 audit(1727978931.883:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.138579][   T29] audit: type=1326 audit(1727978931.883:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22066 comm="syz.0.7062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  539.243409][T22076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  539.250009][T22076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  539.257698][T22076] vhci_hcd vhci_hcd.0: Device attached
[  539.277435][T22084] loop1: detected capacity change from 0 to 512
[  539.300605][T22084] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  539.318468][T22076] lo speed is unknown, defaulting to 1000
[  539.325776][T22084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  539.352158][T22084] EXT4-fs (loop1): orphan cleanup on readonly fs
[  539.362048][T22084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7066: bg 0: block 361: padding at end of block bitmap is not set
[  539.376440][T22079] vhci_hcd: connection closed
[  539.376546][T21905] vhci_hcd: stop threads
[  539.385567][T21905] vhci_hcd: release socket
[  539.390001][T21905] vhci_hcd: disconnect device
[  539.401332][T22091] bridge0: port 3(veth0_to_bond) entered blocking state
[  539.405147][T22093] loop0: detected capacity change from 0 to 512
[  539.408334][T22091] bridge0: port 3(veth0_to_bond) entered disabled state
[  539.408652][T22091] veth0_to_bond: entered allmulticast mode
[  539.420706][T22084] EXT4-fs (loop1): Remounting filesystem read-only
[  539.422091][T22091] veth0_to_bond: entered promiscuous mode
[  539.438437][T22084] EXT4-fs (loop1): 1 truncate cleaned up
[  539.439783][T22091] bridge0: port 3(veth0_to_bond) entered blocking state
[  539.450712][T22093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  539.452060][T22091] bridge0: port 3(veth0_to_bond) entered forwarding state
[  539.470628][T22084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  539.484956][T22093] EXT4-fs (loop0): 1 truncate cleaned up
[  539.494834][T22093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.508197][T22084] SELinux: (dev loop1, type ext4) getxattr errno 5
[  539.515087][T22084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  539.526528][T22096] loop3: detected capacity change from 0 to 128
[  539.540350][T22096] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  539.572799][T22096] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.584154][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.708640][T21738] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  539.828321][T22109] lo speed is unknown, defaulting to 1000
[  539.948386][T22111] loop3: detected capacity change from 0 to 256
[  540.145620][T22111] FAT-fs (loop3): codepage cp1250 not found
[  540.856934][T22122] loop2: detected capacity change from 0 to 256
[  540.883940][T22122] FAT-fs (loop2): Directory bread(block 64) failed
[  540.903750][T22125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7078'.
[  540.923708][T22122] FAT-fs (loop2): Directory bread(block 65) failed
[  540.938361][T22122] FAT-fs (loop2): Directory bread(block 66) failed
[  540.959706][T22122] FAT-fs (loop2): Directory bread(block 67) failed
[  540.977863][T22122] FAT-fs (loop2): Directory bread(block 68) failed
[  540.992038][T22122] FAT-fs (loop2): Directory bread(block 69) failed
[  541.011696][T22129] loop0: detected capacity change from 0 to 1024
[  541.031437][T22122] FAT-fs (loop2): Directory bread(block 70) failed
[  541.038316][T22122] FAT-fs (loop2): Directory bread(block 71) failed
[  541.045956][T22129] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  541.067318][T22122] FAT-fs (loop2): Directory bread(block 72) failed
[  541.076477][T22122] FAT-fs (loop2): Directory bread(block 73) failed
[  541.083877][T22129] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  541.101159][T22129] EXT4-fs (loop0): orphan cleanup on readonly fs
[  541.121697][T22129] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.7079: Freeing blocks not in datazone - block = 0, count = 4096
[  541.146341][T22129] EXT4-fs (loop0): 1 orphan inode deleted
[  541.152326][T22129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  541.164493][T22122] tipc: Started in network mode
[  541.169615][T22122] tipc: Node identity 926315619ece, cluster identity 4711
[  541.177005][T22122] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  541.226724][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.237676][T22135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7080'.
[  541.264511][T22122] tipc: Disabling bearer <eth:syzkaller0>
[  541.272847][    T8] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4
[  541.280545][    T8] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2
[  541.288484][    T8] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3
[  541.296443][    T8] hid-generic 0000:3000000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  541.327318][T22140] lo speed is unknown, defaulting to 1000
[  541.330670][T22144] macvlan0: entered allmulticast mode
[  541.338443][T22144] veth1_vlan: entered allmulticast mode
[  541.363582][T22144] veth1_vlan: left allmulticast mode
[  541.382516][T22144] macvlan0 (unregistering): left allmulticast mode
[  541.430810][T22147] IPVS: set_ctl: invalid protocol: 158 255.255.255.255:0
[  541.455978][T22149] loop1: detected capacity change from 0 to 1024
[  541.472234][T22149] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  541.483164][T22149] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  541.527954][T22149] JBD2: no valid journal superblock found
[  541.533733][T22149] EXT4-fs (loop1): Could not load journal inode
[  541.688899][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7085'.
[  542.364740][T22157] loop3: detected capacity change from 0 to 1024
[  542.394691][T22157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  542.507497][T22162] loop0: detected capacity change from 0 to 512
[  542.514321][T22162] EXT4-fs: Ignoring removed nobh option
[  542.519974][T22162] EXT4-fs: Ignoring removed nobh option
[  542.597717][T22157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.775954][T22166] loop2: detected capacity change from 0 to 256
[  542.795444][T22162] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  542.803963][T22162] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.7098: invalid indirect mapped block 2683928664 (level 1)
[  542.818544][T22162] EXT4-fs (loop0): 1 truncate cleaned up
[  542.824478][T22162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.928666][T22166] FAT-fs (loop2): codepage cp1250 not found
[  542.945987][T22157] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7088: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  543.239497][T21364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.273139][T21738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.336404][   T29] kauditd_printk_skb: 319 callbacks suppressed
[  543.336419][   T29] audit: type=1326 audit(1727978935.917:12470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.367180][   T29] audit: type=1326 audit(1727978935.917:12471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.390756][   T29] audit: type=1326 audit(1727978935.917:12472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.414246][   T29] audit: type=1326 audit(1727978935.917:12473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.437995][   T29] audit: type=1326 audit(1727978935.917:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.461729][   T29] audit: type=1326 audit(1727978935.917:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.485312][   T29] audit: type=1326 audit(1727978935.917:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.508856][   T29] audit: type=1326 audit(1727978935.917:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.532597][   T29] audit: type=1326 audit(1727978935.917:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.556278][   T29] audit: type=1326 audit(1727978935.917:12479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108ef1dff9 code=0x7ffc0000
[  543.580503][T22185] syz.2.7093[22185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  543.580600][T22185] syz.2.7093[22185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  543.592846][T22185] syz.2.7093[22185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  543.649553][T21905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.713853][T22171] lo speed is unknown, defaulting to 1000
[  543.764883][T21905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.792399][T22203] loop2: detected capacity change from 0 to 1024
[  543.809123][T22203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  543.832721][T22203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.856299][T21905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.882491][T21560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.895595][T22171] chnl_net:caif_netlink_parms(): no params data found
[  544.098943][T21905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.278684][T21905] bridge_slave_1: left allmulticast mode
[  544.284356][T21905] bridge_slave_1: left promiscuous mode
[  544.290078][T21905] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.320906][T21905] bridge_slave_0: left allmulticast mode
[  544.326636][T21905] bridge_slave_0: left promiscuous mode
[  544.332319][T21905] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.426056][T22225] loop2: detected capacity change from 0 to 2048
[  544.829297][T21905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.841337][T21905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.851376][T21905] bond0 (unregistering): Released all slaves
[  544.859392][T22219] lo speed is unknown, defaulting to 1000
[  544.884052][T22225] lo speed is unknown, defaulting to 1000
[  544.884425][T22171] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.896873][T22171] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.906017][T22171] bridge_slave_0: entered allmulticast mode
[  544.912479][T22171] bridge_slave_0: entered promiscuous mode
[  544.930330][T22171] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.937515][T22171] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.944762][T22171] bridge_slave_1: entered allmulticast mode
[  544.953662][T22171] bridge_slave_1: entered promiscuous mode
[  544.972030][T21905] hsr_slave_0: left promiscuous mode
[  544.977930][T21905] hsr_slave_1: left promiscuous mode
[  544.985414][T21905] veth0_macvtap: left promiscuous mode
[  544.991148][T21905] veth1_vlan: left promiscuous mode
[  544.996361][T21905] veth0_vlan: left promiscuous mode
[  545.089185][T21905] team0 (unregistering): Port device team_slave_1 removed
[  545.102176][T21905] team0 (unregistering): Port device team_slave_0 removed
[  545.174993][T22171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.218477][T22171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.237801][T22171] team0: Port device team_slave_0 added
[  545.244319][T22171] team0: Port device team_slave_1 added
[  545.259249][T22171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.266282][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.292171][T22171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.303462][T22171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.310486][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.336418][T22171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.362686][T22171] hsr_slave_0: entered promiscuous mode
[  545.368945][T22171] hsr_slave_1: entered promiscuous mode
[  545.374878][T22171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.382433][T22171] Cannot create hsr debugfs directory
[  545.655234][T22171] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  545.665968][T22171] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  545.684151][T22171] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  545.692684][T22171] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  545.712422][T22171] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.719489][T22171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.748826][T22171] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.758607][T21851] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.772806][T22171] 8021q: adding VLAN 0 to HW filter on device team0
[  545.783184][T21871] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.790231][T21871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.812141][T22171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  545.822540][T22171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  545.838634][T21905] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.845694][T21905] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.896439][T22171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.010211][T22171] veth0_vlan: entered promiscuous mode
[  546.018425][T22171] veth1_vlan: entered promiscuous mode
[  546.035717][T22171] veth0_macvtap: entered promiscuous mode
[  546.043376][T22171] veth1_macvtap: entered promiscuous mode
[  546.055120][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.065576][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.075602][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.086064][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.095935][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.106414][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.116288][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.126719][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.136579][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.147092][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.156971][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.167414][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.177228][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.187709][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.197523][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.207961][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.217821][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.228258][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.240092][T22171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.252012][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.262612][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.272499][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.282971][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.292875][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.303317][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.313125][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.323624][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.333498][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.343951][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.353745][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.364181][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.373986][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.384451][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.394249][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.404673][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.414484][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.424897][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.436244][T22171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.445897][T22171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.454652][T22171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.463429][T22171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.472223][T22171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.527659][T22250] loop2: detected capacity change from 0 to 512
[  546.535378][T22250] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  546.551578][T22250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  546.559784][T22250] EXT4-fs (loop2): orphan cleanup on readonly fs
[  546.569663][T22253] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7089'.
[  546.579487][T22250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7116: bg 0: block 361: padding at end of block bitmap is not set
[  546.672297][T22250] EXT4-fs (loop2): Remounting filesystem read-only
[  546.689858][T22250] EXT4-fs (loop2): 1 truncate cleaned up
[  546.690274][T22250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  546.690317][T22250] SELinux: (dev loop2, type ext4) getxattr errno 5
[  546.690643][T22250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  546.738427][T22247] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7114'.
[  546.738477][T22247] 0ªX¹¦À: renamed from caif0
[  546.812255][T22267] loop4: detected capacity change from 0 to 256
[  546.831880][T22247] 0ªX¹¦À: entered allmulticast mode
[  546.831894][T22247] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  546.859321][T22268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.860308][T22268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.042318][T22267] FAT-fs (loop4): codepage cp1250 not found
[  547.114050][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7107'.
[  547.136941][T22271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7107'.
[  547.137061][T22271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.137094][T22271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.137566][T22271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.137593][T22271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.281349][T22275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  547.391273][T22280] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  547.397854][T22280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  547.405535][T22280] vhci_hcd vhci_hcd.0: Device attached
[  547.415116][T22278] loop3: detected capacity change from 0 to 512
[  547.429299][T22278] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  547.463102][T22280] lo speed is unknown, defaulting to 1000
[  547.485057][T22278] EXT4-fs (loop3): 1 truncate cleaned up
[  547.494936][T22278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.528726][T22289] loop2: detected capacity change from 0 to 512
[  547.564635][T22289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  547.596953][T22278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7124'.
[  547.621579][T22283] vhci_hcd: connection closed
[  547.624041][T21871] vhci_hcd: stop threads
[  547.633052][T21871] vhci_hcd: release socket
[  547.637474][T21871] vhci_hcd: disconnect device
[  547.643849][    T8] vhci_hcd: vhci_device speed not set
[  547.649017][T22291] loop4: detected capacity change from 0 to 1024
[  547.657324][T22289] EXT4-fs (loop2): 1 truncate cleaned up
[  547.665780][T22289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.668293][T22278] veth0_to_bond: left allmulticast mode
[  547.683465][T22278] veth0_to_bond: left promiscuous mode
[  547.689093][T22278] bridge0: port 3(veth0_to_bond) entered disabled state
[  547.717997][T22291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  547.745396][T22291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[  547.759776][T22278] bridge_slave_1: left allmulticast mode
[  547.762410][T22291] System zones: 0-1, 3-36
[  547.765591][T22278] bridge_slave_1: left promiscuous mode
[  547.775636][T22278] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.790441][T22291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.825450][T22278] bridge_slave_0: left allmulticast mode
[  547.831158][T22278] bridge_slave_0: left promiscuous mode
[  547.836813][T22278] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.873211][T22298] sg_write: data in/out 231/210 bytes for SCSI command 0x0-- guessing data in;
[  547.873211][T22298]    program syz.1.7113 not setting count and/or reply_len properly
[  547.999599][T21738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.011547][T22300] ==================================================================
[  548.019647][T22300] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  548.028865][T22300] 
[  548.031186][T22300] write to 0xffff888107d753b8 of 4 bytes by task 22291 on cpu 0:
[  548.038892][T22300]  writeback_single_inode+0x14f/0x3f0
[  548.044280][T22300]  sync_inode_metadata+0x5c/0x90
[  548.049226][T22300]  generic_buffers_fsync_noflush+0xd8/0x120
[  548.055124][T22300]  ext4_sync_file+0x1ff/0x6c0
[  548.059808][T22300]  vfs_fsync_range+0x116/0x130
[  548.064579][T22300]  ext4_buffered_write_iter+0x326/0x370
[  548.070131][T22300]  ext4_file_write_iter+0x293/0xe10
[  548.075328][T22300]  iter_file_splice_write+0x5f1/0x980
[  548.080691][T22300]  direct_splice_actor+0x160/0x2c0
[  548.085794][T22300]  splice_direct_to_actor+0x302/0x670
[  548.091156][T22300]  do_splice_direct+0xd7/0x150
[  548.095910][T22300]  do_sendfile+0x39b/0x970
[  548.100317][T22300]  __x64_sys_sendfile64+0x110/0x150
[  548.105507][T22300]  x64_sys_call+0xed5/0x2d60
[  548.110094][T22300]  do_syscall_64+0xc9/0x1c0
[  548.114587][T22300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.120479][T22300] 
[  548.122796][T22300] read to 0xffff888107d753b8 of 4 bytes by task 22300 on cpu 1:
[  548.130422][T22300]  generic_buffers_fsync_noflush+0x83/0x120
[  548.136310][T22300]  ext4_sync_file+0x1ff/0x6c0
[  548.140982][T22300]  vfs_fsync_range+0x116/0x130
[  548.145745][T22300]  ext4_buffered_write_iter+0x326/0x370
[  548.151285][T22300]  ext4_file_write_iter+0x293/0xe10
[  548.156477][T22300]  iter_file_splice_write+0x5f1/0x980
[  548.161838][T22300]  direct_splice_actor+0x160/0x2c0
[  548.166944][T22300]  splice_direct_to_actor+0x302/0x670
[  548.172307][T22300]  do_splice_direct+0xd7/0x150
[  548.177061][T22300]  do_sendfile+0x39b/0x970
[  548.181468][T22300]  __x64_sys_sendfile64+0x110/0x150
[  548.186656][T22300]  x64_sys_call+0xed5/0x2d60
[  548.191236][T22300]  do_syscall_64+0xc9/0x1c0
[  548.195726][T22300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.201619][T22300] 
[  548.203925][T22300] value changed: 0x00000038 -> 0x00000002
[  548.209631][T22300] 
[  548.211937][T22300] Reported by Kernel Concurrency Sanitizer on:
[  548.218069][T22300] CPU: 1 UID: 0 PID: 22300 Comm: syz.4.7112 Tainted: G        W          6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  548.230296][T22300] Tainted: [W]=WARN
[  548.234083][T22300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  548.244124][T22300] ==================================================================
[  548.269045][T22302] usb usb7: usbfs: process 22302 (syz.3.7118) did not claim interface 0 before use
[  548.564358][T21560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.628107][T22171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.