last executing test programs:

5.817908924s ago: executing program 4 (id=3375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000903000000000f000000000000000000000004002400"], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)

5.778219598s ago: executing program 4 (id=3377):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_setup(0x4f01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

5.743381761s ago: executing program 4 (id=3378):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRESDEC, @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffb, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x7, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0)
readv(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0)

4.946731425s ago: executing program 4 (id=3393):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000903000000000f000000000000000000000004002400"], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)

4.644101392s ago: executing program 4 (id=3397):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = io_uring_setup(0x1693, &(0x7f0000000400)={0x0, 0x631d, 0x0, 0x3, 0x2dc})
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x16b}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000280)={0x3, 'pim6reg\x00', {0x7f}, 0xea00})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x1e, 0x4, 0x0)
sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x8000}]})
syslog(0x4, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x7b4f}, &(0x7f0000000340)=0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000008c40)=@newtaction={0x14, 0x30, 0x829}, 0x14}}, 0x0)

3.984109113s ago: executing program 1 (id=3410):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b20000/0x2000)=nil, 0x2000, 0x100000e, 0x8010, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x13, 0x2000ac0a, 0x0)

3.916324689s ago: executing program 1 (id=3411):
creat(&(0x7f0000000440)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0x8}]}, 0xc, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

3.915380589s ago: executing program 1 (id=3412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000903000000000f000000000000000000000004002400"], 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/20, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.757814554s ago: executing program 1 (id=3414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffb, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
readv(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0)

2.969734217s ago: executing program 1 (id=3419):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x5)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/pm_test', 0x2, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140))
ioctl$TCSETSW2(r0, 0x540e, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd29, 0x100234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x20000000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
sendfile(r3, r9, 0x0, 0x8000002b)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="8b330000000000ffff0015"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r11, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7fff, 0x3c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000068000100030000000000008000000000000000000900020001000000060000000c0008800600060000000000080005"], 0x38}}, 0x4000)
sendto$inet6(r1, &(0x7f00000004c0)='w', 0x1, 0x4880, 0x0, 0x0)

2.456470754s ago: executing program 1 (id=3429):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}, {@bsdgroups}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'sysadm_u'}}, {@appraise}, {@seclabel}, {@appraise_type}, {@measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x4fa, &(0x7f0000001f40)="$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")

1.84391546s ago: executing program 0 (id=3435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000903000000000f000000000000000000000004002400"], 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/20, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.646624268s ago: executing program 0 (id=3437):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) (fail_nth: 2)
dup2(r1, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

1.347160716s ago: executing program 0 (id=3439):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}, {@bsdgroups}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'sysadm_u'}}, {@appraise}, {@seclabel}, {@appraise_type}, {@measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x4fa, &(0x7f0000001f40)="$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")

1.318628469s ago: executing program 0 (id=3441):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

1.285440562s ago: executing program 0 (id=3442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRESOCT=r0], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x3000000, 0x0)
r2 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x9a)
acct(&(0x7f0000000100)='./file0/bus\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000013540470d0b55d21c96b00000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000000,measure,fsuuid=65\x004c2d9-1684-fd7b-2a29-2d3bfc0c,obj_type=msdos\x00,euid=', @ANYRESDEC=0xee01, @ANYBLOB="2c61707072616973652c646f6e745f680500682c646f6e745f6d6561737572652c616973655f747970653d696d617369672c00"], 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa074, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000e9495e06daf6b4e1ec4cc5d4ea626c3526ae929ee6611b8403bd1b24b5463115a33b41dfb38474c2b7be9a8aeea0893503a0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000aa8baf0d607261e753cebe2aacb4df3f5e48727bf789cc72ad87b0403018dae6c9e2c6a2798edb22fd61135f6f298094e25b1576a58e439be9dee836a7"], 0x30}}, 0x0)

720.700673ms ago: executing program 2 (id=3449):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x101000)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k'])
ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000180))
ioctl$USBDEVFS_RESET(r2, 0x5514)

671.510718ms ago: executing program 2 (id=3451):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

651.3247ms ago: executing program 2 (id=3452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYBLOB="b4ecaaac4f4a850198d63b8cd93ce3c38e95eaf7f2b73d30bdac1b7e93ea634080ddd31f71081675459627176326fa8271215ffdc8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@noblock_validity}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
lseek(r4, 0x400, 0x1)
getdents64(r4, 0x0, 0x2000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_selinux(r8, &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))

611.014384ms ago: executing program 3 (id=3453):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/20, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

593.143095ms ago: executing program 2 (id=3454):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x9a, 0x0, "200000840029950000000000420500899a37a6"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x7}, 0xc)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000001c0)=0x6)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r9, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r10 = syz_open_pts(r3, 0x0)
dup(r10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

531.912001ms ago: executing program 3 (id=3455):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

415.921162ms ago: executing program 3 (id=3456):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080003000000000000000000850000002400000095df0f745782adbcbc5f3bb416c24d5b4b55495cfe7c9817c737d1d062172e8b69eb4dc9f5bb5f1b710afc17295c4d7d4c569077d7f23d6aa7c607108400078d29595f4a47a7366f21657c003b4a1e7e6a32e618e65e106fe4a6723b27e7a4e5eb7451b77ed59f1d97c1661112439c214bc746de5022b551955056b3cf8aec1fa35afc6063830562bdf0da34f750a7f99aa3d342"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=<r5=>r3], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=<r10=>r9, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r6, @ANYRES64=r10], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00000001010000000000000ed00000000000004cca9e10991d1d98f2f58fbef3acce882e0ed4337180e470339247d99fb0c26fd6780f28785494e08048eed426d66e4c6e50f94f2a3aeecad01350b47afda687d08847c06dfd7383aa7cb22cc23ded2d18eefbc37191a3161e98ef3d7acf575adb5451fb2df63fbad606a7167feb8b57d0f4fc498808f6a02dad637a6cb6d91bdbdd3dc2aca34496b3963b491f9248339cfa602dcff76f6f09cc8ede47c475154a6f3e1b7f5d3fb26bb8f1a12ca69b1c20036d4bc0e1e6d977f764a3e92c6dcf977cb5cc2194501e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020100000000"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r16 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='sched_switch\x00', r16)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/20, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

379.669515ms ago: executing program 0 (id=3457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e0010000000000000000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = io_uring_setup(0x1693, &(0x7f0000000400)={0x0, 0x631d, 0x0, 0x3, 0x2dc})
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x16b}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000280)={0x3, 'pim6reg\x00', {0x7f}, 0xea00})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x1e, 0x4, 0x0)
sendmsg$tipc(r4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r5)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x8000}]})
syslog(0x4, 0x0, 0x0)

226.544849ms ago: executing program 3 (id=3458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="163e6cce65ffff0000000008003950323030302e"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000036c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0xf00})

144.258927ms ago: executing program 3 (id=3459):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b20000/0x2000)=nil, 0x2000, 0x100000e, 0x8010, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x13, 0x2000ac0a, r1)

95.692861ms ago: executing program 2 (id=3460):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

57.773795ms ago: executing program 4 (id=3398):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f00000004c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = timerfd_create(0x0, 0x0)
read(r2, &(0x7f0000000400)=""/190, 0xbe)
timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000400)='devpts\x00', 0x219001, &(0x7f0000000480)='vfat\x00')
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000800)='bbr\x00', 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff)

51.818275ms ago: executing program 2 (id=3461):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffb, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
readv(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=3462):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYBLOB="b4ecaaac4f4a850198d63b8cd93ce3c38e95eaf7f2b73d30bdac1b7e93ea634080ddd31f71081675459627176326fa8271215ffdc8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@noblock_validity}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
lseek(r4, 0x400, 0x1)
getdents64(r4, 0x0, 0x2000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_selinux(r8, &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

  260.152081][T17343] team0: Port device team_slave_0 added
[  260.160677][T17403] x_tables: duplicate underflow at hook 1
[  260.183792][T17343] team0: Port device team_slave_1 added
[  260.201724][   T29] audit: type=1326 audit(1728348201.962:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17398 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  260.225542][   T29] audit: type=1326 audit(1728348201.962:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17398 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  260.326032][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.333128][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.337816][T17427] Cannot find set identified by id 0 to match
[  260.359203][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.397455][   T29] audit: type=1400 audit(1728348202.222:6454): avc:  denied  { relabelfrom } for  pid=17426 comm="syz.0.2945" name="TCPv6" dev="sockfs" ino=68352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  260.417996][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.420657][   T29] audit: type=1400 audit(1728348202.222:6455): avc:  denied  { relabelto } for  pid=17426 comm="syz.0.2945" name="TCPv6" dev="sockfs" ino=68352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0"
[  260.427662][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.470043][T17430] loop4: detected capacity change from 0 to 256
[  260.481112][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.497308][T17430] msdos: Unknown parameter 'fowner>00000000000000000000'
[  260.506328][T17424] loop1: detected capacity change from 0 to 8192
[  260.519908][T17424] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  260.533836][   T29] audit: type=1326 audit(1728348202.332:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17423 comm="syz.2.2943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x0
[  260.597572][T17343] hsr_slave_0: entered promiscuous mode
[  260.608539][T17343] hsr_slave_1: entered promiscuous mode
[  260.614577][T17343] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.622559][T17343] Cannot create hsr debugfs directory
[  261.290202][   T29] audit: type=1326 audit(1728348203.122:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17508 comm="syz.1.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  261.313995][   T29] audit: type=1326 audit(1728348203.122:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17508 comm="syz.1.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  261.337881][   T29] audit: type=1326 audit(1728348203.122:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17508 comm="syz.1.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  261.361857][   T29] audit: type=1326 audit(1728348203.122:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17508 comm="syz.1.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  261.391150][T17515] x_tables: duplicate underflow at hook 1
[  261.405569][T17433] Process accounting resumed
[  261.501323][T17343] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  261.530154][T17343] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  261.556771][T17528] loop4: detected capacity change from 0 to 8192
[  261.597080][T17535] Cannot find set identified by id 0 to match
[  261.599405][T17343] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  261.614595][T17343] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  261.621754][T17528] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  261.696771][T17343] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.728435][T17343] 8021q: adding VLAN 0 to HW filter on device team0
[  261.757972][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.765404][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.776677][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.783913][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.835259][T17343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.845722][T17343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.910519][T17547] loop1: detected capacity change from 0 to 512
[  261.927658][T17547] EXT4-fs: Ignoring removed nobh option
[  261.933328][T17547] EXT4-fs: Ignoring removed nobh option
[  261.978876][T17547] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  261.981327][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.015412][T17547] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2958: invalid indirect mapped block 2683928664 (level 1)
[  262.037452][T17547] EXT4-fs (loop1): 1 truncate cleaned up
[  262.043553][T17547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.095170][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.148894][T17587] x_tables: duplicate underflow at hook 1
[  262.218646][T17343] veth0_vlan: entered promiscuous mode
[  262.250740][T17595] loop1: detected capacity change from 0 to 256
[  262.271350][T17343] veth1_vlan: entered promiscuous mode
[  262.283542][T17595] msdos: Unknown parameter 'fowner>00000000000000000000'
[  262.291687][T17343] veth0_macvtap: entered promiscuous mode
[  262.326664][T17343] veth1_macvtap: entered promiscuous mode
[  262.342563][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.353224][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.363156][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.373687][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.383601][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.394133][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.404206][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.414686][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.424739][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.435307][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.447971][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.481305][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.492087][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.502394][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.512987][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.523326][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.533996][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.544074][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.554765][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.564643][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.565533][T17614] Cannot find set identified by id 0 to match
[  262.575239][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.591690][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'.
[  262.593221][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.609672][T17343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.618539][T17343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.627440][T17343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.634198][T17616] loop4: detected capacity change from 0 to 512
[  262.636303][T17343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.661327][T17604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  262.672566][T17616] EXT4-fs: Ignoring removed nobh option
[  262.678254][T17616] EXT4-fs: Ignoring removed nobh option
[  262.715362][T17620] bpf_get_probe_write_proto: 14 callbacks suppressed
[  262.715384][T17620] syz.3.2930[17620] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.723909][T17616] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  262.744131][T17620] syz.3.2930[17620] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.744259][T17620] syz.3.2930[17620] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.758218][T17616] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2969: invalid indirect mapped block 2683928664 (level 1)
[  262.759839][T17625] x_tables: duplicate underflow at hook 1
[  262.793241][T17616] EXT4-fs (loop4): 1 truncate cleaned up
[  262.803630][T17616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.080953][T17602] Process accounting resumed
[  263.356971][T15995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.426847][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'.
[  263.462498][T17664] x_tables: duplicate underflow at hook 1
[  263.462996][T17660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  263.529615][T17668] loop4: detected capacity change from 0 to 256
[  263.547924][T17668] msdos: Unknown parameter 'fowner>00000000000000000000'
[  263.683735][T17682] Cannot find set identified by id 0 to match
[  263.695477][T17682] loop3: detected capacity change from 0 to 512
[  263.704948][T17682] EXT4-fs: Ignoring removed nobh option
[  263.710676][T17682] EXT4-fs: Ignoring removed nobh option
[  263.723493][T17682] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  263.733101][T17682] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2991: invalid indirect mapped block 2683928664 (level 1)
[  263.748122][T17682] EXT4-fs (loop3): 1 truncate cleaned up
[  263.754491][T17682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.781044][T17343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.806004][T17688] loop3: detected capacity change from 0 to 512
[  263.813007][T17688] EXT4-fs: Ignoring removed nobh option
[  263.818759][T17688] EXT4-fs: Ignoring removed nobh option
[  263.829683][T17688] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  263.842312][T17688] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2993: invalid indirect mapped block 2683928664 (level 1)
[  263.858059][T17688] EXT4-fs (loop3): 1 truncate cleaned up
[  263.864426][T17688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.883729][T17695] x_tables: duplicate underflow at hook 1
[  263.911139][T17343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.931044][T17699] syz.0.2997[17699] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  263.931152][T17699] syz.0.2997[17699] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  263.949638][T17699] syz.0.2997[17699] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  263.959712][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'.
[  263.984528][T17702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  264.295320][T17721] loop3: detected capacity change from 0 to 8192
[  264.306352][T17721] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.363902][T17675] Process accounting resumed
[  264.409136][T17728] Cannot find set identified by id 0 to match
[  264.430567][T17728] loop4: detected capacity change from 0 to 512
[  264.440195][T17728] EXT4-fs: Ignoring removed nobh option
[  264.445936][T17728] EXT4-fs: Ignoring removed nobh option
[  264.456350][T17728] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  264.464954][T17728] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3003: invalid indirect mapped block 2683928664 (level 1)
[  264.481877][T17728] EXT4-fs (loop4): 1 truncate cleaned up
[  264.488532][T17728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.655577][T15995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.699720][T17739] Cannot find set identified by id 0 to match
[  264.733846][T17739] loop1: detected capacity change from 0 to 512
[  264.749822][T17739] EXT4-fs: Ignoring removed nobh option
[  264.755514][T17739] EXT4-fs: Ignoring removed nobh option
[  264.783550][T17739] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  264.792618][T17743] x_tables: duplicate underflow at hook 1
[  264.792808][T17343] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  264.807773][T17343] FAT-fs (loop3): Filesystem has been set read-only
[  264.810990][T17739] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3006: invalid indirect mapped block 2683928664 (level 1)
[  264.846842][T17739] EXT4-fs (loop1): 1 truncate cleaned up
[  264.853224][T17739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.897240][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.921880][T17751] loop1: detected capacity change from 0 to 256
[  264.929383][T17751] msdos: Unknown parameter 'fowner>00000000000000000000'
[  264.941676][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'.
[  264.950925][T17749] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  265.020416][T17757] loop4: detected capacity change from 0 to 256
[  265.028021][T17757] msdos: Unknown parameter 'fowner>00000000000000000000'
[  265.679041][T17777] Cannot find set identified by id 0 to match
[  265.757345][T17751] Process accounting resumed
[  265.785675][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  265.785694][   T29] audit: type=1326 audit(1728348207.612:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  265.817666][   T29] audit: type=1326 audit(1728348207.612:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  265.841525][   T29] audit: type=1326 audit(1728348207.612:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  265.849502][T17784] syz.1.3019[17784] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.865124][   T29] audit: type=1326 audit(1728348207.612:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x7ffc0000
[  265.885364][T17763] Process accounting resumed
[  265.906242][   T29] audit: type=1326 audit(1728348207.732:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.1.3019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78eb8dff9 code=0x0
[  265.923051][T17784] syz.1.3019[17784] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.942936][T17784] syz.1.3019[17784] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.994360][T17789] x_tables: duplicate underflow at hook 1
[  266.021085][T17791] Cannot find set identified by id 0 to match
[  266.040046][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3023'.
[  266.049731][T17793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  266.118811][   T29] audit: type=1326 audit(1728348207.952:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17799 comm="syz.4.3026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x0
[  266.286469][T17812] Cannot find set identified by id 0 to match
[  266.334966][   T29] audit: type=1326 audit(1728348208.162:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  266.375705][   T29] audit: type=1326 audit(1728348208.192:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  266.399538][   T29] audit: type=1326 audit(1728348208.192:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  266.423319][   T29] audit: type=1326 audit(1728348208.192:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  266.518826][T17829] x_tables: duplicate underflow at hook 1
[  266.547954][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3037'.
[  266.558837][T17833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  266.596054][ T1324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.645062][ T1324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.670466][T17818] chnl_net:caif_netlink_parms(): no params data found
[  266.715460][ T1324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.772932][ T1324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.786197][T17852] loop1: detected capacity change from 0 to 8192
[  266.796383][T17852] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.808913][T17818] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.816041][T17818] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.823572][T17818] bridge_slave_0: entered allmulticast mode
[  266.830226][T17818] bridge_slave_0: entered promiscuous mode
[  266.847183][T17818] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.854352][T17818] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.863031][T17818] bridge_slave_1: entered allmulticast mode
[  266.869796][T17818] bridge_slave_1: entered promiscuous mode
[  266.904210][T17818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.934217][T17818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.945894][ T1324] bridge_slave_1: left allmulticast mode
[  266.951886][ T1324] bridge_slave_1: left promiscuous mode
[  266.957649][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.969967][ T1324] bridge_slave_0: left allmulticast mode
[  266.975672][ T1324] bridge_slave_0: left promiscuous mode
[  266.981460][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.012144][T17863] Cannot find set identified by id 0 to match
[  267.102813][T17869] loop4: detected capacity change from 0 to 256
[  267.137623][T17869] msdos: Unknown parameter 'fowner>00000000000000000000'
[  267.251983][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.264608][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.284279][ T1324] bond0 (unregistering): Released all slaves
[  267.290111][T17876] x_tables: duplicate underflow at hook 1
[  267.318702][T17818] team0: Port device team_slave_0 added
[  267.339057][T17818] team0: Port device team_slave_1 added
[  267.371143][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  267.402289][ T1324] hsr_slave_0: left promiscuous mode
[  267.414596][ T1324] hsr_slave_1: left promiscuous mode
[  267.421513][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.429099][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.439309][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.446954][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.458949][ T1324] veth1_macvtap: left promiscuous mode
[  267.464542][ T1324] veth0_macvtap: left promiscuous mode
[  267.470137][ T1324] veth1_vlan: left promiscuous mode
[  267.475408][ T1324] veth0_vlan: left promiscuous mode
[  267.481325][T17887] syz.2.3048[17887] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  267.650898][ T1324] team0 (unregistering): Port device team_slave_1 removed
[  267.674436][ T1324] team0 (unregistering): Port device team_slave_0 removed
[  267.717251][T17818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.717466][T17878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  267.724314][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.759964][T17818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.772270][T17818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.779489][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.805582][T17818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.856498][T17818] hsr_slave_0: entered promiscuous mode
[  267.862911][T17818] hsr_slave_1: entered promiscuous mode
[  267.869058][T17818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.876831][T17818] Cannot create hsr debugfs directory
[  267.935185][T17869] Process accounting resumed
[  268.038574][T17912] loop4: detected capacity change from 0 to 8192
[  268.046498][T17912] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  268.210028][T17936] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3052'.
[  268.219433][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3052'.
[  268.315473][T17818] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  268.365641][T17818] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  268.366850][T17953] Cannot find set identified by id 0 to match
[  268.389941][T17818] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  268.409660][T17818] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  268.424717][T17953] loop1: detected capacity change from 0 to 512
[  268.442529][T17953] EXT4-fs: Ignoring removed nobh option
[  268.448447][T17953] EXT4-fs: Ignoring removed nobh option
[  268.471249][T17953] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  268.481029][T17953] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3056: invalid indirect mapped block 2683928664 (level 1)
[  268.504173][T17818] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.516886][T17818] 8021q: adding VLAN 0 to HW filter on device team0
[  268.543771][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.550900][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.559553][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.566714][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.583386][T17953] EXT4-fs (loop1): 1 truncate cleaned up
[  268.590226][T17953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.656672][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.673411][T17818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.773854][T17993] x_tables: duplicate underflow at hook 1
[  268.865565][T18005] loop1: detected capacity change from 0 to 256
[  268.881455][T18005] msdos: Unknown parameter 'fowner>00000000000000000000'
[  268.922541][T17818] veth0_vlan: entered promiscuous mode
[  268.939921][T17818] veth1_vlan: entered promiscuous mode
[  268.970858][T17818] veth0_macvtap: entered promiscuous mode
[  268.984971][T17818] veth1_macvtap: entered promiscuous mode
[  269.020835][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.031563][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.041424][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.051891][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.061847][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.072400][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.082326][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.092838][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.102852][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.113325][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.136638][T17818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.159736][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.170368][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.180338][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.190998][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.200868][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.211608][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.221487][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.232061][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.241917][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.252513][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.264776][T17818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.274822][T17818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.283924][T17818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.292916][T17818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.301832][T17818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.315113][T18027] loop4: detected capacity change from 0 to 8192
[  269.366482][T18027] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.422161][T18038] Cannot find set identified by id 0 to match
[  269.428911][T18036] bpf_get_probe_write_proto: 2 callbacks suppressed
[  269.428925][T18036] syz.0.3064[18036] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.444759][T18038] loop3: detected capacity change from 0 to 512
[  269.447120][T18036] syz.0.3064[18036] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.475372][T18044] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3063'.
[  269.475631][T18038] EXT4-fs: Ignoring removed nobh option
[  269.501625][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'.
[  269.510700][T18038] EXT4-fs: Ignoring removed nobh option
[  269.514691][T18036] syz.0.3064[18036] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.538877][T18038] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  269.577639][T18038] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3034: invalid indirect mapped block 2683928664 (level 1)
[  269.592794][T18038] EXT4-fs (loop3): 1 truncate cleaned up
[  269.601361][T18038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.679110][T17818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.694968][T18016] Process accounting resumed
[  269.710971][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1
[  269.718592][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.726163][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.733938][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.741833][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.749523][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.756953][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4
[  269.764619][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.772078][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.779580][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.787252][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.795054][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.802635][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.810130][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.817582][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.825407][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.832975][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.840617][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.848509][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.856025][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.863563][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.871053][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.878561][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.886064][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.893521][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.901010][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.908464][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.916208][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.923877][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.931579][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.939200][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.946922][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.954386][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.962266][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.969870][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.977317][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  269.984964][ T2931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  270.011074][ T2931] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  270.037370][T18067] Cannot find set identified by id 0 to match
[  270.049286][T18067] loop1: detected capacity change from 0 to 512
[  270.056242][T18067] EXT4-fs: Ignoring removed nobh option
[  270.062164][T18067] EXT4-fs: Ignoring removed nobh option
[  270.102156][T18067] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  270.111895][T18067] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3070: invalid indirect mapped block 2683928664 (level 1)
[  270.146004][T18067] EXT4-fs (loop1): 1 truncate cleaned up
[  270.147037][T18069] loop3: detected capacity change from 0 to 8192
[  270.164538][T18067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.171023][T18074] x_tables: duplicate underflow at hook 1
[  270.182979][T18069] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.199853][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.251317][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'.
[  270.270601][T18077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  270.292168][T18083] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3077'.
[  270.311307][T18085] syz.2.3078[18085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.311453][T18085] syz.2.3078[18085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.317124][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'.
[  270.323283][T18085] syz.2.3078[18085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.385315][T18091] Cannot find set identified by id 0 to match
[  270.418742][T18091] loop4: detected capacity change from 0 to 512
[  270.427715][T18091] EXT4-fs: Ignoring removed nobh option
[  270.433414][T18091] EXT4-fs: Ignoring removed nobh option
[  270.450652][T18091] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  270.461207][T18091] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3080: invalid indirect mapped block 2683928664 (level 1)
[  270.476719][T18091] EXT4-fs (loop4): 1 truncate cleaned up
[  270.489237][T18091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.550336][T15995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.669637][T18113] loop4: detected capacity change from 0 to 8192
[  270.683084][T18113] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.893302][T18123] Cannot find set identified by id 0 to match
[  270.914056][T18123] loop3: detected capacity change from 0 to 512
[  270.922901][T18123] EXT4-fs: Ignoring removed nobh option
[  270.928673][T18123] EXT4-fs: Ignoring removed nobh option
[  270.946017][T18123] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  270.960005][T18123] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3085: invalid indirect mapped block 2683928664 (level 1)
[  270.977624][T18123] EXT4-fs (loop3): 1 truncate cleaned up
[  270.986110][T18123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.131424][T17818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.195320][T18129] x_tables: duplicate underflow at hook 1
[  271.217124][T18133] loop1: detected capacity change from 0 to 512
[  271.229242][T18133] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  271.292813][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  271.292828][   T29] audit: type=1326 audit(1728348213.122:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.3.3091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc9b8fdff9 code=0x0
[  271.315760][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'.
[  271.331953][T18137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  271.349795][T18104] Process accounting resumed
[  271.377737][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'.
[  271.386920][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'.
[  271.396156][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3093'.
[  271.429463][T18146] Cannot find set identified by id 0 to match
[  271.429887][   T29] audit: type=1326 audit(1728348213.262:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x7ffc0000
[  271.459199][   T29] audit: type=1326 audit(1728348213.262:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x7ffc0000
[  271.502504][T18151] Cannot find set identified by id 0 to match
[  271.513583][   T29] audit: type=1326 audit(1728348213.312:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f51c1dfdff9 code=0x7ffc0000
[  271.537277][   T29] audit: type=1326 audit(1728348213.312:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x7ffc0000
[  271.547639][T18149] loop1: detected capacity change from 0 to 8192
[  271.561150][   T29] audit: type=1326 audit(1728348213.312:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x7ffc0000
[  271.568457][T18153] syz.2.3099[18153] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.598453][T18149] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.620233][T18153] syz.2.3099[18153] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.620899][T18153] syz.2.3099[18153] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.635635][   T29] audit: type=1326 audit(1728348213.462:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.2.3099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x0
[  271.968838][T15813] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  271.977471][T15813] FAT-fs (loop1): Filesystem has been set read-only
[  272.223555][   T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.246242][T18185] loop3: detected capacity change from 0 to 8192
[  272.253893][T18185] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  272.272108][   T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.322320][   T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.378346][   T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.390866][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'.
[  272.459879][   T29] audit: type=1326 audit(1728348214.282:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18200 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  272.521497][T18162] Process accounting resumed
[  272.559650][T18187] chnl_net:caif_netlink_parms(): no params data found
[  272.569295][   T29] audit: type=1326 audit(1728348214.322:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18200 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  272.570045][T18206] Cannot find set identified by id 0 to match
[  272.593029][   T29] audit: type=1326 audit(1728348214.322:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18200 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  272.681441][   T28] bridge_slave_1: left allmulticast mode
[  272.687245][   T28] bridge_slave_1: left promiscuous mode
[  272.693086][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.715446][   T28] bridge_slave_0: left allmulticast mode
[  272.721498][   T28] bridge_slave_0: left promiscuous mode
[  272.727425][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.880411][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.891835][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.902710][   T28] bond0 (unregistering): Released all slaves
[  272.915706][T18222] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  272.975680][T18228] syz.4.3118[18228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  272.992137][   T28] hsr_slave_0: left promiscuous mode
[  273.013295][   T28] hsr_slave_1: left promiscuous mode
[  273.020966][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.028477][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.036197][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.043757][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.055515][   T28] veth1_macvtap: left promiscuous mode
[  273.061132][   T28] veth0_macvtap: left promiscuous mode
[  273.066739][   T28] veth1_vlan: left promiscuous mode
[  273.072214][   T28] veth0_vlan: left promiscuous mode
[  273.175600][   T28] team0 (unregistering): Port device team_slave_1 removed
[  273.188305][   T28] team0 (unregistering): Port device team_slave_0 removed
[  273.258857][T18187] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.266107][T18187] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.273688][T18187] bridge_slave_0: entered allmulticast mode
[  273.280908][T18187] bridge_slave_0: entered promiscuous mode
[  273.288460][T18187] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.295591][T18187] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.303142][T18187] bridge_slave_1: entered allmulticast mode
[  273.310152][T18187] bridge_slave_1: entered promiscuous mode
[  273.340339][T18187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.361590][T18187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.394851][T18187] team0: Port device team_slave_0 added
[  273.402946][T18187] team0: Port device team_slave_1 added
[  273.421551][T18187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.428595][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.431418][T18255] x_tables: duplicate underflow at hook 1
[  273.454609][T18187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.455587][T18187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.478069][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.504208][T18187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.571391][T18187] hsr_slave_0: entered promiscuous mode
[  273.590925][T18187] hsr_slave_1: entered promiscuous mode
[  273.712646][T18279] Cannot find set identified by id 0 to match
[  273.726079][T18279] loop3: detected capacity change from 0 to 512
[  273.741534][T18279] EXT4-fs: Ignoring removed nobh option
[  273.747355][T18279] EXT4-fs: Ignoring removed nobh option
[  273.756082][T18279] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  273.764619][T18279] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3124: invalid indirect mapped block 2683928664 (level 1)
[  273.778975][T18279] EXT4-fs (loop3): 1 truncate cleaned up
[  273.785135][T18279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.836283][T17818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.977303][T18314] loop3: detected capacity change from 0 to 8192
[  273.991695][T18314] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  274.383458][T18258] Process accounting resumed
[  274.399017][T18359] x_tables: duplicate underflow at hook 1
[  274.440222][T18187] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  274.457905][T18187] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  274.479642][T18187] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  274.502263][T18367] __nla_validate_parse: 6 callbacks suppressed
[  274.502283][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'.
[  274.520671][T18187] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  274.528074][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'.
[  274.617681][T18375] bpf_get_probe_write_proto: 2 callbacks suppressed
[  274.617702][T18375] syz.4.3134[18375] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  274.657171][T18375] syz.4.3134[18375] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  274.660952][T18187] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.699986][T18375] syz.4.3134[18375] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  274.731313][T18187] 8021q: adding VLAN 0 to HW filter on device team0
[  274.757956][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.765065][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.786475][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.793618][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.922918][T18399] Cannot find set identified by id 0 to match
[  274.940881][T18399] loop3: detected capacity change from 0 to 512
[  274.956534][T18399] EXT4-fs: Ignoring removed nobh option
[  274.962555][T18399] EXT4-fs: Ignoring removed nobh option
[  274.983082][T18187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.992037][T18399] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  275.004512][T18399] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3136: invalid indirect mapped block 2683928664 (level 1)
[  275.020230][T18399] EXT4-fs (loop3): 1 truncate cleaned up
[  275.029465][T18399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.089208][T17818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.118747][T18425] x_tables: duplicate underflow at hook 1
[  275.122132][T18187] veth0_vlan: entered promiscuous mode
[  275.133437][T18187] veth1_vlan: entered promiscuous mode
[  275.147570][T18187] veth0_macvtap: entered promiscuous mode
[  275.161728][T18187] veth1_macvtap: entered promiscuous mode
[  275.164334][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'.
[  275.173151][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.187113][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.197101][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.207954][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.218156][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.228775][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.238737][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.249240][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.259157][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.269621][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.280361][T18187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.293777][T18428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  275.294939][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.314117][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.324210][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.335389][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.345252][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.356505][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.359641][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'.
[  275.366617][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.377514][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'.
[  275.386561][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.407154][T18187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.417992][T18187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.433009][T18187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.466390][T18187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.475323][T18187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.484148][T18187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.493315][T18187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.501925][T18437] loop3: detected capacity change from 0 to 8192
[  275.521636][T18437] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.591125][T18443] loop4: detected capacity change from 0 to 8192
[  275.610926][T18443] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.671468][T18450] Cannot find set identified by id 0 to match
[  275.707667][T18450] loop1: detected capacity change from 0 to 512
[  275.717395][T18450] EXT4-fs: Ignoring removed nobh option
[  275.723060][T18450] EXT4-fs: Ignoring removed nobh option
[  275.760542][T18450] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  275.780120][T18450] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3107: invalid indirect mapped block 2683928664 (level 1)
[  275.838441][T18450] EXT4-fs (loop1): 1 truncate cleaned up
[  275.844674][T18450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.921845][T18426] Process accounting resumed
[  275.927264][T18187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.957831][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3143'.
[  276.038089][T18470] Cannot find set identified by id 0 to match
[  276.092390][T18473] x_tables: duplicate underflow at hook 1
[  276.177529][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'.
[  276.205711][T18475] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  276.289946][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'.
[  276.310949][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'.
[  276.323572][T18481] syz.0.3155[18481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  276.323700][T18481] syz.0.3155[18481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  276.341760][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  276.341775][   T29] audit: type=1326 audit(1728348218.172:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.347248][T18481] syz.0.3155[18481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  276.392003][   T29] audit: type=1326 audit(1728348218.182:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.402934][T18486] Cannot find set identified by id 0 to match
[  276.403648][   T29] audit: type=1326 audit(1728348218.182:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.460605][   T29] audit: type=1326 audit(1728348218.292:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.0.3155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x0
[  276.510514][T18489] loop4: detected capacity change from 0 to 256
[  276.518449][T18489] msdos: Unknown parameter 'fowner>00000000000000000000'
[  276.573802][T18494] Cannot find set identified by id 0 to match
[  276.612237][T18501] x_tables: duplicate underflow at hook 1
[  276.644207][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'.
[  276.653617][T18505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  276.692169][   T29] audit: type=1326 audit(1728348218.522:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.716143][   T29] audit: type=1326 audit(1728348218.522:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.739947][   T29] audit: type=1326 audit(1728348218.522:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x7ffc0000
[  276.890751][T18522] Cannot find set identified by id 0 to match
[  277.074007][T18528] loop1: detected capacity change from 0 to 512
[  277.080718][T18528] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  277.212460][T18530] loop1: detected capacity change from 0 to 8192
[  277.235416][T18530] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  277.282439][   T29] audit: type=1400 audit(1728348219.112:6617): avc:  denied  { name_bind } for  pid=18535 comm="syz.0.3175" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  277.323317][   T29] audit: type=1400 audit(1728348219.112:6618): avc:  denied  { node_bind } for  pid=18535 comm="syz.0.3175" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  277.354989][T18497] Process accounting resumed
[  277.376485][T18540] Cannot find set identified by id 0 to match
[  277.389106][T18540] loop4: detected capacity change from 0 to 512
[  277.395879][T18540] EXT4-fs: Ignoring removed nobh option
[  277.401598][T18540] EXT4-fs: Ignoring removed nobh option
[  277.421403][T18540] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  277.429917][T18540] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3176: invalid indirect mapped block 2683928664 (level 1)
[  277.445693][T18540] EXT4-fs (loop4): 1 truncate cleaned up
[  277.451917][T18540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.550996][T15995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.620598][T18549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  277.674031][T18555] x_tables: duplicate underflow at hook 1
[  277.692744][   T29] audit: type=1326 audit(1728348219.512:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.3183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51c1dfdff9 code=0x0
[  277.723777][T18561] syz.0.3184[18561] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.723895][T18561] syz.0.3184[18561] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.742305][T18561] syz.0.3184[18561] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.763942][T18563] loop3: detected capacity change from 0 to 512
[  277.784228][T18187] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  277.792876][T18187] FAT-fs (loop1): Filesystem has been set read-only
[  277.800125][T18563] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  277.855470][T18567] loop1: detected capacity change from 0 to 256
[  277.872117][T18567] msdos: Unknown parameter 'fowner>00000000000000000000'
[  277.951290][T18576] Cannot find set identified by id 0 to match
[  277.978987][T18579] Cannot find set identified by id 0 to match
[  278.050381][T18588] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  278.076769][T18590] x_tables: duplicate underflow at hook 1
[  278.479128][T18614] Cannot find set identified by id 0 to match
[  278.530692][T18616] loop4: detected capacity change from 0 to 512
[  278.539312][T18616] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  278.584742][T18621] loop4: detected capacity change from 0 to 512
[  278.592871][T18621] EXT4-fs: Ignoring removed nobh option
[  278.598580][T18621] EXT4-fs: Ignoring removed nobh option
[  278.619942][T18621] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  278.633134][T18621] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3202: invalid indirect mapped block 2683928664 (level 1)
[  278.648089][T18621] EXT4-fs (loop4): 1 truncate cleaned up
[  278.654440][T18621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.684900][T18574] Process accounting resumed
[  278.700176][T18632] x_tables: duplicate underflow at hook 1
[  278.706827][T18630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  278.744406][T15995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.811428][T18641] loop1: detected capacity change from 0 to 512
[  278.844681][T18641] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  278.903549][T18646] syz.1.3214[18646] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  278.921125][T18642] loop4: detected capacity change from 0 to 8192
[  278.961578][T18642] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.049562][T18661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  279.052247][T18662] loop3: detected capacity change from 0 to 256
[  279.065757][T18662] msdos: Unknown parameter 'fowner>00000000000000000000'
[  279.093394][T18665] x_tables: duplicate underflow at hook 1
[  279.362180][T15995] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  279.370832][T15995] FAT-fs (loop4): Filesystem has been set read-only
[  279.651452][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.669528][T18687] __nla_validate_parse: 14 callbacks suppressed
[  279.669600][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3227'.
[  279.693747][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'.
[  279.711001][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.771029][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.815618][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.898289][T18708] loop1: detected capacity change from 0 to 512
[  279.905039][T18708] EXT4-fs: Ignoring removed nobh option
[  279.908319][T18658] Process accounting resumed
[  279.910680][T18708] EXT4-fs: Ignoring removed nobh option
[  279.939710][   T11] bridge_slave_1: left allmulticast mode
[  279.945442][   T11] bridge_slave_1: left promiscuous mode
[  279.951208][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.961078][   T11] bridge_slave_0: left allmulticast mode
[  279.961112][T18708] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  279.966771][   T11] bridge_slave_0: left promiscuous mode
[  279.981046][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.993833][T18708] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3231: invalid indirect mapped block 2683928664 (level 1)
[  280.017527][T18708] EXT4-fs (loop1): 1 truncate cleaned up
[  280.024658][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'.
[  280.047640][T18708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.074579][T18714] set_match_v0_checkentry: 4 callbacks suppressed
[  280.074595][T18714] Cannot find set identified by id 0 to match
[  280.106530][T18187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.126814][T18719] x_tables: duplicate underflow at hook 1
[  280.182358][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.194049][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.205056][   T11] bond0 (unregistering): Released all slaves
[  280.215682][T18712] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  280.245838][T18688] chnl_net:caif_netlink_parms(): no params data found
[  280.294017][   T11] hsr_slave_0: left promiscuous mode
[  280.311530][   T11] hsr_slave_1: left promiscuous mode
[  280.322892][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.330548][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.335463][T18738] bpf_get_probe_write_proto: 2 callbacks suppressed
[  280.335486][T18738] syz.3.3238[18738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.347538][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.352358][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'.
[  280.359080][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.366767][T18738] syz.3.3238[18738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.400266][   T11] veth1_macvtap: left promiscuous mode
[  280.409838][T18738] syz.3.3238[18738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.412302][   T11] veth0_macvtap: left promiscuous mode
[  280.434900][   T11] veth1_vlan: left promiscuous mode
[  280.440264][   T11] veth0_vlan: left promiscuous mode
[  280.453550][T18730] Process accounting resumed
[  280.547271][   T11] team0 (unregistering): Port device team_slave_1 removed
[  280.559316][   T11] team0 (unregistering): Port device team_slave_0 removed
[  280.642697][T18753] loop3: detected capacity change from 0 to 512
[  280.649583][T18753] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  280.695633][T18688] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.702824][T18688] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.710959][T18688] bridge_slave_0: entered allmulticast mode
[  280.717668][T18688] bridge_slave_0: entered promiscuous mode
[  280.728114][T18688] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.735558][T18688] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.743987][T18688] bridge_slave_1: entered allmulticast mode
[  280.758848][T18688] bridge_slave_1: entered promiscuous mode
[  280.777420][T18769] Cannot find set identified by id 0 to match
[  280.791922][T18688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.804311][T18688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.831183][T18688] team0: Port device team_slave_0 added
[  280.838182][T18688] team0: Port device team_slave_1 added
[  280.840665][T18776] Cannot find set identified by id 0 to match
[  280.865918][T18688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.872986][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.899028][T18688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.914196][T18784] x_tables: duplicate underflow at hook 1
[  280.922868][T18688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.930036][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.956150][T18688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.988355][T18688] hsr_slave_0: entered promiscuous mode
[  280.994518][T18688] hsr_slave_1: entered promiscuous mode
[  281.000764][T18688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.008903][T18688] Cannot create hsr debugfs directory
[  281.129694][T18795] loop1: detected capacity change from 0 to 8192
[  281.151022][T18795] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  281.319028][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3250'.
[  281.355891][T18807] syz.2.3251[18807] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  281.355959][T18807] syz.2.3251[18807] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  281.368320][T18807] syz.2.3251[18807] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  281.383174][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  281.383193][   T29] audit: type=1326 audit(1728348223.212:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.2.3251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb3d76dff9 code=0x0
[  281.521556][T18688] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  281.559618][T18688] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  281.570859][   T29] audit: type=1326 audit(1728348223.402:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  281.596877][T18688] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  281.623766][T18688] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  281.635856][   T29] audit: type=1326 audit(1728348223.422:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  281.659643][   T29] audit: type=1326 audit(1728348223.422:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  281.747133][T18820] loop3: detected capacity change from 0 to 512
[  281.768043][T18820] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  281.850684][T18831] Cannot find set identified by id 0 to match
[  281.866567][T18688] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.884163][T18831] loop3: detected capacity change from 0 to 512
[  281.895169][T18831] EXT4-fs: Ignoring removed nobh option
[  281.900961][T18831] EXT4-fs: Ignoring removed nobh option
[  281.915281][T18831] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  281.924398][T18831] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3255: invalid indirect mapped block 2683928664 (level 1)
[  281.939860][T18831] EXT4-fs (loop3): 1 truncate cleaned up
[  281.946047][T18831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.975968][T18688] 8021q: adding VLAN 0 to HW filter on device team0
[  281.999605][T17818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.000239][T18838] Cannot find set identified by id 0 to match
[  282.028159][T18838] loop1: detected capacity change from 0 to 512
[  282.034898][T18838] EXT4-fs: Ignoring removed nobh option
[  282.040651][T18838] EXT4-fs: Ignoring removed nobh option
[  282.048525][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.055693][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.063109][T18838] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  282.064779][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.078348][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.089637][T18838] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3257: invalid indirect mapped block 2683928664 (level 1)
[  282.112035][T18688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  282.122499][T18688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.125875][T18838] EXT4-fs (loop1): 1 truncate cleaned up
[  282.149370][   T29] audit: type=1326 audit(1728348223.982:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.3.3260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc9b8fdff9 code=0x0
[  282.150864][T18838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.197891][T18839] Process accounting resumed
[  282.225455][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'.
[  282.236173][T18187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.262630][T18688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.316410][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'.
[  282.336854][T18866] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  282.403733][   T29] audit: type=1326 audit(1728348224.232:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.1.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6ffddff9 code=0x7ffc0000
[  282.449840][   T29] audit: type=1326 audit(1728348224.262:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.1.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1f6ffddff9 code=0x7ffc0000
[  282.473588][   T29] audit: type=1326 audit(1728348224.262:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.1.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6ffddff9 code=0x7ffc0000
[  282.501823][T18889] loop1: detected capacity change from 0 to 512
[  282.518752][T18889] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  282.532051][T18688] veth0_vlan: entered promiscuous mode
[  282.553691][T18688] veth1_vlan: entered promiscuous mode
[  282.583459][T18688] veth0_macvtap: entered promiscuous mode
[  282.598918][T18688] veth1_macvtap: entered promiscuous mode
[  282.618264][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.628848][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.638786][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.649314][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.659227][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.664732][T18910] loop1: detected capacity change from 0 to 8192
[  282.669702][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.669726][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.696467][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.706381][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.717188][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.747652][T18910] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.778303][T18688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.795576][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.806343][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.816326][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.826816][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.836812][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.847304][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.857162][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.867620][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.877503][T18688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.888069][T18688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.911909][T18688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.930427][T18688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.939353][T18688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.948299][T18688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.957089][T18688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.059648][T18937] Cannot find set identified by id 0 to match
[  283.136678][T18932] loop3: detected capacity change from 0 to 8192
[  283.163911][T18932] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  283.195905][T18943] syz.0.3271[18943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  283.195979][T18943] syz.0.3271[18943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  283.222183][T18943] syz.0.3271[18943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  283.247994][T18945] Cannot find set identified by id 0 to match
[  283.293871][T18945] loop4: detected capacity change from 0 to 512
[  283.307451][T18945] EXT4-fs: Ignoring removed nobh option
[  283.313092][T18945] EXT4-fs: Ignoring removed nobh option
[  283.313105][   T29] audit: type=1326 audit(1728348225.132:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.3271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x0
[  283.345288][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3273'.
[  283.372512][T18945] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  283.390604][T18945] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3272: invalid indirect mapped block 2683928664 (level 1)
[  283.421241][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'.
[  283.437523][T18945] EXT4-fs (loop4): 1 truncate cleaned up
[  283.446417][T18945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.488356][T18954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  283.539908][T18688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.598319][   T29] audit: type=1326 audit(1728348225.432:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18961 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f774dff9 code=0x7ffc0000
[  283.665494][T18965] loop1: detected capacity change from 0 to 512
[  283.684357][T18965] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  283.741897][T17818] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  283.750661][T17818] FAT-fs (loop3): Filesystem has been set read-only
[  283.838778][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3284'.
[  283.862159][T18980] FAULT_INJECTION: forcing a failure.
[  283.862159][T18980] name failslab, interval 1, probability 0, space 0, times 0
[  283.874990][T18980] CPU: 0 UID: 0 PID: 18980 Comm: syz.1.3285 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  283.885880][T18980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  283.895940][T18980] Call Trace:
[  283.899224][T18980]  <TASK>
[  283.902272][T18980]  dump_stack_lvl+0xf2/0x150
[  283.906904][T18980]  dump_stack+0x15/0x20
[  283.911063][T18980]  should_fail_ex+0x223/0x230
[  283.915879][T18980]  ? skb_clone+0x154/0x1f0
[  283.920331][T18980]  should_failslab+0x8f/0xb0
[  283.924926][T18980]  kmem_cache_alloc_noprof+0x4c/0x290
[  283.930419][T18980]  skb_clone+0x154/0x1f0
[  283.934688][T18980]  __netlink_deliver_tap+0x2bd/0x4c0
[  283.940093][T18980]  netlink_unicast+0x64a/0x670
[  283.944918][T18980]  netlink_sendmsg+0x5cc/0x6e0
[  283.949734][T18980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.955050][T18980]  __sock_sendmsg+0x140/0x180
[  283.959733][T18980]  ____sys_sendmsg+0x312/0x410
[  283.964565][T18980]  __sys_sendmsg+0x1d9/0x270
[  283.969332][T18980]  __x64_sys_sendmsg+0x46/0x50
[  283.974212][T18980]  x64_sys_call+0x2689/0x2d60
[  283.978906][T18980]  do_syscall_64+0xc9/0x1c0
[  283.983466][T18980]  ? clear_bhb_loop+0x55/0xb0
[  283.988168][T18980]  ? clear_bhb_loop+0x55/0xb0
[  283.992884][T18980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.998812][T18980] RIP: 0033:0x7f1f6ffddff9
[  284.003302][T18980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.022977][T18980] RSP: 002b:00007f1f6ec51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.031454][T18980] RAX: ffffffffffffffda RBX: 00007f1f70195f80 RCX: 00007f1f6ffddff9
[  284.039594][T18980] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  284.047573][T18980] RBP: 00007f1f6ec51090 R08: 0000000000000000 R09: 0000000000000000
[  284.055594][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.063580][T18980] R13: 0000000000000000 R14: 00007f1f70195f80 R15: 00007ffc6f7a2308
[  284.071589][T18980]  </TASK>
[  284.117376][T18982] Cannot find set identified by id 0 to match
[  284.130056][T18982] loop1: detected capacity change from 0 to 512
[  284.136693][T18982] EXT4-fs: Ignoring removed nobh option
[  284.142354][T18982] EXT4-fs: Ignoring removed nobh option
[  284.156274][T18982] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  284.164992][T18982] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3286: invalid indirect mapped block 2683928664 (level 1)
[  284.180719][T18982] EXT4-fs (loop1): 1 truncate cleaned up
[  284.187133][T18982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.211520][T18187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.236212][T18988] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  284.276787][   T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.314159][T18994] loop1: detected capacity change from 0 to 512
[  284.322240][T18994] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  284.360689][   T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.414352][   T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.415655][T18964] Process accounting resumed
[  284.428540][T19002] x_tables: duplicate underflow at hook 1
[  284.483417][T19011] syz.0.3297[19011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  284.501798][T19016] Cannot find set identified by id 0 to match
[  284.504492][   T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.570443][T19021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  284.652335][T19029] Cannot find set identified by id 0 to match
[  284.675652][T19031] loop1: detected capacity change from 0 to 256
[  284.685440][T19029] loop4: detected capacity change from 0 to 512
[  284.697337][T19029] EXT4-fs: Ignoring removed nobh option
[  284.703000][T19029] EXT4-fs: Ignoring removed nobh option
[  284.714910][T19031] msdos: Unknown parameter 'fowner>00000000000000000000'
[  284.722750][   T50] bridge_slave_1: left allmulticast mode
[  284.728472][   T50] bridge_slave_1: left promiscuous mode
[  284.734146][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.744582][   T50] bridge_slave_0: left allmulticast mode
[  284.750445][   T50] bridge_slave_0: left promiscuous mode
[  284.751139][T19029] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  284.756113][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.765810][T19029] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3304: invalid indirect mapped block 2683928664 (level 1)
[  284.788951][T19029] EXT4-fs (loop4): 1 truncate cleaned up
[  284.794992][T19029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.821358][T18688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.849377][T19037] loop4: detected capacity change from 0 to 512
[  284.859052][T19037] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  284.930152][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.941734][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.952711][   T50] bond0 (unregistering): Released all slaves
[  284.995596][T18995] chnl_net:caif_netlink_parms(): no params data found
[  284.996441][T19044] loop4: detected capacity change from 0 to 512
[  285.014155][T19044] EXT4-fs: Ignoring removed nobh option
[  285.019838][T19044] EXT4-fs: Ignoring removed nobh option
[  285.040924][   T50] hsr_slave_0: left promiscuous mode
[  285.054817][T19044] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  285.063389][   T50] hsr_slave_1: left promiscuous mode
[  285.063608][T19044] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3309: invalid indirect mapped block 2683928664 (level 1)
[  285.082903][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.084982][T19044] EXT4-fs (loop4): 1 truncate cleaned up
[  285.091288][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.104038][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.111549][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.114293][T19044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.134513][   T50] veth1_macvtap: left promiscuous mode
[  285.140210][   T50] veth0_macvtap: left promiscuous mode
[  285.145900][   T50] veth1_vlan: left promiscuous mode
[  285.151285][   T50] veth0_vlan: left promiscuous mode
[  285.159096][T18688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.290775][   T50] team0 (unregistering): Port device team_slave_1 removed
[  285.302177][   T50] team0 (unregistering): Port device team_slave_0 removed
[  285.328888][T19067] __nla_validate_parse: 4 callbacks suppressed
[  285.328910][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'.
[  285.373199][T19067] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  285.417964][T19075] set_match_v0_checkentry: 1 callbacks suppressed
[  285.417981][T19075] Cannot find set identified by id 0 to match
[  285.435415][T18995] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.442735][T18995] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.467082][T18995] bridge_slave_0: entered allmulticast mode
[  285.474119][T18995] bridge_slave_0: entered promiscuous mode
[  285.481756][T18995] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.489053][T18995] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.496742][T18995] bridge_slave_1: entered allmulticast mode
[  285.500171][T19035] Process accounting resumed
[  285.504050][T18995] bridge_slave_1: entered promiscuous mode
[  285.559659][T18995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.595690][T18995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.618043][T19088] loop1: detected capacity change from 0 to 512
[  285.645184][T18995] team0: Port device team_slave_0 added
[  285.654275][T19088] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  285.663300][T18995] team0: Port device team_slave_1 added
[  285.713835][T18995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.720857][T18995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.747288][T18995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.773918][T18995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.780997][T18995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.807084][T18995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.821149][T19105] bpf_get_probe_write_proto: 2 callbacks suppressed
[  285.821166][T19105] syz.1.3321[19105] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  285.837337][T19105] syz.1.3321[19105] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  285.862082][T18995] hsr_slave_0: entered promiscuous mode
[  285.887071][T19105] syz.1.3321[19105] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  285.897763][T18995] hsr_slave_1: entered promiscuous mode
[  285.926958][T18995] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.935832][T18995] Cannot create hsr debugfs directory
[  285.941799][T19104] loop4: detected capacity change from 0 to 8192
[  285.967045][T19104] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  286.023137][T19117] Cannot find set identified by id 0 to match
[  286.544419][T18995] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  286.567981][T18995] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  286.585012][T18995] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  286.602153][T18995] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  286.648652][   T29] kauditd_printk_skb: 210 callbacks suppressed
[  286.648670][   T29] audit: type=1400 audit(1728348228.482:6857): avc:  denied  { setopt } for  pid=19162 comm="syz.0.3330" lport=52753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  286.700856][T19166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3330'.
[  286.721640][T18995] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.731133][   T29] audit: type=1326 audit(1728348228.562:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.754927][   T29] audit: type=1326 audit(1728348228.562:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.778522][   T29] audit: type=1326 audit(1728348228.562:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.802209][   T29] audit: type=1326 audit(1728348228.562:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.822423][T18995] 8021q: adding VLAN 0 to HW filter on device team0
[  286.825739][   T29] audit: type=1326 audit(1728348228.562:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.842088][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.855971][   T29] audit: type=1326 audit(1728348228.562:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.862957][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.886412][   T29] audit: type=1326 audit(1728348228.562:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.917625][   T29] audit: type=1326 audit(1728348228.562:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.932862][T18995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  286.941269][   T29] audit: type=1326 audit(1728348228.562:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.0.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0819fadff9 code=0x7ffc0000
[  286.951493][T18995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.994571][T19126] Process accounting resumed
[  287.006306][T14802] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.013469][T14802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.110575][T19194] Cannot find set identified by id 0 to match
[  287.114402][T18995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.241561][T19218] syz.4.3340[19218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.242745][T19218] syz.4.3340[19218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.268795][T19218] syz.4.3340[19218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.326861][T18995] veth0_vlan: entered promiscuous mode
[  287.352175][T18995] veth1_vlan: entered promiscuous mode
[  287.396799][T18995] veth0_macvtap: entered promiscuous mode
[  287.405595][T18995] veth1_macvtap: entered promiscuous mode
[  287.430614][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.441191][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.451138][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.461673][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.471535][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.482005][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.491950][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.502460][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.512461][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.523033][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.584447][T18995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.592130][T19247] netlink: 'syz.1.3342': attribute type 1 has an invalid length.
[  287.610070][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.620762][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.630632][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.641176][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.651557][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.662510][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.672475][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.683122][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.692991][T18995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.703575][T18995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.758178][T18995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.775717][T19257] loop1: detected capacity change from 0 to 8192
[  287.783566][T18995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.792406][T18995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.801350][T18995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.810539][T18995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.833350][T19257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  287.998462][T19278] Cannot find set identified by id 0 to match
[  288.025984][T19275] loop3: detected capacity change from 0 to 8192
[  288.041661][T19275] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  288.650213][T19296] Cannot find set identified by id 0 to match
[  288.726735][T19300] loop4: detected capacity change from 0 to 512
[  288.747530][T19300] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  288.914251][T19317] syz.1.3360[19317] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  288.914330][T19317] syz.1.3360[19317] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  288.944168][T19317] syz.1.3360[19317] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.059443][T19329] loop3: detected capacity change from 0 to 256
[  289.080588][T19329] msdos: Unknown parameter 'fowner>00000000000000000000'
[  289.106562][T19331] bond1: entered promiscuous mode
[  289.111944][T19331] bond1: entered allmulticast mode
[  289.115791][T19336] Cannot find set identified by id 0 to match
[  289.144450][T19331] 8021q: adding VLAN 0 to HW filter on device bond1
[  289.162433][T19331] bond1 (unregistering): Released all slaves
[  289.249467][T19350] bond1: entered promiscuous mode
[  289.254724][T19350] bond1: entered allmulticast mode
[  289.260462][T19350] 8021q: adding VLAN 0 to HW filter on device bond1
[  289.274589][T19350] bond1 (unregistering): Released all slaves
[  289.351927][T19357] loop4: detected capacity change from 0 to 8192
[  289.362745][T19360] FAULT_INJECTION: forcing a failure.
[  289.362745][T19360] name failslab, interval 1, probability 0, space 0, times 0
[  289.375654][T19360] CPU: 0 UID: 0 PID: 19360 Comm: syz.0.3379 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  289.378339][T19357] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  289.386615][T19360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  289.386636][T19360] Call Trace:
[  289.386645][T19360]  <TASK>
[  289.413638][T19360]  dump_stack_lvl+0xf2/0x150
[  289.418477][T19360]  dump_stack+0x15/0x20
[  289.422742][T19360]  should_fail_ex+0x223/0x230
[  289.427560][T19360]  ? __alloc_skb+0x10b/0x310
[  289.432406][T19360]  should_failslab+0x8f/0xb0
[  289.437268][T19360]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  289.443227][T19360]  __alloc_skb+0x10b/0x310
[  289.448294][T19360]  netlink_alloc_large_skb+0xad/0xe0
[  289.454159][T19360]  netlink_sendmsg+0x3b4/0x6e0
[  289.458990][T19360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.464332][T19360]  __sock_sendmsg+0x140/0x180
[  289.469299][T19360]  ____sys_sendmsg+0x312/0x410
[  289.474366][T19360]  __sys_sendmsg+0x1d9/0x270
[  289.479781][T19360]  __x64_sys_sendmsg+0x46/0x50
[  289.484678][T19360]  x64_sys_call+0x2689/0x2d60
[  289.489377][T19360]  do_syscall_64+0xc9/0x1c0
[  289.494027][T19360]  ? clear_bhb_loop+0x55/0xb0
[  289.498880][T19360]  ? clear_bhb_loop+0x55/0xb0
[  289.503910][T19360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.509847][T19360] RIP: 0033:0x7f0819fadff9
[  289.514417][T19360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.534776][T19360] RSP: 002b:00007f0818c21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.543476][T19360] RAX: ffffffffffffffda RBX: 00007f081a165f80 RCX: 00007f0819fadff9
[  289.551641][T19360] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[  289.559702][T19360] RBP: 00007f0818c21090 R08: 0000000000000000 R09: 0000000000000000
[  289.567760][T19360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.575861][T19360] R13: 0000000000000000 R14: 00007f081a165f80 R15: 00007ffcbe508ef8
[  289.583898][T19360]  </TASK>
[  289.673575][T19368] Cannot find set identified by id 0 to match
[  289.739921][T19377] FAULT_INJECTION: forcing a failure.
[  289.739921][T19377] name failslab, interval 1, probability 0, space 0, times 0
[  289.752790][T19377] CPU: 1 UID: 0 PID: 19377 Comm: syz.0.3386 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  289.763921][T19377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  289.774034][T19377] Call Trace:
[  289.777883][T19377]  <TASK>
[  289.780841][T19377]  dump_stack_lvl+0xf2/0x150
[  289.785560][T19377]  dump_stack+0x15/0x20
[  289.789773][T19377]  should_fail_ex+0x223/0x230
[  289.794659][T19377]  ? __alloc_skb+0x10b/0x310
[  289.799482][T19377]  should_failslab+0x8f/0xb0
[  289.804156][T19377]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  289.810105][T19377]  __alloc_skb+0x10b/0x310
[  289.814625][T19377]  netlink_alloc_large_skb+0xad/0xe0
[  289.820055][T19377]  netlink_sendmsg+0x3b4/0x6e0
[  289.824993][T19377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.830717][T19377]  __sock_sendmsg+0x140/0x180
[  289.835478][T19377]  ____sys_sendmsg+0x312/0x410
[  289.840352][T19377]  __sys_sendmsg+0x1d9/0x270
[  289.845107][T19377]  __x64_sys_sendmsg+0x46/0x50
[  289.850139][T19377]  x64_sys_call+0x2689/0x2d60
[  289.854850][T19377]  do_syscall_64+0xc9/0x1c0
[  289.859473][T19377]  ? clear_bhb_loop+0x55/0xb0
[  289.864306][T19377]  ? clear_bhb_loop+0x55/0xb0
[  289.869169][T19377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.875546][T19377] RIP: 0033:0x7f0819fadff9
[  289.880095][T19377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.884846][T19339] Process accounting resumed
[  289.899922][T19377] RSP: 002b:00007f0818c21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.899953][T19377] RAX: ffffffffffffffda RBX: 00007f081a165f80 RCX: 00007f0819fadff9
[  289.899970][T19377] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  289.929152][T19377] RBP: 00007f0818c21090 R08: 0000000000000000 R09: 0000000000000000
[  289.937164][T19377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.945285][T19377] R13: 0000000000000000 R14: 00007f081a165f80 R15: 00007ffcbe508ef8
[  289.953404][T19377]  </TASK>
[  289.958752][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'.
[  289.967920][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3385'.
[  290.092821][T18688] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  290.101621][T18688] FAT-fs (loop4): Filesystem has been set read-only
[  290.128164][T19394] loop1: detected capacity change from 0 to 8192
[  290.158479][T19394] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  290.459998][ T3669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.535055][ T3669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.598780][ T3669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.640749][ T3669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.708329][ T3669] bridge_slave_1: left allmulticast mode
[  290.714039][ T3669] bridge_slave_1: left promiscuous mode
[  290.719930][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.745261][ T3669] bridge_slave_0: left allmulticast mode
[  290.751006][ T3669] bridge_slave_0: left promiscuous mode
[  290.756669][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.829368][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'.
[  290.889979][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.901039][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.912243][ T3669] bond0 (unregistering): Released all slaves
[  290.938260][T19434] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  290.979794][ T3669] hsr_slave_0: left promiscuous mode
[  290.985840][ T3669] hsr_slave_1: left promiscuous mode
[  290.992059][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.000065][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.009684][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.011971][T19446] loop1: detected capacity change from 0 to 512
[  291.017361][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.023904][T19446] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  291.042539][ T3669] veth1_macvtap: left promiscuous mode
[  291.048193][ T3669] veth0_macvtap: left promiscuous mode
[  291.053752][ T3669] veth1_vlan: left promiscuous mode
[  291.059046][ T3669] veth0_vlan: left promiscuous mode
[  291.188278][ T3669] team0 (unregistering): Port device team_slave_1 removed
[  291.199406][ T3669] team0 (unregistering): Port device team_slave_0 removed
[  291.256001][T19417] Process accounting resumed
[  291.366005][T19412] chnl_net:caif_netlink_parms(): no params data found
[  291.408259][T19464] loop1: detected capacity change from 0 to 8192
[  291.424664][T19464] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.440341][T19412] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.447493][T19412] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.459116][T19412] bridge_slave_0: entered allmulticast mode
[  291.466351][T19412] bridge_slave_0: entered promiscuous mode
[  291.475059][T19412] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.482323][T19412] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.491132][T19412] bridge_slave_1: entered allmulticast mode
[  291.497780][T19412] bridge_slave_1: entered promiscuous mode
[  291.532945][T19412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.548964][T19412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.582467][T19412] team0: Port device team_slave_0 added
[  291.590615][T19412] team0: Port device team_slave_1 added
[  291.607450][T19412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.614521][T19412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.640949][T19412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.666531][T19412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.673775][T19412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.699971][T19412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.856069][T19412] hsr_slave_0: entered promiscuous mode
[  291.868226][T19412] hsr_slave_1: entered promiscuous mode
[  291.878752][T19412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.896753][T19412] Cannot create hsr debugfs directory
[  292.070336][T18187] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  292.079020][T18187] FAT-fs (loop1): Filesystem has been set read-only
[  292.131134][T19516] Cannot find set identified by id 0 to match
[  292.203656][   T29] kauditd_printk_skb: 355 callbacks suppressed
[  292.203675][   T29] audit: type=1326 audit(1728348234.032:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.225037][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'.
[  292.233807][   T29] audit: type=1326 audit(1728348234.032:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.245647][T19528] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  292.266711][   T29] audit: type=1326 audit(1728348234.032:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.300066][   T29] audit: type=1326 audit(1728348234.032:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.323689][   T29] audit: type=1326 audit(1728348234.032:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.347249][   T29] audit: type=1326 audit(1728348234.032:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.370990][   T29] audit: type=1326 audit(1728348234.032:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.394848][   T29] audit: type=1326 audit(1728348234.032:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.419996][   T29] audit: type=1326 audit(1728348234.112:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.444051][   T29] audit: type=1326 audit(1728348234.112:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19521 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30925fdff9 code=0x7ffc0000
[  292.574572][T19412] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  292.599055][ T1324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.614452][T19555] Cannot find set identified by id 0 to match
[  292.623271][T19412] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  292.634591][T19555] loop3: detected capacity change from 0 to 512
[  292.641893][T19555] EXT4-fs: Ignoring removed nobh option
[  292.648127][T19555] EXT4-fs: Ignoring removed nobh option
[  292.656364][T19412] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  292.671042][T19412] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  292.683656][T19555] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  292.697861][T19555] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3431: invalid indirect mapped block 2683928664 (level 1)
[  292.718993][ T1324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.721911][T19555] EXT4-fs (loop3): 1 truncate cleaned up
[  292.735845][T19555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.778814][T19412] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.790776][T18995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.791636][T19412] 8021q: adding VLAN 0 to HW filter on device team0
[  292.811261][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.818379][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.861525][ T1324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.876878][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.884215][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.930428][ T1324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.017849][T19412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.046324][T19533] Process accounting resumed
[  293.113337][T19556] chnl_net:caif_netlink_parms(): no params data found
[  293.128761][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'.
[  293.140440][ T1324] bridge_slave_1: left allmulticast mode
[  293.146259][ T1324] bridge_slave_1: left promiscuous mode
[  293.152023][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.162429][ T1324] bridge_slave_0: left allmulticast mode
[  293.168264][ T1324] bridge_slave_0: left promiscuous mode
[  293.173984][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.309697][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.321073][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.332027][ T1324] bond0 (unregistering): Released all slaves
[  293.349865][T19589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  293.403057][T19556] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.410325][T19556] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.420833][T19621] FAULT_INJECTION: forcing a failure.
[  293.420833][T19621] name failslab, interval 1, probability 0, space 0, times 0
[  293.424086][T19556] bridge_slave_0: entered allmulticast mode
[  293.433718][T19621] CPU: 1 UID: 0 PID: 19621 Comm: syz.0.3437 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  293.440542][T19556] bridge_slave_0: entered promiscuous mode
[  293.450309][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  293.450327][T19621] Call Trace:
[  293.450335][T19621]  <TASK>
[  293.450345][T19621]  dump_stack_lvl+0xf2/0x150
[  293.459172][T19412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.466319][T19621]  dump_stack+0x15/0x20
[  293.466349][T19621]  should_fail_ex+0x223/0x230
[  293.492919][T19621]  ? __alloc_skb+0x10b/0x310
[  293.497589][T19621]  should_failslab+0x8f/0xb0
[  293.502300][T19621]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  293.508213][T19621]  __alloc_skb+0x10b/0x310
[  293.512758][T19621]  audit_log_start+0x368/0x6b0
[  293.517587][T19621]  audit_seccomp+0x4b/0x130
[  293.522101][T19621]  __seccomp_filter+0x6fa/0x1180
[  293.527061][T19621]  ? proc_fail_nth_write+0x12a/0x150
[  293.532418][T19621]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  293.538086][T19621]  ? vfs_write+0x580/0x910
[  293.542601][T19621]  ? __fget_files+0x1d4/0x210
[  293.547301][T19621]  __secure_computing+0x9f/0x1c0
[  293.552336][T19621]  syscall_trace_enter+0xd1/0x1f0
[  293.557378][T19621]  ? fpregs_assert_state_consistent+0x83/0xa0
[  293.563523][T19621]  do_syscall_64+0xaa/0x1c0
[  293.568083][T19621]  ? clear_bhb_loop+0x55/0xb0
[  293.572860][T19621]  ? clear_bhb_loop+0x55/0xb0
[  293.577621][T19621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.583526][T19621] RIP: 0033:0x7f0819fadff9
[  293.588013][T19621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.607647][T19621] RSP: 002b:00007f0818c21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  293.616122][T19621] RAX: ffffffffffffffda RBX: 00007f081a165f80 RCX: 00007f0819fadff9
[  293.624378][T19621] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000000020b2c000
[  293.632359][T19621] RBP: 00007f0818c21090 R08: 0000000000000000 R09: 0000000000000000
[  293.640357][T19621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.648361][T19621] R13: 0000000000000000 R14: 00007f081a165f80 R15: 00007ffcbe508ef8
[  293.656414][T19621]  </TASK>
[  293.663345][ T1324] hsr_slave_0: left promiscuous mode
[  293.669748][ T1324] hsr_slave_1: left promiscuous mode
[  293.675884][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.683433][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.704110][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.711617][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.722071][T19631] Cannot find set identified by id 0 to match
[  293.730771][ T1324] veth1_macvtap: left promiscuous mode
[  293.736327][ T1324] veth0_macvtap: left promiscuous mode
[  293.742008][ T1324] veth1_vlan: left promiscuous mode
[  293.747338][ T1324] veth0_vlan: left promiscuous mode
[  293.753337][T19631] loop3: detected capacity change from 0 to 512
[  293.761087][T19631] EXT4-fs: Ignoring removed nobh option
[  293.766730][T19631] EXT4-fs: Ignoring removed nobh option
[  293.784361][T19631] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  293.795040][T19631] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3440: invalid indirect mapped block 2683928664 (level 1)
[  293.811562][T19631] EXT4-fs (loop3): 1 truncate cleaned up
[  293.818063][T19631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.844410][T18995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.905595][ T1324] team0 (unregistering): Port device team_slave_1 removed
[  293.916552][ T1324] team0 (unregistering): Port device team_slave_0 removed
[  293.963227][T19556] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.970442][T19556] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.979791][T19556] bridge_slave_1: entered allmulticast mode
[  293.986373][T19556] bridge_slave_1: entered promiscuous mode
[  294.020838][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.045678][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.065368][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'.
[  294.098724][T19556] team0: Port device team_slave_0 added
[  294.105093][T19652] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  294.126470][T19556] team0: Port device team_slave_1 added
[  294.175854][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.183039][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.210537][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.274364][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.281688][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.307984][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.334096][T19682] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.338187][T19685] loop3: detected capacity change from 0 to 512
[  294.377930][T19685] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  294.391658][T19412] veth0_vlan: entered promiscuous mode
[  294.399789][T19689] Cannot find set identified by id 0 to match
[  294.403332][T19412] veth1_vlan: entered promiscuous mode
[  294.444808][T19556] hsr_slave_0: entered promiscuous mode
[  294.452226][T19556] hsr_slave_1: entered promiscuous mode
[  294.482179][T19412] veth0_macvtap: entered promiscuous mode
[  294.490604][T19412] veth1_macvtap: entered promiscuous mode
[  294.537954][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.548664][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.558623][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.569182][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.579133][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.589700][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.599724][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.610356][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.642462][T19637] Process accounting resumed
[  294.673961][T19412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.719099][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.729671][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.739666][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.750246][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.760206][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.770672][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.780680][T19412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.791136][T19412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.842639][T19412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.875539][T19412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.884376][T19412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.893341][T19412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.902328][T19412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.001743][T19731] loop4: detected capacity change from 0 to 256
[  295.027457][T19734] Cannot find set identified by id 0 to match
[  295.039653][T19734] loop3: detected capacity change from 0 to 512
[  295.046786][T19734] EXT4-fs: Ignoring removed nobh option
[  295.052504][T19734] EXT4-fs: Ignoring removed nobh option
[  295.065653][T19734] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  295.075280][ T3563] ==================================================================
[  295.083414][ T3563] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current
[  295.091616][ T3563] 
[  295.094019][ T3563] write to 0xffff888103d720f0 of 4 bytes by task 3256 on cpu 0:
[  295.101772][ T3563]  inode_set_ctime_current+0x35/0x50
[  295.107184][ T3563]  shmem_mknod+0x117/0x180
[  295.111632][ T3563]  shmem_create+0x34/0x40
[  295.116041][ T3563]  path_openat+0xe92/0x1fa0
[  295.120936][ T3563]  do_filp_open+0xf7/0x200
[  295.125395][ T3563]  do_sys_openat2+0xab/0x120
[  295.127732][T19734] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3462: invalid indirect mapped block 2683928664 (level 1)
[  295.130095][ T3563]  __x64_sys_openat+0xf3/0x120
[  295.130125][ T3563]  x64_sys_call+0x1025/0x2d60
[  295.130151][ T3563]  do_syscall_64+0xc9/0x1c0
[  295.159078][ T3563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.165006][ T3563] 
[  295.167427][ T3563] read to 0xffff888103d720f0 of 4 bytes by task 3563 on cpu 1:
[  295.174990][ T3563]  generic_fillattr+0x1dd/0x2f0
[  295.179862][ T3563]  shmem_getattr+0x17b/0x200
[  295.184466][ T3563]  vfs_getattr+0x19b/0x1e0
[  295.188926][ T3563]  vfs_statx+0x134/0x2f0
[  295.193177][ T3563]  vfs_fstatat+0xec/0x110
[  295.197541][ T3563]  __se_sys_newfstatat+0x58/0x260
[  295.202579][ T3563]  __x64_sys_newfstatat+0x55/0x70
[  295.207632][ T3563]  x64_sys_call+0x141f/0x2d60
[  295.212426][ T3563]  do_syscall_64+0xc9/0x1c0
[  295.216953][ T3563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.222972][ T3563] 
[  295.225325][ T3563] value changed: 0x32d6cdb1 -> 0x35d1be32
[  295.231233][ T3563] 
[  295.233562][ T3563] Reported by Kernel Concurrency Sanitizer on:
[  295.239831][ T3563] CPU: 1 UID: 0 PID: 3563 Comm: udevd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  295.250124][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  295.260632][ T3563] ==================================================================
[  295.286949][T19734] EXT4-fs (loop3): 1 truncate cleaned up
[  295.293273][T19734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.326050][T18995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.449065][T19556] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  295.462423][T19556] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  295.471670][T19556] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  295.482680][T19556] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  295.543848][T19556] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.559194][T19556] 8021q: adding VLAN 0 to HW filter on device team0
[  295.570191][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.577311][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.588748][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.596038][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.690851][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.778503][T19556] veth0_vlan: entered promiscuous mode
[  295.787655][T19556] veth1_vlan: entered promiscuous mode
[  295.803724][T19556] veth0_macvtap: entered promiscuous mode
[  295.812374][T19556] veth1_macvtap: entered promiscuous mode
[  295.827388][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.837938][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.847877][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.858393][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.868348][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.878832][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.888815][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.899321][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.909159][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.919648][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.930755][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.942665][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.953176][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.963078][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.973733][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.983569][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.994184][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.004036][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.014519][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.024460][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.034950][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.046051][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.057784][T19556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.066679][T19556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.075472][T19556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.084481][T19556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.952669][ T3669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.451252][ T3669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.512202][ T3669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.573070][ T3669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.654556][ T3669] bridge_slave_1: left allmulticast mode
[  297.660457][ T3669] bridge_slave_1: left promiscuous mode
[  297.666209][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.677311][ T3669] bridge_slave_0: left allmulticast mode
[  297.683056][ T3669] bridge_slave_0: left promiscuous mode
[  297.689174][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.840104][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.853052][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.864425][ T3669] bond0 (unregistering): Released all slaves
[  297.900437][ T3669] hsr_slave_0: left promiscuous mode
[  297.906204][ T3669] hsr_slave_1: left promiscuous mode
[  297.925959][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.933554][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.951906][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.959523][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.979389][ T3669] veth1_macvtap: left promiscuous mode
[  297.984953][ T3669] veth0_macvtap: left promiscuous mode
[  297.990616][ T3669] veth1_vlan: left promiscuous mode
[  297.996020][ T3669] veth0_vlan: left promiscuous mode
[  298.137321][ T3669] team0 (unregistering): Port device team_slave_1 removed
[  298.149869][ T3669] team0 (unregistering): Port device team_slave_0 removed
[  298.735543][   T29] kauditd_printk_skb: 388 callbacks suppressed
[  298.735582][   T29] audit: type=1400 audit(1728348240.562:7618): avc:  denied  { sys_chroot } for  pid=19886 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  298.772485][   T29] audit: type=1400 audit(1728348240.592:7619): avc:  denied  { setgid } for  pid=19886 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  298.793547][   T29] audit: type=1400 audit(1728348240.592:7620): avc:  denied  { setuid } for  pid=19886 comm="dhcpcd" capability=7  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  298.814483][   T29] audit: type=1400 audit(1728348240.592:7621): avc:  denied  { setrlimit } for  pid=19886 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1