last executing test programs:

5.488694287s ago: executing program 2 (id=291):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)

5.440785971s ago: executing program 2 (id=293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0)

5.224207381s ago: executing program 0 (id=296):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x791}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x991}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20048001}, 0x80)

5.217713532s ago: executing program 2 (id=297):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x3880, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000003000)='\t', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a0000001d000000", 0x8)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fstat(r2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d2, 0x0)

5.191781784s ago: executing program 0 (id=298):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000011b0000050002000a046700ede71013bc017da1be6209a1f576e8128c0d5347b800ee1b57258e6d0bcd6818cd33ed0fbe2271c7be4265b0c99eb8e5397efa2ec78550418bc64e893ae077b5661bc000000050d4b5a0f96b1f63cc0000000000dd3b2340bfa9bff18671b2d9641dee7f29bc9e0973bb64cae3261756f9fd2c8d3c788df495c3681262afcb593ed82bef3a30b3a2371883d8503cc52a4b2f70ea185a765717903c4054bdc17c3dc751c3eb28252bcde55098a05a61ef57558457e61a55ac08b61fb9131c4608"], 0x24}}, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r3=>0x0)
io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) (async)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000380)={@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, {&(0x7f0000000c00)=""/4096, 0x1000}, &(0x7f00000002c0), 0x8}, 0xa0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x10, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1fac488b1b1b2c17}}}}]}]}, 0x70}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
r10 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=r9, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0) (async)
syz_clone(0x8a00000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.106439352s ago: executing program 0 (id=300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="98", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000013c0)="7c8ec942ff", 0x5}], 0x1, &(0x7f00000014c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x2, 0x4800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r3)
connect$unix(r4, &(0x7f0000000100)=@abs, 0x6e)

5.106165422s ago: executing program 0 (id=301):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
rmdir(&(0x7f00000002c0)='./file1\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500c5e1218218c279ec0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00004000000000000000000000040000050000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168)
listen(r5, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0x2, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0)
r7 = msgget(0x0, 0x28c)
msgrcv(r7, 0x0, 0x0, 0x2, 0x1000)
msgsnd(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000e37ea8ac477b13a9005b1892633e3dbb2087ea85b4fd65"], 0x8, 0x0)

4.868507233s ago: executing program 0 (id=302):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0xf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00'}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095", @ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

4.422722534s ago: executing program 0 (id=306):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x14, 0x30, 0x20, 0x0, 0x4}, 0x14}}, 0x4040)
r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x4)

4.318621874s ago: executing program 2 (id=311):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
rmdir(&(0x7f00000002c0)='./file1\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500c5e1218218c279ec0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00004000000000000000000000040000050000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168)
listen(r5, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0x2, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a872841640"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0)
r7 = msgget(0x0, 0x28c)
msgrcv(r7, 0x0, 0x0, 0x2, 0x1000)
msgsnd(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000e37ea8ac477b13a9005b1892633e3dbb2087ea85b4fd65"], 0x8, 0x0)

4.133022501s ago: executing program 2 (id=313):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0xa1, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x4c, r2, 0x600, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24086884)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3.737840757s ago: executing program 2 (id=321):
r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}]}, 0x9, 0x5f2, &(0x7f0000002540)="$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")
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(0x0, 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
socket$inet6(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000a966e08053937ec6bc80100cec61df126949ef19fa5fcd66080664f6c5215b04a987649b", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYRES64=r3], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7ff00000000bfa200000080000007020000f8ffffffb703000008000000b70400a8da58e446b6c6613f3f840006fa0a7d186647da599951c82264d12437485b05a925a2eedef800"/89], 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r5], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="263300000100000000000000000000000000000000000000004d1c00"], 0x48)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}}}, @TCA_TBF_PTAB={0x404, 0x3, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7677, 0x0, 0x0, 0x0, 0x8]}]}}]}, 0x45c}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
pipe(&(0x7f0000000080))
r12 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r12, &(0x7f0000000240)=[{&(0x7f00000008c0)="095ead7ca3526e9c9f18a3763849b7d9ffca83ca5a9d03ba71d26f6a03f63a0616307f0aacc20928a9717148e08e8d32544fd6fe672eed7cc044c4798218ef8dedb35ea6aab6502d419d2fd8f3d477d70582de46ce7dce54455cd21eb508be8aebf26c14bfa69b742dbe1357c73ddf4e592badb659b1327b2b73f4197fc45441341084c19bd779c29947b60c5929a56eb85c597574c6bdda43cbc21a87fa37c98c2bb26fd5ab6826fc5276717501429e62b6e1c372225404f559d4029391dab69e1a4cf26d66b2834cfcb7a205f6b3f44f224519e955b1cba6511c3083352d542a7b13d44ef58d2b6b8f28b9131759e6815a3d2c7c32da669d01848cca948b7a548c46387417a640c6573b6fa22bb39239d24b614a32c51ea4fbe4c9cb31dd01362f2e73fb3dd4297e0adc8978a06ceb37f3cdbb8a2db13257a07bf9b11c3758a925c2ccc89b4f6b80e2f0a91825f025e8415217799becc016582cd1c41ad476301517", 0x163}], 0x1, 0x1, 0x0, 0x3)

3.635625086s ago: executing program 4 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100000000e84499268d5945a7a84aeff851d3c19a7825a4176ff77bb5bc7b797dba43826b08a3a7d212"], 0x48)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0)
write$cgroup_int(r1, &(0x7f0000000180), 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10)
r4 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)

3.368625901s ago: executing program 4 (id=326):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:4 '], 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES8], 0x20}}, 0x0)

3.272516259s ago: executing program 4 (id=329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)

3.231592234s ago: executing program 4 (id=330):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
rmdir(&(0x7f00000002c0)='./file1\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500c5e1218218c279ec0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00004000000000000000000000040000050000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168)
listen(r5, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0x2, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0)
r7 = msgget(0x0, 0x28c)
msgrcv(r7, 0x0, 0x0, 0x2, 0x1000)

2.387118891s ago: executing program 4 (id=349):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0)

1.886400007s ago: executing program 4 (id=355):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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")
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{}]})
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xbe]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mq_open(&(0x7f0000000080)='\x00', 0x40, 0x68, &(0x7f00000000c0)={0x8000, 0x1, 0x3})
r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x5, 0x1, 0x2, 0x9}, 0x14)
sendfile(r5, r4, 0x0, 0x100800001)

1.762061828s ago: executing program 3 (id=362):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
kcmp(0x0, 0x0, 0x0, r0, r0)
mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x6)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r3=>r1, {0x1}}, './file1\x00'})
write$cgroup_freezer_state(r3, &(0x7f00000006c0)='FROZEN\x00', 0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff1a)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110003040000000000000000000000006df00c4d995319e6a19c8059eafa0021a075107b2ce8c690d619f6a635df82a504864f93e3bc2e92dde754", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0)
sendmmsg$unix(r5, &(0x7f0000000480)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)="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", 0xfe}, {&(0x7f0000000880)="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", 0x158}, {&(0x7f0000000500)="cc947ae2bd6a5a7341445b9ef16d578db0d7c29a88b030ed69d56caa9d5c5f6e85bc4b0981ab7258770cdeb6044bcf951c60d5a9a8c07e9fda6477ef8973ac7019bcf8512d026024379ab38b41ee2e6277e9aa33abfdc421dfbf80e04a117de1672bb0f0ab2403a085ffe34600"/123, 0x7b}, {&(0x7f0000000580)="5fad9efda7b85d5862489a05d7b5d178b57bc91637160768bf33d703c9b37535fc8ff36dd2ce5e5cda0e72493511c51a0a095385512cb96bc10a2ea3678853d13a20b969c464a03b95a90baf639fae31691a718404fc4fd1a205e7b564427f0d787e1c2848b89c4dba4437fb278be91fb6756e6b6afff5ae7399c9a42af854be3dacdc885d41e0322ee2181948e699ad9c6d79b1d50f5329ddc36e815e3e0dcb8bacf977b81aa3b8f9163c4c4bc0b14b1e15b9dbf1ab9ed887b227159fb0cb4cc30eec302bb36b37", 0xc8}, {&(0x7f0000000280)="1f6a207344929076dd4e535571361411028918ac3ba7e3fec9e7e809f17fefb250daa358a2546c4f44ec9a546781f65028d9969a264b826f47fa1a66973170b4a617fdff3f9057eb704b669852", 0x4d}, {&(0x7f0000000300)="ba813ac78d899b5878f07e732c452fdfabc491466fe6bb0a6ab5061d443554b226459172c8646da905eeea", 0x2b}], 0x6, 0x0, 0x0, 0x34040805}}], 0x1, 0x8000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r10)
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.425850309s ago: executing program 3 (id=365):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)

1.19364918s ago: executing program 1 (id=368):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4080)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
readv(r0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f00000004c0)=""/36, 0x24}], 0x6)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB="cb02dd7f8b3a1bb6ea49f4a23f9fc3d90000000000"])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="db1a6b280d071e2422beae4c988ca69f0489dfaae815b2f12829d1e8be2af424a16e493bcd6577b404b5fce2d80329a1927b317232c97e83687f77387024b6940078ad527960891a7def717fc38283cbfc73dd6b2ee917f2da118c0f9e24d89e27fee91a4f56d62cea90b10277ffe6724f7c389702ba", 0x76}, {&(0x7f0000000280)="922f484d6f35ae1bdb8a7d98f258c3caa4f186b6354dba733a59735d85ebeb3daeaab2beaef176e5a341569b7c030acb0da1f6279591083aae981b814c56fe69efaf63ecf0a174421c6485020a967f27ed8a402e488ed0d829ff89f542f32f5ea0ab24f98bcd9810097ce1c959ead4d523ba39bdf4697b589499d882", 0x7c}], 0x2)
r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@errors_remount}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM")
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file1\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x10)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

1.08145508s ago: executing program 3 (id=369):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xc8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xc8}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0xa1, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x4c, r2, 0x600, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24086884)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.08000122s ago: executing program 1 (id=370):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002e00010000000000000000000000090000000000f60301fed0869100040000000000000a"], 0x28}}, 0x0)

1.048478574s ago: executing program 1 (id=371):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080)
r4 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r4, &(0x7f00000002c0)=""/241, 0x1ffd4, 0x2, 0x0, 0x0)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]})

930.689494ms ago: executing program 1 (id=372):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4080)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
pipe2$9p(0x0, 0x0)
readv(r0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/217, 0xd9}, {0x0}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f00000004c0)=""/36, 0x24}], 0x6)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB="cb02dd7f8b3a1bb6ea49f4a23f9fc3d90000000000"])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="db1a6b280d071e2422beae4c988ca69f0489dfaae815b2f12829d1e8be2af424a16e493bcd6577b404b5fce2d80329a1927b317232c97e83687f77387024b6940078ad527960891a7def717fc38283cbfc73dd6b2ee917f2da118c0f9e24d89e27fee91a4f56d62cea90b10277ffe6724f7c389702ba", 0x76}, {&(0x7f0000000280)="922f484d6f35ae1bdb8a7d98f258c3caa4f186b6354dba733a59735d85ebeb3daeaab2beaef176e5a341569b7c030acb0da1f6279591083aae981b814c56fe69efaf63ecf0a174421c6485020a967f27ed8a402e488ed0d829ff89f542f32f5ea0ab24f98bcd9810097ce1c959ead4d523ba39bdf4697b589499d882", 0x7c}], 0x2)
r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@errors_remount}]}, 0x1, 0x549, &(0x7f0000001800)="$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")
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file1\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x10)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

924.602655ms ago: executing program 3 (id=373):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffe}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
mq_open(&(0x7f0000000100)='\xd3\x9cqG?\x99\\\x8b\x89\x15\xb9\x8a\xa5\x0e\xa2\xfa\x05.\xc2\xd7?\xd8\xba{j\\\xc2`:f\x13\xa2\xcaS\xa4,^^&\x86\xdei\xc80\x14\x92\xeaY\xdf\xc3@\xc6W\xb8\x11\xbe\xd4D\xec\x9e1\x12{', 0xc0, 0x0, &(0x7f0000000040)={0x800000000000, 0x4000000, 0x9, 0x4})
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x73, @remote, 0x9}, r4}}, 0x30)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

847.725132ms ago: executing program 3 (id=374):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x719480, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={<r1=>0x0, 0x9, "4cc411130325f525df"}, &(0x7f0000000080)=0x11)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, <r2=>0x0, 0x0]}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x7, 0x8, 0x1, 0x5, 0x8, 0x9, 0xd5, {r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x8, 0x1, 0x8, 0x4, 0x1}}, &(0x7f0000000200)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x0, 0x2, 0xc, 0x8, 0xdd}, &(0x7f0000000300)=0x98)
r3 = socket(0x11, 0x805, 0x5)
sendfile(r0, r3, &(0x7f0000000340)=0x8, 0xfa)
getsockname(r0, &(0x7f0000000380)=@tipc=@name, &(0x7f0000000400)=0x80)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x105000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000480)={0x9, 0xfffffffb, 0x1, 'queue0\x00', 0x7f})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex=<r5=>0x0, 0x1e, 0x0, 0xd, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r0, r0, 0x5, 0x24, 0x0, @void, @void, @void, @value=r7, r6}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000009c0)={0xf, 0x1, {0x1, 0x3, 0x5, 0x3, 0xffffffff}, 0x8})
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r3)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000ac0)={'sit0\x00', <r10=>r8, 0x10, 0x80, 0xfffffff7, 0x10000, {{0x35, 0x4, 0x0, 0x9, 0xd4, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x1b, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0xc, [0x7fffffff, 0xb17]}, @lsrr={0x83, 0x27, 0xb1, [@loopback, @broadcast, @private=0xa010102, @multicast2, @loopback, @loopback, @empty, @multicast2, @private=0xa010102]}, @generic={0x5f, 0x6, "ae58958d"}, @timestamp={0x44, 0x10, 0xd8, 0x0, 0xa, [0x9, 0x55, 0x7]}, @cipso={0x86, 0x6c, 0x0, [{0x0, 0xd, "f88014a0669a3941267578"}, {0x5, 0xb, "ec57577478da01bf1a"}, {0x6, 0x9, "a8a1210a4bc7c7"}, {0x0, 0xd, "ef5cee4edd30e05e8ae0f2"}, {0x4, 0xd, "2cc30eab8d98081af92d4c"}, {0x1, 0x10, "dcc90e8ff38786bed106834a9b3e"}, {0x5, 0x4, "097f"}, {0x0, 0x8, "9e2007a04d05"}, {0x5, 0xf, "c7e2d85b4900882745099b3947"}]}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000d80)={&(0x7f0000000a40), 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x138, r9, 0x108, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x2}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000dc0)=0x2)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', r8, r0, 0x5, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x17, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0x26, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000fc0)=[r11, r0], &(0x7f0000001000)=[{0x0, 0x2, 0x6, 0x2}, {0x4, 0x5, 0xe, 0x5}, {0x0, 0x4, 0x4, 0x6}, {0x0, 0x2, 0x4, 0x3}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x18c, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001180)={0x2, &(0x7f0000001140)=[{0x127, 0x5, 0x4, 0x8}, {0x8e, 0x2, 0x1, 0x5a00}]})
syz_clone3(&(0x7f0000001400)={0x68126500, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)=<r12=>0x0, {0x9}, &(0x7f0000001340)=""/36, 0x24, &(0x7f0000001380)=""/47, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8, {r0}}, 0x58)
perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x9, 0x2, 0x6, 0x54, 0x0, 0x7, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x270e, 0x2, @perf_bp={&(0x7f00000011c0), 0x2}, 0x3, 0x6, 0x2, 0x9, 0xc6c, 0x2, 0xfff8, 0x0, 0x4, 0x0, 0x4}, r12, 0x1, r0, 0xb)
r13 = syz_open_dev$vcsu(&(0x7f0000001480), 0xfffffffffffffff9, 0x22000)
sendmsg$nl_generic(r13, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x120, 0x41, 0x0, 0x70bd26, 0x25dfdbfe, {0x3}, [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0xc, 0x143, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, @nested={0x96, 0xf1, 0x0, 0x1, [@generic="4f04160348a815d26a363b90987e9393ee23fc6f1f68bad289f7c33486646d589863fd516f746caa586f7f7a8313", @typed={0xc, 0xcd, 0x0, 0x0, @u64=0x2ed}, @typed={0xc, 0x149, 0x0, 0x0, @str='gretap0\x00'}, @typed={0x4, 0x4}, @generic="3bbd7e09dde7a0eaf6693176ef622db1c9156373b5d5cb55897d56deb43f6502113195df3f91b0e0b9d0", @typed={0x8, 0xf3, 0x0, 0x0, @fd=r11}, @generic="179580f65073f81e039856b9a994dc94e44be8da55d2"]}, @nested={0x64, 0xcb, 0x0, 0x1, [@generic="0367e4626229e6a08c2b40ff1311386f3c4186eb3759f74c57e34c21051b23551b2516aca75804744d426f06c735643efcedbead2cfbc992bb808bfd1a94a57f3136b9a7a1bf1d8e69a893f4cc12d13090d393af84dedeef", @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
sendmsg$NFNL_MSG_CTHELPER_GET(r13, &(0x7f00000018c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x15c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0xc0, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48808}, 0x44040)
syz_open_dev$sg(&(0x7f0000001900), 0x2, 0x1)
r14 = socket$inet(0x2, 0x80002, 0xf4b)
setsockopt$sock_int(r14, 0x1, 0xf, &(0x7f0000001940)=0x4, 0x4)

82.841182ms ago: executing program 1 (id=375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002000208500000070"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005b18fceda84e67fb0000000007c05abc00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000d2e6000000000000000018110000d20a0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r7}, 0x18)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

14.771318ms ago: executing program 1 (id=376):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)

0s ago: executing program 3 (id=377):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@deltclass={0x6c, 0x29, 0x1, 0x70bdaa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe3, 0x9}, {0xb, 0x1}, {0xfff1, 0xfff3}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xc, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7f}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xc5, 0x98}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe(&(0x7f0000000280)={<r7=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000480)=0x4, 0x4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6gre0\x00', <r8=>0x0, 0x4, 0x3a, 0x3, 0x40, 0x0, @private0, @loopback, 0x7800, 0x80, 0xffff0000, 0x4}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex=r8, r7, 0xe, 0x0, 0x0, @void, @value=r7}, 0x20)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="78d4e4ffa6", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="cf5189", 0x3}], 0x1, &(0x7f00000009c0)=[{0x10, 0x84, 0x3ff}, {0x10, 0x1, 0xa}], 0x20}}], 0x2, 0x8052)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00')
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@mblk_io_submit}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")

kernel console output (not intermixed with test programs):

batadv_slave_1
[   32.287374][ T3266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.296152][ T3266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.304904][ T3266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.313710][ T3266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.327888][ T3268] veth0_macvtap: entered promiscuous mode
[   32.338197][ T3268] veth1_macvtap: entered promiscuous mode
[   32.358282][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.368774][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.379218][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.387104][ T3265] veth1_vlan: entered promiscuous mode
[   32.411853][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.422423][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.440642][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.449854][ T3268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.458698][ T3268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.467418][ T3268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.476144][ T3268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.516675][ T3265] veth0_macvtap: entered promiscuous mode
[   32.524297][ T3265] veth1_macvtap: entered promiscuous mode
[   32.544304][ T3262] veth0_vlan: entered promiscuous mode
[   32.559255][ T3262] veth1_vlan: entered promiscuous mode
[   32.573119][ T3261] veth0_vlan: entered promiscuous mode
[   32.583088][ T3262] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left
[   32.604309][ T3402] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.605157][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.613229][ T3402] unsupported nlmsg_type 40
[   32.623559][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.623571][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.648503][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.659881][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.667878][ T3402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.681507][ T3262] veth0_macvtap: entered promiscuous mode
[   32.691150][ T3402] loop3: detected capacity change from 0 to 136
[   32.698991][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.709468][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.719353][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.729835][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.740100][ T3402] syz.3.4 (3402) used greatest stack depth: 11024 bytes left
[   32.740528][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.762512][ T3262] veth1_macvtap: entered promiscuous mode
[   32.767567][ T3406] loop1: detected capacity change from 0 to 512
[   32.778983][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.787826][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.796572][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.805307][ T3265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.816085][ T3406] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   32.829783][ T3261] veth1_vlan: entered promiscuous mode
[   32.853446][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.864042][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.873878][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.884361][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.894263][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.904838][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.922222][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.931514][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.942050][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.951870][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.962299][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.972185][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.982627][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.993531][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.005255][ T3261] veth0_macvtap: entered promiscuous mode
[   33.019244][ T3262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.028054][ T3262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.036813][ T3262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.045613][ T3262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.059613][   T29] kauditd_printk_skb: 60 callbacks suppressed
[   33.059626][   T29] audit: type=1400 audit(1726839135.426:152): avc:  denied  { create } for  pid=3412 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   33.065396][ T3261] veth1_macvtap: entered promiscuous mode
[   33.093320][   T29] audit: type=1400 audit(1726839135.456:153): avc:  denied  { write } for  pid=3412 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   33.093942][ T3413] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9'.
[   33.129836][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.137830][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.148743][   T29] audit: type=1400 audit(1726839135.516:154): avc:  denied  { bind } for  pid=3412 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.161028][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.179424][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.189293][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.195417][   T29] audit: type=1400 audit(1726839135.536:155): avc:  denied  { setopt } for  pid=3412 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.199804][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.229677][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.240394][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.250216][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.260674][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.271872][   T29] audit: type=1400 audit(1726839135.596:156): avc:  denied  { ioctl } for  pid=3412 comm="syz.1.9" path="socket:[2986]" dev="sockfs" ino=2986 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.273372][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.297061][   T29] audit: type=1400 audit(1726839135.606:157): avc:  denied  { map_create } for  pid=3417 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.317426][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.323092][   T29] audit: type=1400 audit(1726839135.606:158): avc:  denied  { map_read map_write } for  pid=3417 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.350994][ T3415] netlink: 'syz.1.9': attribute type 10 has an invalid length.
[   33.360945][   T29] audit: type=1400 audit(1726839135.716:159): avc:  denied  { create } for  pid=3417 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.362048][ T3415] team0: Failed to send options change via netlink (err -105)
[   33.380475][   T29] audit: type=1400 audit(1726839135.716:160): avc:  denied  { connect } for  pid=3417 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.385287][ T3413] infiniband syz1: set down
[   33.388257][ T3415] team0: Port device netdevsim1 added
[   33.407455][ T3413] infiniband syz1: added caif0
[   33.428009][ T3413] RDS/IB: syz1: added
[   33.432093][ T3413] smc: adding ib device syz1 with port count 1
[   33.443354][ T3413] smc:    ib device syz1 port 1 has pnetid 
[   33.450496][   T28] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[   33.460874][ T1028] caif0 speed is unknown, defaulting to 1000
[   33.466974][ T3339] caif0 speed is unknown, defaulting to 1000
[   33.468546][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.483478][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.493488][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.502798][   T29] audit: type=1400 audit(1726839135.866:161): avc:  denied  { create } for  pid=3424 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   33.504160][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.532914][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.543429][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.553274][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.563838][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.574744][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.583661][ T3261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.592552][ T3261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.601418][ T3261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.610536][ T3261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.621243][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.632692][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.639917][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.651745][ T3427] syz.2.10 (3427) used greatest stack depth: 10896 bytes left
[   33.666212][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.723752][ T3435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.740475][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.747916][ T3435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.809690][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.823173][ T3441] Invalid ELF header magic: != ELF
[   33.894107][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.915610][ T3413] caif0 speed is unknown, defaulting to 1000
[   33.925828][ T3449] loop4: detected capacity change from 0 to 512
[   33.934432][ T3449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   33.949240][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.952699][ T3441] caif0 speed is unknown, defaulting to 1000
[   33.976351][ T3450] loop3: detected capacity change from 0 to 512
[   33.980131][ T3449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.983086][ T3450] =======================================================
[   33.983086][ T3450] WARNING: The mand mount option has been deprecated and
[   33.983086][ T3450]          and is ignored by this kernel. Remove the mand
[   33.983086][ T3450]          option from the mount to silence this warning.
[   33.983086][ T3450] =======================================================
[   34.014000][ T3449] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.047873][ T3450] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   34.080001][ T3413] syz.1.9 (3413) used greatest stack depth: 10816 bytes left
[   34.101581][ T3450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   34.110380][ T3459] Invalid ELF header magic: != ELF
[   34.123944][ T3450] EXT4-fs (loop3): orphan cleanup on readonly fs
[   34.138079][ T3459] caif0 speed is unknown, defaulting to 1000
[   34.186814][ T3461] loop2: detected capacity change from 0 to 512
[   34.241394][ T3461] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   34.242976][ T3450] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15: bg 0: block 361: padding at end of block bitmap is not set
[   34.266169][ T3463] batadv0: entered promiscuous mode
[   34.272104][ T3463] batadv_slave_0: entered promiscuous mode
[   34.278044][ T3463] batadv_slave_0: left promiscuous mode
[   34.279448][ T3450] EXT4-fs (loop3): Remounting filesystem read-only
[   34.286263][ T3461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   34.298199][ T3461] EXT4-fs (loop2): orphan cleanup on readonly fs
[   34.305058][ T3450] EXT4-fs (loop3): 1 truncate cleaned up
[   34.310993][ T3461] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21: bg 0: block 361: padding at end of block bitmap is not set
[   34.312140][ T3463] batadv0: left promiscuous mode
[   34.331350][ T3450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   34.351219][ T3450] SELinux: (dev loop3, type ext4) getxattr errno 5
[   34.381690][ T3450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   34.393742][ T3461] EXT4-fs (loop2): Remounting filesystem read-only
[   34.400625][ T3461] EXT4-fs (loop2): 1 truncate cleaned up
[   34.417716][ T3461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   34.459541][ T3461] SELinux: (dev loop2, type ext4) getxattr errno 5
[   34.499734][ T3461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   34.567936][ T3441] veth0_vlan: left promiscuous mode
[   34.581402][ T3441] veth0_vlan: entered promiscuous mode
[   34.627531][ T3441] syz.3.15 (3441) used greatest stack depth: 10120 bytes left
[   34.656215][ T3459] veth0_vlan: left promiscuous mode
[   34.661975][ T3459] veth0_vlan: entered promiscuous mode
[   34.717712][ T3475] Zero length message leads to an empty skb
[   34.872376][ T3493] caif0 speed is unknown, defaulting to 1000
[   34.882236][ T3495] loop2: detected capacity change from 0 to 512
[   34.892698][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.001436][ T3493] loop1: detected capacity change from 0 to 512
[   35.096602][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.114139][ T3495] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.175651][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.189288][ T3493] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.201142][ T3493] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.31: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   35.220044][ T3493] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   35.231596][ T3493] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.31: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   35.248939][ T3493] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   35.258253][ T3493] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.31: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   35.275951][ T3493] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   35.285362][ T3493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.31: bg 0: block 18: invalid block bitmap
[   35.298754][ T3493] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.31: Failed to acquire dquot type 1
[   35.316796][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.408796][ T3493] syz.1.31 (3493) used greatest stack depth: 9224 bytes left
[   35.436333][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.516857][ T3505] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   35.592424][ T3508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'.
[   35.622220][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.629774][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.637276][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.644761][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.652235][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.659640][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.667061][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.674478][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.681924][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.689372][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.696771][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.704258][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.711853][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.719270][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.726712][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.734103][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.741503][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.748941][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.756337][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.763724][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.771154][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.778598][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.786115][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.793493][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.800886][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.808354][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.815804][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.823184][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.830669][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.838069][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.845486][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.852941][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.860331][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.867798][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.875207][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.882605][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.890002][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.897399][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.904801][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.912187][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.919585][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.926986][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.934483][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.941872][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.949381][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.956812][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.964274][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.971709][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.979160][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.986612][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   35.994008][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.001446][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.008866][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.016328][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.023708][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.031243][ T3341] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0
[   36.044202][ T3341] hid-generic 0001:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   36.062537][ T3508] caif0 speed is unknown, defaulting to 1000
[   36.233289][ T3515] 9pnet_fd: Insufficient options for proto=fd
[   36.259945][ T3515] loop3: detected capacity change from 0 to 512
[   36.282100][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.425329][ T3515] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.441206][ T3515] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.36: corrupted inode contents
[   36.528576][ T3515] EXT4-fs (loop3): Remounting filesystem read-only
[   36.749387][ T3530] Invalid ELF header magic: != ELF
[   36.763659][ T3536] Invalid ELF header magic: != ELF
[   36.783733][ T3530] caif0 speed is unknown, defaulting to 1000
[   36.799655][ T3537] netlink: 116 bytes leftover after parsing attributes in process `syz.0.42'.
[   36.812517][ T3537] bridge_slave_1: left allmulticast mode
[   36.815438][ T3538] loop1: detected capacity change from 0 to 512
[   36.818199][ T3537] bridge_slave_1: left promiscuous mode
[   36.830312][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.842494][ T3537] bridge_slave_0: left allmulticast mode
[   36.848281][ T3537] bridge_slave_0: left promiscuous mode
[   36.854001][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.863139][ T3541] loop4: detected capacity change from 0 to 512
[   36.865073][ T3538] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   36.870826][ T3541] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   36.879899][ T3538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   36.891084][ T3541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   36.896777][ T3538] EXT4-fs (loop1): orphan cleanup on readonly fs
[   36.904838][ T3541] EXT4-fs (loop4): orphan cleanup on readonly fs
[   36.917673][ T3538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.41: bg 0: block 361: padding at end of block bitmap is not set
[   36.933041][ T3538] EXT4-fs (loop1): Remounting filesystem read-only
[   36.935021][ T3541] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.44: bg 0: block 361: padding at end of block bitmap is not set
[   36.939818][ T3538] EXT4-fs (loop1): 1 truncate cleaned up
[   36.959754][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   36.971754][ T3538] SELinux: (dev loop1, type ext4) getxattr errno 5
[   36.972023][ T3541] EXT4-fs (loop4): Remounting filesystem read-only
[   36.978839][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   36.985710][ T3541] EXT4-fs (loop4): 1 truncate cleaned up
[   37.001342][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   37.016027][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.024154][ T3541] SELinux: (dev loop4, type ext4) getxattr errno 5
[   37.031921][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   37.042354][ T3536] caif0 speed is unknown, defaulting to 1000
[   37.064999][ T3544] loop2: detected capacity change from 0 to 8192
[   37.100382][ T3549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.46'.
[   37.114987][ T3544]  loop2: p1 p2 p4
[   37.118914][ T3544] loop2: p1 start 83821824 is beyond EOD, truncated
[   37.125549][ T3544] loop2: p2 start 4293394690 is beyond EOD, truncated
[   37.132339][ T3544] loop2: p4 size 50331904 extends beyond EOD, truncated
[   37.220700][ T3553] loop3: detected capacity change from 0 to 512
[   37.263179][ T3562] loop1: detected capacity change from 0 to 512
[   37.294797][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.315292][ T3562] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.320866][ T3569] SELinux:  policydb magic number 0x7875 does not match expected magic number 0xf97cff8c
[   37.335643][ T3569] SELinux: failed to load policy
[   37.337400][ T3571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3571 comm=syz.0.55
[   37.366673][ T3572] 9pnet_fd: Insufficient options for proto=fd
[   37.371489][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.377533][ T3572] loop3: detected capacity change from 0 to 512
[   37.391894][ T3574] loop0: detected capacity change from 0 to 512
[   37.404177][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.419013][ T3572] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.422910][ T3574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.444577][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.54: corrupted inode contents
[   37.455358][ T3574] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.466528][ T3572] EXT4-fs (loop3): Remounting filesystem read-only
[   37.478261][ T3581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3581 comm=syz.1.56
[   37.479326][ T3574] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.57: corrupted inode contents
[   37.510869][ T3574] EXT4-fs (loop0): Remounting filesystem read-only
[   37.532201][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.794563][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3591 comm=syz.2.61
[   37.844100][ T3597] loop2: detected capacity change from 0 to 512
[   37.855594][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.869081][ T3597] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.879952][ T3597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.921675][ T3603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'.
[   38.033348][ T3609] netlink: 'syz.2.67': attribute type 4 has an invalid length.
[   38.045962][ T3609] netlink: 'syz.2.67': attribute type 4 has an invalid length.
[   38.071565][   T29] kauditd_printk_skb: 9089 callbacks suppressed
[   38.071580][   T29] audit: type=1326 audit(1726839140.436:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff2c04ea7 code=0x7ffc0000
[   38.103431][   T29] audit: type=1326 audit(1726839140.436:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff2ba9879 code=0x7ffc0000
[   38.126690][   T29] audit: type=1326 audit(1726839140.436:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fdff2c0def9 code=0x7ffc0000
[   38.144617][ T3611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3611 comm=syz.4.68
[   38.149926][   T29] audit: type=1326 audit(1726839140.446:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff2c04ea7 code=0x7ffc0000
[   38.185363][   T29] audit: type=1326 audit(1726839140.446:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff2ba9879 code=0x7ffc0000
[   38.209109][   T29] audit: type=1326 audit(1726839140.446:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fdff2c0def9 code=0x7ffc0000
[   38.232480][   T29] audit: type=1326 audit(1726839140.466:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff2c04ea7 code=0x7ffc0000
[   38.255678][   T29] audit: type=1326 audit(1726839140.466:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff2ba9879 code=0x7ffc0000
[   38.278876][   T29] audit: type=1326 audit(1726839140.466:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff2c04ea7 code=0x7ffc0000
[   38.302344][   T29] audit: type=1326 audit(1726839140.466:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff2ba9879 code=0x7ffc0000
[   38.325823][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.345804][ T3613] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET)
[   38.355495][ T3613] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   38.368893][ T3616] loop3: detected capacity change from 0 to 256
[   38.376687][ T3616] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.428829][ T3624] loop0: detected capacity change from 0 to 512
[   38.449069][ T3624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.450502][ T3622] loop3: detected capacity change from 0 to 2048
[   38.471813][ T3627] Invalid ELF header magic: != ELF
[   38.488877][ T3627] caif0 speed is unknown, defaulting to 1000
[   38.495623][ T3624] loop0: detected capacity change from 512 to 511
[   38.506195][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.539390][ T3630] loop1: detected capacity change from 0 to 512
[   38.546352][ T3630] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   38.558982][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.572059][ T3630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   38.580189][ T3630] EXT4-fs (loop1): orphan cleanup on readonly fs
[   38.587891][ T3630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.75: bg 0: block 361: padding at end of block bitmap is not set
[   38.602367][ T3630] EXT4-fs (loop1): Remounting filesystem read-only
[   38.604887][ T3262] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   38.609597][ T3630] EXT4-fs (loop1): 1 truncate cleaned up
[   38.634989][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   38.648759][ T3630] SELinux: (dev loop1, type ext4) getxattr errno 5
[   38.657015][ T3630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   38.657311][ T3262] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   38.684057][ T3634] loop3: detected capacity change from 0 to 512
[   38.690658][ T3634] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.697234][ T3262] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   38.699040][ T3634] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   38.736939][ T3634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[   38.745257][ T3634] System zones: 1-12
[   38.749498][ T3634] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.76: corrupted in-inode xattr: e_value size too large
[   38.751671][ T3639] loop4: detected capacity change from 0 to 512
[   38.763841][ T3634] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.76: couldn't read orphan inode 15 (err -117)
[   38.784678][ T3634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.819355][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.833407][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.843594][ T3639] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.856097][ T3648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3648 comm=syz.1.80
[   38.884811][ T3639] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[   38.902659][ T3652] loop1: detected capacity change from 0 to 256
[   38.910400][ T3639] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.79: Directory hole found for htree leaf block 0
[   38.927420][ T3652] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.942525][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.961434][ T3654] loop3: detected capacity change from 0 to 512
[   38.968095][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.968314][ T3656] loop4: detected capacity change from 0 to 512
[   38.978593][ T3654] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.996712][ T3654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   39.022319][ T3654] EXT4-fs (loop3): 1 truncate cleaned up
[   39.029703][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.052995][ T3654] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.84: corrupted in-inode xattr: overlapping e_value 
[   39.068982][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.081504][ T3656] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.096297][ T3656] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[   39.106867][ T3654] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1772: inode #15: comm syz.3.84: unable to update i_inline_off
[   39.119226][ T3654] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.135207][ T3664] loop2: detected capacity change from 0 to 512
[   39.146321][ T3670] netlink: 'syz.1.90': attribute type 7 has an invalid length.
[   39.151833][ T3668] EXT4-fs error (device loop3): ext4_xattr_ibody_list:797: inode #15: comm syz.3.84: corrupted in-inode xattr: overlapping e_value 
[   39.154004][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   39.178545][ T3671] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.85: Directory hole found for htree leaf block 0
[   39.192202][ T3654] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.84: corrupted in-inode xattr: overlapping e_value 
[   39.214802][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.240016][ T3664] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.242762][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.286259][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.286356][ T3665] caif0 speed is unknown, defaulting to 1000
[   39.344928][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.369155][ T3682] loop1: detected capacity change from 0 to 512
[   39.376141][ T3690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3690 comm=syz.2.93
[   39.409993][ T3682] EXT4-fs (loop1): failed to initialize system zone (-117)
[   39.410789][ T3665] chnl_net:caif_netlink_parms(): no params data found
[   39.427784][ T3682] EXT4-fs (loop1): mount failed
[   39.440257][ T3689] 9pnet: Could not find request transport: 0xffffffffffffffff
[   39.456494][ T3689] loop4: detected capacity change from 0 to 1024
[   39.463297][ T3689] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   39.463324][ T3689] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   39.464383][ T3689] JBD2: no valid journal superblock found
[   39.490514][ T3689] EXT4-fs (loop4): Could not load journal inode
[   39.508929][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.516088][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.523332][ T3665] bridge_slave_0: entered allmulticast mode
[   39.529778][ T3665] bridge_slave_0: entered promiscuous mode
[   39.535587][ T3706] loop3: detected capacity change from 0 to 1024
[   39.543167][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.548146][ T3706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.550330][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.565810][ T3706] EXT4-fs error (device loop3): ext4_lookup:1811: inode #15: comm syz.3.96: iget: bad extended attribute block 8388352
[   39.570477][ T3665] bridge_slave_1: entered allmulticast mode
[   39.588849][ T3665] bridge_slave_1: entered promiscuous mode
[   39.597522][ T3706] EXT4-fs (loop3): Remounting filesystem read-only
[   39.615082][ T3665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.620057][ T3711] loop1: detected capacity change from 0 to 1024
[   39.625900][ T3665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.637184][ T3711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.661076][ T3665] team0: Port device team_slave_0 added
[   39.667888][ T3665] team0: Port device team_slave_1 added
[   39.693183][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.700197][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.726152][ T3665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.740342][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.747355][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.773346][ T3665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.790525][ T3716] 9pnet_fd: Insufficient options for proto=fd
[   39.800224][ T3716] loop4: detected capacity change from 0 to 512
[   39.818745][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.820875][ T3665] hsr_slave_0: entered promiscuous mode
[   39.834149][ T3665] hsr_slave_1: entered promiscuous mode
[   39.841363][ T3665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.849664][ T3665] Cannot create hsr debugfs directory
[   39.854220][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.867713][ T3716] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.882209][ T3716] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.99: corrupted inode contents
[   39.894433][ T3716] EXT4-fs (loop4): Remounting filesystem read-only
[   39.918012][ T3727] loop1: detected capacity change from 0 to 512
[   39.936023][ T3665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.956778][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.969387][ T3727] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.988569][ T3665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.000217][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.057290][ T3665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.107653][ T3665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.177492][ T3665] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   40.185995][ T3665] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   40.195028][ T3665] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   40.205147][ T3665] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   40.248334][ T3665] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.263676][ T3665] 8021q: adding VLAN 0 to HW filter on device team0
[   40.270614][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.282195][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.289288][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.301333][ T3733] loop3: detected capacity change from 0 to 512
[   40.301846][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.314719][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.316190][ T3733] EXT4-fs (loop3): too many log groups per flexible block group
[   40.329777][ T3733] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   40.332597][ T3665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.346911][ T3665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.360402][ T3733] EXT4-fs (loop3): mount failed
[   40.379700][ T3733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'.
[   40.390872][ T3733] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[   40.426411][ T3665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.489911][ T3748] loop3: detected capacity change from 0 to 512
[   40.502194][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.512934][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.522967][ T3748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.107: bg 0: block 248: padding at end of block bitmap is not set
[   40.523514][   T11] bond0 (unregistering): Released all slaves
[   40.539621][ T3748] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.107: Failed to acquire dquot type 1
[   40.556394][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.556596][ T3748] EXT4-fs (loop3): 1 truncate cleaned up
[   40.571511][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.585577][ T3748] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.614585][ T3745] syz.3.107[3745] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.614709][ T3745] syz.3.107[3745] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.633278][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.654842][  T148] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:5: Failed to release dquot type 1
[   40.658045][   T11] hsr_slave_0: left promiscuous mode
[   40.674350][   T11] hsr_slave_1: left promiscuous mode
[   40.680346][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.687859][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.697605][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.705135][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.716463][   T11] veth1_macvtap: left promiscuous mode
[   40.721961][   T11] veth0_macvtap: left promiscuous mode
[   40.727620][   T11] veth1_vlan: left promiscuous mode
[   40.733051][   T11] veth0_vlan: left promiscuous mode
[   40.740014][ T3763] Invalid ELF header magic: != ELF
[   40.799639][ T3765] loop4: detected capacity change from 0 to 512
[   40.808286][ T3765] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   40.819073][ T3765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   40.827632][   T11] team0 (unregistering): Port device team_slave_1 removed
[   40.828037][ T3765] EXT4-fs (loop4): orphan cleanup on readonly fs
[   40.841743][ T3765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.111: bg 0: block 361: padding at end of block bitmap is not set
[   40.856345][   T11] team0 (unregistering): Port device team_slave_0 removed
[   40.864187][ T3765] EXT4-fs (loop4): Remounting filesystem read-only
[   40.874097][ T3765] EXT4-fs (loop4): 1 truncate cleaned up
[   40.880315][ T3765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   40.895358][ T3765] SELinux: (dev loop4, type ext4) getxattr errno 5
[   40.909193][ T3765] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   40.925182][ T3763] caif0 speed is unknown, defaulting to 1000
[   40.930764][ T3665] veth0_vlan: entered promiscuous mode
[   40.942906][ T3665] veth1_vlan: entered promiscuous mode
[   40.949456][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.968080][ T3665] veth0_macvtap: entered promiscuous mode
[   40.974941][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.975661][ T3665] veth1_macvtap: entered promiscuous mode
[   41.010960][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.021519][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.031399][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.041857][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.051689][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.062232][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.072049][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.082546][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.093515][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.104852][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.115416][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.125268][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.135720][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.145764][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.156315][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.166158][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.169052][ T3774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3774 comm=syz.4.114
[   41.176662][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.178292][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.208152][ T3665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.216906][ T3665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.225638][ T3665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.234378][ T3665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.286363][ T3781] loop0: detected capacity change from 0 to 1024
[   41.293235][ T3781] EXT4-fs: Ignoring removed oldalloc option
[   41.305860][ T3784] Invalid ELF header magic: != ELF
[   41.314103][ T3784] loop4: detected capacity change from 0 to 128
[   41.316670][ T3781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.356311][ T3790] 9pnet_fd: Insufficient options for proto=fd
[   41.364518][ T3665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.368751][ T3790] loop2: detected capacity change from 0 to 512
[   41.405665][ T3790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.406765][ T3798] loop0: detected capacity change from 0 to 512
[   41.418348][ T3790] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.438495][ T3790] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.117: corrupted inode contents
[   41.451694][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.464594][ T3798] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.466085][ T3790] EXT4-fs (loop2): Remounting filesystem read-only
[   41.487996][ T3798] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[   41.492306][ T3800] vhci_hcd: default hub control req: 2017 v0080 i0000 l0
[   41.505765][ T3798] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.122: Directory hole found for htree leaf block 0
[   41.545902][ T3665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.593347][ T3816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3816 comm=syz.3.127
[   41.641968][ T3824] loop4: detected capacity change from 0 to 512
[   41.665487][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.678228][ T3824] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.690421][ T3827] netlink: 256 bytes leftover after parsing attributes in process `syz.3.129'.
[   41.692254][ T3824] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[   41.711778][ T3824] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.130: Directory hole found for htree leaf block 0
[   41.755101][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.801597][ T3838] loop4: detected capacity change from 0 to 256
[   41.822611][ T3838] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097162)
[   41.830603][ T3838] FAT-fs (loop4): Filesystem has been set read-only
[   41.875435][ T3844] syz.4.136[3844] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.875509][ T3844] syz.4.136[3844] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.905751][ T3846] loop1: detected capacity change from 0 to 256
[   41.934920][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.950364][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.958445][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.966248][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.973062][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.980300][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.987764][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   41.995079][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   42.002166][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   42.009702][ T3846] FAT-fs (loop1): Directory bread(block 1285) failed
[   42.040694][ T3855] loop1: detected capacity change from 0 to 512
[   42.051922][ T3855] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   42.073634][ T3855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   42.086556][ T3855] EXT4-fs (loop1): orphan cleanup on readonly fs
[   42.095880][ T3855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.139: bg 0: block 361: padding at end of block bitmap is not set
[   42.116413][ T3855] EXT4-fs (loop1): Remounting filesystem read-only
[   42.123288][ T3855] EXT4-fs (loop1): 1 truncate cleaned up
[   42.130596][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   42.150306][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.159258][ T3855] SELinux: (dev loop1, type ext4) getxattr errno 5
[   42.159854][ T3855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   42.237240][ T3869] syz.4.145[3869] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.237343][ T3869] syz.4.145[3869] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.286860][ T3873] loop4: detected capacity change from 0 to 512
[   42.316301][ T3877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3877 comm=syz.2.149
[   42.365463][ T3883] loop2: detected capacity change from 0 to 128
[   42.372715][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.386685][ T3873] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.397721][ T3873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.410564][ T3883] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.501041][ T3892] 9pnet_fd: Insufficient options for proto=fd
[   42.505001][ T3830] coredump: 1(syz.3.129): written to core: VMAs: 33, size 91361280; core: 62215146 bytes, pos 91369472
[   42.507718][ T3901] 9pnet_fd: Insufficient options for proto=fd
[   42.529054][ T3896] loop4: detected capacity change from 0 to 512
[   42.539213][ T3892] loop1: detected capacity change from 0 to 512
[   42.550949][ T3894] loop2: detected capacity change from 0 to 1024
[   42.559249][ T3896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   42.569749][ T3894] EXT4-fs: Ignoring removed orlov option
[   42.574321][ T3901] loop0: detected capacity change from 0 to 512
[   42.605416][ T3896] EXT4-fs (loop4): 1 orphan inode deleted
[   42.611254][ T3896] EXT4-fs (loop4): 1 truncate cleaned up
[   42.617218][ T3894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0003]
[   42.626686][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.639203][ T3901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.654419][ T3896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.668556][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.681122][ T3901] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.699734][ T3892] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.720227][ T3901] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.152: corrupted inode contents
[   42.742932][ T3892] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.156: corrupted inode contents
[   42.743471][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.758185][ T3892] EXT4-fs (loop1): Remounting filesystem read-only
[   42.766003][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.775955][ T3901] EXT4-fs (loop0): Remounting filesystem read-only
[   42.797135][ T3920] loop4: detected capacity change from 0 to 512
[   42.807077][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.832158][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.834220][ T3928] loop2: detected capacity change from 0 to 512
[   42.846763][ T3920] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.878229][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.893350][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.902140][ T3928] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.903399][ T3932] netlink: '+}[@': attribute type 10 has an invalid length.
[   42.919883][ T3932] netlink: 40 bytes leftover after parsing attributes in process `+}[@'.
[   42.928653][ T3932] vlan0: entered promiscuous mode
[   42.933824][ T3932] vlan0: entered allmulticast mode
[   42.933857][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.939072][ T3932] veth0_vlan: entered allmulticast mode
[   42.953296][ T3932] bridge0: port 3(vlan0) entered blocking state
[   42.959668][ T3932] bridge0: port 3(vlan0) entered disabled state
[   42.966600][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.967268][ T3932] bridge0: port 3(vlan0) entered blocking state
[   42.981837][ T3932] bridge0: port 3(vlan0) entered forwarding state
[   42.988803][ T3933] loop1: detected capacity change from 0 to 256
[   43.051867][ T3941] loop2: detected capacity change from 0 to 512
[   43.059671][ T3941] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.165: attempt to clear invalid blocks 2 len 1
[   43.075869][ T3941] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   43.090467][ T3941] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.165: invalid indirect mapped block 1819239214 (level 0)
[   43.106148][ T3941] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.165: invalid indirect mapped block 1819239214 (level 1)
[   43.120457][ T3941] EXT4-fs (loop2): 1 truncate cleaned up
[   43.127514][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.147818][ T3939] loop1: detected capacity change from 0 to 256
[   43.154686][ T3939] vfat: Unknown parameter 'ðJàÆ[‡é£ÂÌMr®µ&`å{ÇV�ç�–5�†‰ —
«×+qTp
[   43.154686][ T3939] Åý }á$°ÕÉ`é—Éek«¢\º-ëÑiÎùÅLðÑÛqžb¬bŸ[!Ûíyû­¬gÿΣ ê	F¤
0>IíõUÐgÂGƒ>.'
[   43.160711][ T3945] loop2: detected capacity change from 0 to 512
[   43.178201][ T3945] ext4: Bad value for 'resgid'
[   43.182992][ T3945] ext4: Bad value for 'resgid'
[   43.187884][   T29] kauditd_printk_skb: 1102 callbacks suppressed
[   43.187924][   T29] audit: type=1400 audit(1726839145.546:10349): avc:  denied  { write } for  pid=3938 comm="syz.1.164" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   43.217453][   T29] audit: type=1400 audit(1726839145.546:10350): avc:  denied  { ioctl } for  pid=3938 comm="syz.1.164" path="socket:[4990]" dev="sockfs" ino=4990 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.285051][   T29] audit: type=1400 audit(1726839145.656:10351): avc:  denied  { view } for  pid=3938 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   43.312673][ T3945] loop2: detected capacity change from 0 to 256
[   43.320237][ T3380] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   43.353499][   T29] audit: type=1400 audit(1726839145.716:10352): avc:  denied  { accept } for  pid=3938 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.361323][ T3945] vfat: Unknown parameter ''
[   43.376168][   T29] audit: type=1400 audit(1726839145.746:10353): avc:  denied  { write } for  pid=3938 comm="syz.1.164" path="socket:[5003]" dev="sockfs" ino=5003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.397984][ T3945] capability: warning: `syz.2.166' uses 32-bit capabilities (legacy support in use)
[   43.402398][   T29] audit: type=1326 audit(1726839145.766:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7de4def9 code=0x7ffc0000
[   43.433926][   T29] audit: type=1326 audit(1726839145.766:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7de4def9 code=0x7ffc0000
[   43.457414][   T29] audit: type=1326 audit(1726839145.766:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1b7de4def9 code=0x7ffc0000
[   43.464632][ T3953] loop0: detected capacity change from 0 to 256
[   43.480823][   T29] audit: type=1326 audit(1726839145.766:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7de4def9 code=0x7ffc0000
[   43.487696][ T3952] process 'syz.3.168' launched './file1' with NULL argv: empty string added
[   43.521083][ T3953] msdos: Bad value for 'gid'
[   43.525748][ T3953] msdos: Bad value for 'gid'
[   43.798994][ T3965] loop4: detected capacity change from 0 to 512
[   43.813723][ T3965] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[   43.934524][ T3968] 9pnet_fd: Insufficient options for proto=fd
[   43.944412][ T3968] loop2: detected capacity change from 0 to 512
[   43.976604][ T3968] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.989094][ T3968] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.173: corrupted inode contents
[   44.002244][ T3968] EXT4-fs (loop2): Remounting filesystem read-only
[   44.036844][ T3972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3972 comm=syz.2.174
[   44.072428][ T3974] 9pnet_fd: Insufficient options for proto=fd
[   44.082149][ T3974] loop2: detected capacity change from 0 to 512
[   44.106665][ T3974] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.121282][ T3974] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.175: corrupted inode contents
[   44.133467][ T3974] EXT4-fs (loop2): Remounting filesystem read-only
[   44.253404][ T3984] 9pnet_fd: Insufficient options for proto=fd
[   44.269006][ T3983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'.
[   44.281381][ T3984] loop2: detected capacity change from 0 to 512
[   44.296982][ T3984] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.309798][ T3984] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.177: corrupted inode contents
[   44.321989][ T3984] EXT4-fs (loop2): Remounting filesystem read-only
[   44.331031][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'.
[   44.490539][ T3992] loop1: detected capacity change from 0 to 256
[   44.498647][ T3992] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   44.588777][ T4001] loop1: detected capacity change from 0 to 2048
[   44.596489][ T4001] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.602990][ T4001] EXT4-fs: dax option not supported
[   44.615483][ T4003] loop0: detected capacity change from 0 to 2048
[   44.648269][ T4003] EXT4-fs (loop0): shut down requested (0)
[   44.807909][ T4020] loop4: detected capacity change from 0 to 8192
[   44.854178][ T4020]  loop4: p1 p2 p4
[   44.858164][ T4020] loop4: p1 start 83821824 is beyond EOD, truncated
[   44.864859][ T4020] loop4: p2 start 4293394690 is beyond EOD, truncated
[   44.871668][ T4020] loop4: p4 size 50331904 extends beyond EOD, truncated
[   45.075333][ T4043] loop0: detected capacity change from 0 to 512
[   45.082195][ T4043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   45.108602][ T4043] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.120866][ T4043] FAULT_INJECTION: forcing a failure.
[   45.120866][ T4043] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   45.133960][ T4043] CPU: 0 UID: 0 PID: 4043 Comm: syz.0.200 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[   45.144255][ T4043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   45.154376][ T4043] Call Trace:
[   45.157668][ T4043]  <TASK>
[   45.160590][ T4043]  dump_stack_lvl+0xf2/0x150
[   45.165252][ T4043]  dump_stack+0x15/0x20
[   45.169432][ T4043]  should_fail_ex+0x229/0x230
[   45.174227][ T4043]  should_fail+0xb/0x10
[   45.178508][ T4043]  should_fail_usercopy+0x1a/0x20
[   45.183581][ T4043]  _copy_from_user+0x1e/0xd0
[   45.188204][ T4043]  __sys_bpf+0x14e/0x7a0
[   45.192468][ T4043]  __x64_sys_bpf+0x43/0x50
[   45.196890][ T4043]  x64_sys_call+0x2625/0x2d60
[   45.201650][ T4043]  do_syscall_64+0xc9/0x1c0
[   45.206154][ T4043]  ? clear_bhb_loop+0x55/0xb0
[   45.210871][ T4043]  ? clear_bhb_loop+0x55/0xb0
[   45.215566][ T4043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.221457][ T4043] RIP: 0033:0x7f951e79def9
[   45.225875][ T4043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.245603][ T4043] RSP: 002b:00007f951d417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   45.254041][ T4043] RAX: ffffffffffffffda RBX: 00007f951e955f80 RCX: 00007f951e79def9
[   45.262052][ T4043] RDX: 0000000000000018 RSI: 0000000020000180 RDI: 0000000000000007
[   45.270018][ T4043] RBP: 00007f951d417090 R08: 0000000000000000 R09: 0000000000000000
[   45.278002][ T4043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.286038][ T4043] R13: 0000000000000000 R14: 00007f951e955f80 R15: 00007ffd8eeb89f8
[   45.294015][ T4043]  </TASK>
[   45.330877][ T4054] loop0: detected capacity change from 0 to 512
[   45.338510][ T4054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   45.358034][ T4054] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.378940][ T4065] Cannot find set identified by id 0 to match
[   45.381862][ T4054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.202: corrupted xattr block 32: bad e_name length
[   45.402017][ T4054] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   45.411061][ T4054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.202: corrupted xattr block 32: bad e_name length
[   45.425216][ T4054] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   45.456398][ T4076] 9pnet_fd: Insufficient options for proto=fd
[   45.465931][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.485075][ T4076] loop3: detected capacity change from 0 to 512
[   45.505592][ T4076] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.519763][ T4076] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.208: corrupted inode contents
[   45.567399][ T4076] EXT4-fs (loop3): Remounting filesystem read-only
[   45.586190][ T4091] loop1: detected capacity change from 0 to 512
[   45.621763][ T4097] loop0: detected capacity change from 0 to 4096
[   45.633955][ T4091] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.645855][ T4089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.656838][ T4089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.665496][ T4091] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.219: Directory hole found for htree leaf block 0
[   46.198189][ T4114] loop2: detected capacity change from 0 to 2048
[   46.205208][ T4114] EXT4-fs: Ignoring removed mblk_io_submit option
[   46.211845][ T4114] EXT4-fs: dax option not supported
[   46.222462][ T4114] loop2: detected capacity change from 0 to 256
[   46.238955][ T4114] FAT-fs (loop2): codepage cp866 not found
[   46.240643][ T4117] 9pnet_fd: Insufficient options for proto=fd
[   46.254946][ T4117] loop3: detected capacity change from 0 to 512
[   46.286835][ T4117] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.300645][ T4117] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.225: corrupted inode contents
[   46.313046][ T4117] EXT4-fs (loop3): Remounting filesystem read-only
[   46.536391][ T4143] loop4: detected capacity change from 0 to 512
[   46.576402][ T4143] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.598973][ T4136] loop3: detected capacity change from 0 to 8192
[   46.601310][ T4148] loop0: detected capacity change from 0 to 512
[   46.637048][ T4150] loop1: detected capacity change from 0 to 128
[   46.655073][ T4136]  loop3: p1 p2 p4
[   46.660132][ T4136] loop3: p1 start 83821824 is beyond EOD, truncated
[   46.666960][ T4136] loop3: p2 start 4293394690 is beyond EOD, truncated
[   46.673832][ T4136] loop3: p4 size 50331904 extends beyond EOD, truncated
[   46.682269][ T4148] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.229: bg 0: block 248: padding at end of block bitmap is not set
[   46.707209][ T4153] syz.1.233: attempt to access beyond end of device
[   46.707209][ T4153] loop1: rw=2049, sector=145, nr_sectors = 672 limit=128
[   46.731746][ T4148] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.229: Failed to acquire dquot type 1
[   46.761555][ T4150] syz.1.233: attempt to access beyond end of device
[   46.761555][ T4150] loop1: rw=524288, sector=145, nr_sectors = 64 limit=128
[   46.770455][ T4148] EXT4-fs (loop0): 1 truncate cleaned up
[   46.777937][ T4150] syz.1.233: attempt to access beyond end of device
[   46.777937][ T4150] loop1: rw=524288, sector=217, nr_sectors = 152 limit=128
[   46.784686][ T4148] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.800535][ T4150] syz.1.233: attempt to access beyond end of device
[   46.800535][ T4150] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[   46.818545][ T4140] syz.0.229[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.818658][ T4140] syz.0.229[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.819119][ T4150] syz.1.233: attempt to access beyond end of device
[   46.819119][ T4150] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[   46.854863][ T4158] 9pnet_fd: Insufficient options for proto=fd
[   46.870663][ T4158] loop4: detected capacity change from 0 to 512
[   46.882276][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:0: Failed to release dquot type 1
[   46.895016][  T289] kworker/u8:6: attempt to access beyond end of device
[   46.895016][  T289] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[   46.916727][ T4158] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.936879][ T4158] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.235: corrupted inode contents
[   46.936934][ T4164] loop0: detected capacity change from 0 to 512
[   46.951798][ T4166] loop1: detected capacity change from 0 to 512
[   46.956593][ T4158] EXT4-fs (loop4): Remounting filesystem read-only
[   46.979232][ T4164] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.990237][ T4166] loop1: detected capacity change from 512 to 511
[   47.045215][ T4173] netlink: 256 bytes leftover after parsing attributes in process `syz.0.240'.
[   47.074118][ T3268] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   47.077794][ T4179] loop0: detected capacity change from 0 to 512
[   47.101893][ T4179] EXT4-fs (loop0): Invalid log block size: 7
[   47.107379][ T3268] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   47.132762][ T3268] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   47.146795][ T4179] loop0: detected capacity change from 0 to 512
[   47.159069][ T4179] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   47.170658][ T4179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   47.178928][ T4179] EXT4-fs (loop0): orphan cleanup on readonly fs
[   47.185853][ T4179] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.241: bg 0: block 361: padding at end of block bitmap is not set
[   47.201264][ T4179] EXT4-fs (loop0): Remounting filesystem read-only
[   47.208224][ T4179] EXT4-fs (loop0): 1 truncate cleaned up
[   47.215557][ T4179] SELinux: (dev loop0, type ext4) getxattr errno 5
[   47.292049][ T4195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'.
[   47.319280][ T4202] FAULT_INJECTION: forcing a failure.
[   47.319280][ T4202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.325093][ T4200] loop3: detected capacity change from 0 to 1024
[   47.332501][ T4202] CPU: 0 UID: 0 PID: 4202 Comm: syz.2.253 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[   47.348987][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   47.359077][ T4202] Call Trace:
[   47.362359][ T4202]  <TASK>
[   47.365300][ T4202]  dump_stack_lvl+0xf2/0x150
[   47.369912][ T4202]  dump_stack+0x15/0x20
[   47.374131][ T4202]  should_fail_ex+0x229/0x230
[   47.378838][ T4202]  should_fail+0xb/0x10
[   47.383018][ T4202]  should_fail_usercopy+0x1a/0x20
[   47.388085][ T4202]  _copy_to_user+0x1e/0xa0
[   47.392548][ T4202]  simple_read_from_buffer+0xa0/0x110
[   47.397939][ T4202]  proc_fail_nth_read+0xf9/0x140
[   47.402893][ T4202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.408454][ T4202]  vfs_read+0x195/0x720
[   47.412675][ T4202]  ? __rcu_read_unlock+0x4e/0x70
[   47.417699][ T4202]  ? __fget_files+0x1d4/0x210
[   47.422411][ T4202]  ksys_read+0xeb/0x1b0
[   47.426574][ T4202]  __x64_sys_read+0x42/0x50
[   47.431117][ T4202]  x64_sys_call+0x27d3/0x2d60
[   47.435802][ T4202]  do_syscall_64+0xc9/0x1c0
[   47.440351][ T4202]  ? clear_bhb_loop+0x55/0xb0
[   47.445102][ T4202]  ? clear_bhb_loop+0x55/0xb0
[   47.449793][ T4202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.455764][ T4202] RIP: 0033:0x7f1b7de4c93c
[   47.460188][ T4202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   47.479798][ T4202] RSP: 002b:00007f1b7cac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.488312][ T4202] RAX: ffffffffffffffda RBX: 00007f1b7e005f80 RCX: 00007f1b7de4c93c
[   47.496290][ T4202] RDX: 000000000000000f RSI: 00007f1b7cac70a0 RDI: 0000000000000006
[   47.504317][ T4202] RBP: 00007f1b7cac7090 R08: 0000000000000000 R09: 0000000000000000
[   47.512366][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.520338][ T4202] R13: 0000000000000000 R14: 00007f1b7e005f80 R15: 00007ffd6db686a8
[   47.528406][ T4202]  </TASK>
[   47.542707][ T4200] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   47.554234][ T4200] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.565325][ T4203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.574236][ T4203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.617260][ T4211] Invalid ELF header magic: != ELF
[   47.651467][ T4200] EXT4-fs error (device loop3): __ext4_iget:4982: inode #15: block 1803188595: comm syz.3.251: invalid block
[   47.662824][ T4211] caif0 speed is unknown, defaulting to 1000
[   47.672503][ T4200] EXT4-fs error (device loop3): __ext4_iget:4982: inode #15: block 1803188595: comm syz.3.251: invalid block
[   47.727615][ T4224] loop2: detected capacity change from 0 to 512
[   47.742974][ T4224] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   47.754160][ T4224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   47.764400][ T4224] EXT4-fs (loop2): orphan cleanup on readonly fs
[   47.774716][ T4224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.257: bg 0: block 361: padding at end of block bitmap is not set
[   47.779007][ T4213] caif0 speed is unknown, defaulting to 1000
[   47.795060][ T4224] EXT4-fs (loop2): Remounting filesystem read-only
[   47.804167][ T4224] EXT4-fs (loop2): 1 truncate cleaned up
[   47.811021][ T4224] SELinux: (dev loop2, type ext4) getxattr errno 5
[   47.888286][ T4236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   47.900734][ T4236] netlink: 160 bytes leftover after parsing attributes in process `syz.2.261'.
[   47.944044][ T4213] chnl_net:caif_netlink_parms(): no params data found
[   47.981643][ T4247] IPVS: stopping master sync thread 4248 ...
[   47.989531][ T4248] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   48.042031][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.049349][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.063516][ T4213] bridge_slave_0: entered allmulticast mode
[   48.070988][ T4213] bridge_slave_0: entered promiscuous mode
[   48.082957][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.090103][ T4213] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.099562][ T4213] bridge_slave_1: entered allmulticast mode
[   48.107439][ T4213] bridge_slave_1: entered promiscuous mode
[   48.116484][ T4255] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.266'.
[   48.127664][ T4254] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.266'.
[   48.153252][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.178962][ T4213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.191943][ T4213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.230811][ T4261] 9pnet_fd: Insufficient options for proto=fd
[   48.241380][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.243308][ T4261] loop3: detected capacity change from 0 to 512
[   48.261324][ T4213] team0: Port device team_slave_0 added
[   48.268016][   T29] kauditd_printk_skb: 898 callbacks suppressed
[   48.268031][   T29] audit: type=1400 audit(1726840919.637:11247): avc:  denied  { create } for  pid=4262 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   48.268366][ T4213] team0: Port device team_slave_1 added
[   48.315052][ T4261] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.326746][   T11] team0: Port device netdevsim1 removed
[   48.339486][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.350656][ T4261] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.269: corrupted inode contents
[   48.363173][ T4261] EXT4-fs (loop3): Remounting filesystem read-only
[   48.370771][ T4213] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.377749][ T4213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.403728][ T4213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.422364][ T4267] loop0: detected capacity change from 0 to 512
[   48.433406][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.446315][ T4267] EXT4-fs (loop0): too many log groups per flexible block group
[   48.454058][ T4267] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   48.461258][ T4267] EXT4-fs (loop0): mount failed
[   48.466216][   T50] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   48.485217][ T4213] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.492193][ T4213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.518151][ T4213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.543271][ T4267] loop0: detected capacity change from 0 to 2048
[   48.569249][ T4213] hsr_slave_0: entered promiscuous mode
[   48.575470][ T4213] hsr_slave_1: entered promiscuous mode
[   48.582314][ T4213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.594094][ T4213] Cannot create hsr debugfs directory
[   48.607156][ T4267] syz.0.271[4267] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.647778][ T4273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4273 comm=syz.4.273
[   48.671576][   T11] bridge0: port 3(vlan0) entered disabled state
[   48.685163][   T11] bridge_slave_1: left allmulticast mode
[   48.690928][   T11] bridge_slave_1: left promiscuous mode
[   48.696595][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.705674][   T11] bridge_slave_0: left allmulticast mode
[   48.711444][   T11] bridge_slave_0: left promiscuous mode
[   48.717157][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.741386][ T4281] 9pnet_fd: Insufficient options for proto=fd
[   48.754175][ T4281] loop0: detected capacity change from 0 to 512
[   48.779568][ T4281] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.808597][ T4281] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.275: corrupted inode contents
[   48.832934][ T4281] EXT4-fs (loop0): Remounting filesystem read-only
[   48.900401][  T289] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   48.922459][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.932781][ T4297] syz.0.281[4297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.932851][ T4297] syz.0.281[4297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.944357][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   48.970791][   T29] audit: type=1326 audit(1726840920.337:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.3.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafdb5def9 code=0x0
[   48.997333][   T29] audit: type=1326 audit(1726840920.367:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.000955][   T11] bond0 (unregistering): Released all slaves
[   49.046773][   T29] audit: type=1326 audit(1726840920.367:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.070268][   T29] audit: type=1326 audit(1726840920.367:11251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.073176][ T4245] +}[@ invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   49.093677][   T29] audit: type=1326 audit(1726840920.367:11252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.093742][   T29] audit: type=1326 audit(1726840920.367:11253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.093784][   T29] audit: type=1326 audit(1726840920.367:11254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e79def9 code=0x7ffc0000
[   49.177601][ T4245] CPU: 0 UID: 0 PID: 4245 Comm: +}[@ Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[   49.187401][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   49.197526][ T4245] Call Trace:
[   49.200811][ T4245]  <TASK>
[   49.203736][ T4245]  dump_stack_lvl+0xf2/0x150
[   49.208391][ T4245]  dump_stack+0x15/0x20
[   49.212638][ T4245]  dump_header+0x83/0x2d0
[   49.216972][ T4245]  oom_kill_process+0x341/0x4c0
[   49.221839][ T4245]  out_of_memory+0x9af/0xbe0
[   49.226497][ T4245]  ? __rcu_read_unlock+0x4e/0x70
[   49.231507][ T4245]  mem_cgroup_out_of_memory+0x13e/0x190
[   49.237141][ T4245]  try_charge_memcg+0x51b/0x810
[   49.241986][ T4245]  obj_cgroup_charge_pages+0xbd/0x1a0
[   49.247368][ T4245]  __memcg_kmem_charge_page+0x9d/0x170
[   49.252914][ T4245]  __alloc_pages_noprof+0x1bc/0x360
[   49.258174][ T4245]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   49.263569][ T4245]  alloc_pages_noprof+0xe1/0x100
[   49.268576][ T4245]  __vmalloc_node_range_noprof+0x736/0xec0
[   49.274433][ T4245]  __kvmalloc_node_noprof+0x121/0x170
[   49.279804][ T4245]  ? ip_set_alloc+0x1f/0x30
[   49.284324][ T4245]  ip_set_alloc+0x1f/0x30
[   49.288677][ T4245]  hash_netiface_create+0x273/0x730
[   49.293881][ T4245]  ? __nla_parse+0x40/0x60
[   49.298353][ T4245]  ? __pfx_hash_netiface_create+0x10/0x10
[   49.304119][ T4245]  ip_set_create+0x359/0x8a0
[   49.308730][ T4245]  ? strnstr+0xf1/0x100
[   49.312927][ T4245]  ? __nla_parse+0x40/0x60
[   49.317445][ T4245]  nfnetlink_rcv_msg+0x4a9/0x570
[   49.322436][ T4245]  netlink_rcv_skb+0x12c/0x230
[   49.327232][ T4245]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   49.332754][ T4245]  nfnetlink_rcv+0x16c/0x15c0
[   49.337472][ T4245]  ? kmem_cache_free+0xdd/0x2d0
[   49.342330][ T4245]  ? nlmon_xmit+0x51/0x60
[   49.346685][ T4245]  ? __kfree_skb+0x102/0x150
[   49.351279][ T4245]  ? consume_skb+0x49/0x160
[   49.355785][ T4245]  ? nlmon_xmit+0x51/0x60
[   49.360182][ T4245]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   49.365534][ T4245]  ? __dev_queue_xmit+0xb8a/0x1fe0
[   49.370671][ T4245]  ? ref_tracker_free+0x3a5/0x410
[   49.375709][ T4245]  ? __dev_queue_xmit+0x161/0x1fe0
[   49.380830][ T4245]  ? __netlink_deliver_tap+0x495/0x4c0
[   49.386316][ T4245]  netlink_unicast+0x599/0x670
[   49.391165][ T4245]  netlink_sendmsg+0x5cc/0x6e0
[   49.396109][ T4245]  ? __pfx_netlink_sendmsg+0x10/0x10
[   49.401434][ T4245]  __sock_sendmsg+0x140/0x180
[   49.406173][ T4245]  ____sys_sendmsg+0x312/0x410
[   49.410942][ T4245]  __sys_sendmsg+0x1dd/0x270
[   49.415532][ T4245]  ? futex_wait+0x18e/0x1c0
[   49.420083][ T4245]  __x64_sys_sendmsg+0x46/0x50
[   49.424953][ T4245]  x64_sys_call+0x2689/0x2d60
[   49.429713][ T4245]  do_syscall_64+0xc9/0x1c0
[   49.434230][ T4245]  ? clear_bhb_loop+0x55/0xb0
[   49.438947][ T4245]  ? clear_bhb_loop+0x55/0xb0
[   49.443757][ T4245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.449803][ T4245] RIP: 0033:0x7f1b7de4def9
[   49.454288][ T4245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.473913][ T4245] RSP: 002b:00007f1b7cac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.482382][ T4245] RAX: ffffffffffffffda RBX: 00007f1b7e005f80 RCX: 00007f1b7de4def9
[   49.490420][ T4245] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[   49.498380][ T4245] RBP: 00007f1b7dec0b76 R08: 0000000000000000 R09: 0000000000000000
[   49.506379][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.514338][ T4245] R13: 0000000000000000 R14: 00007f1b7e005f80 R15: 00007ffd6db686a8
[   49.522319][ T4245]  </TASK>
[   49.525427][ T4245] memory: usage 307200kB, limit 307200kB, failcnt 136
[   49.532236][ T4245] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0
[   49.540188][ T4245] kmem: usage 306948kB, limit 9007199254740988kB, failcnt 0
[   49.547506][ T4245] Memory cgroup stats for /syz2:
[   49.547827][ T4245] cache 159744
[   49.556182][ T4245] rss 4096
[   49.559228][ T4245] shmem 0
[   49.562223][ T4245] mapped_file 159744
[   49.566169][ T4245] dirty 159744
[   49.569608][ T4245] writeback 0
[   49.572898][ T4245] workingset_refault_anon 45
[   49.575739][ T4304] loop4: detected capacity change from 0 to 1024
[   49.577686][ T4245] workingset_refault_file 15
[   49.588559][ T4245] swap 106496
[   49.591828][ T4245] swapcached 98304
[   49.595583][ T4245] pgpgin 13193
[   49.598941][ T4245] pgpgout 13130
[   49.602382][ T4245] pgfault 17006
[   49.605880][ T4245] pgmajfault 25
[   49.609409][ T4245] inactive_anon 98304
[   49.613376][ T4245] active_anon 0
[   49.616890][ T4245] inactive_file 159744
[   49.620939][ T4245] active_file 0
[   49.624442][ T4245] unevictable 0
[   49.627965][ T4245] hierarchical_memory_limit 314572800
[   49.633334][ T4245] hierarchical_memsw_limit 9223372036854771712
[   49.639503][ T4245] total_cache 159744
[   49.643454][ T4245] total_rss 4096
[   49.647045][ T4245] total_shmem 0
[   49.650489][ T4245] total_mapped_file 159744
[   49.654916][ T4245] total_dirty 159744
[   49.658800][ T4245] total_writeback 0
[   49.662651][ T4245] total_workingset_refault_anon 45
[   49.667831][ T4245] total_workingset_refault_file 15
[   49.672937][ T4245] total_swap 106496
[   49.676744][ T4245] total_swapcached 98304
[   49.681002][ T4245] total_pgpgin 13194
[   49.684919][ T4245] total_pgpgout 13131
[   49.688885][ T4245] total_pgfault 17008
[   49.692862][ T4245] total_pgmajfault 25
[   49.696853][ T4245] total_inactive_anon 98304
[   49.701345][ T4245] total_active_anon 0
[   49.705385][ T4245] total_inactive_file 159744
[   49.709971][ T4245] total_active_file 0
[   49.714104][ T4245] total_unevictable 0
[   49.718124][ T4245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.264,pid=4244,uid=0
[   49.732683][ T4245] Memory cgroup out of memory: Killed process 4244 (syz.2.264) total-vm:89164kB, anon-rss:612kB, file-rss:16172kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[   49.749773][ T4251] syz.2.264 (4251) used greatest stack depth: 9048 bytes left
[   49.819678][   T11] hsr_slave_0: left promiscuous mode
[   49.830312][   T11] hsr_slave_1: left promiscuous mode
[   49.848531][ T4308] loop0: detected capacity change from 0 to 512
[   49.855759][ T4308] EXT4-fs: Ignoring removed i_version option
[   49.861802][ T4308] EXT4-fs: Ignoring removed nobh option
[   49.868876][ T4308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.878799][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.886278][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.899084][ T4308] EXT4-fs (loop0): 1 truncate cleaned up
[   49.905254][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.912645][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.952198][   T11] veth1_macvtap: left promiscuous mode
[   49.957817][   T11] veth0_macvtap: left promiscuous mode
[   49.963311][   T11] veth1_vlan: left promiscuous mode
[   49.968623][   T11] veth0_vlan: left allmulticast mode
[   49.973954][   T11] veth0_vlan: left promiscuous mode
[   50.015522][ T4245] +}[@ (4245) used greatest stack depth: 7480 bytes left
[   50.138886][   T11] team0 (unregistering): Port device team_slave_1 removed
[   50.149875][   T11] team0 (unregistering): Port device team_slave_0 removed
[   50.158746][ T4332] 9pnet_fd: Insufficient options for proto=fd
[   50.170401][ T4332] loop3: detected capacity change from 0 to 512
[   50.193376][  T289] smc: removing ib device syz1
[   50.216133][ T4332] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.232692][ T4332] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.294: corrupted inode contents
[   50.244864][ T4312] geneve0: entered allmulticast mode
[   50.246773][ T4332] EXT4-fs (loop3): Remounting filesystem read-only
[   50.257909][ T4317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'.
[   50.334775][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[   50.355803][ T4341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'.
[   50.364856][ T4341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'.
[   50.377791][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'.
[   50.406112][ T4350] loop0: detected capacity change from 0 to 512
[   50.410694][ T4213] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.421008][ T4213] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.431494][ T4213] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.440680][ T4213] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.476485][ T4350] loop0: detected capacity change from 512 to 511
[   50.505241][ T4213] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.536805][ T4213] 8021q: adding VLAN 0 to HW filter on device team0
[   50.546530][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.553648][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.563923][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.571010][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.597022][ T4213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   50.607437][ T4213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.620750][ T3665] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   50.682003][ T3665] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   50.734855][ T3665] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   50.760999][ T4213] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.905918][ T4213] veth0_vlan: entered promiscuous mode
[   50.914542][ T4213] veth1_vlan: entered promiscuous mode
[   50.929592][ T4213] veth0_macvtap: entered promiscuous mode
[   50.938165][ T4213] veth1_macvtap: entered promiscuous mode
[   50.948676][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.959294][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.969123][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.979577][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.989420][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.999923][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.011258][ T4213] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.021343][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.031783][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.041585][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.052055][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.061886][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.072372][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.082183][ T4213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.092682][ T4213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.103459][ T4213] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.113662][ T4213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.122578][ T4213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.131300][ T4213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.140118][ T4213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.207324][ T4392] loop2: detected capacity change from 0 to 512
[   51.284121][ T4392] loop2: detected capacity change from 512 to 511
[   51.326823][ T4399] syz.1.256: attempt to access beyond end of device
[   51.326823][ T4399] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[   51.340585][ T4399] FAT-fs (loop3): unable to read boot sector
[   51.363499][ T4376] chnl_net:caif_netlink_parms(): no params data found
[   51.380547][ T3265] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   51.401903][ T3265] EXT4-fs error (device loop2): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   51.415731][ T3265] EXT4-fs error (device loop2): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   51.420866][ T4405] loop1: detected capacity change from 0 to 128
[   51.465141][ T4405] syz.1.314: attempt to access beyond end of device
[   51.465141][ T4405] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[   51.499064][ T4410] netlink: 116 bytes leftover after parsing attributes in process `syz.4.315'.
[   51.508358][ T4410] bridge_slave_1: left allmulticast mode
[   51.514028][ T4410] bridge_slave_1: left promiscuous mode
[   51.519703][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.527638][   T11] kworker/u8:0: attempt to access beyond end of device
[   51.527638][   T11] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[   51.543140][ T4410] bridge_slave_0: left allmulticast mode
[   51.548892][ T4410] bridge_slave_0: left promiscuous mode
[   51.554541][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.621133][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.628423][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.644051][ T4376] bridge_slave_0: entered allmulticast mode
[   51.651238][ T4376] bridge_slave_0: entered promiscuous mode
[   51.655695][ T4420] loop1: detected capacity change from 0 to 1024
[   51.668569][   T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.681938][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.689049][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.696831][ T4376] bridge_slave_1: entered allmulticast mode
[   51.705872][ T4376] bridge_slave_1: entered promiscuous mode
[   51.764684][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.811483][   T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.849083][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.891054][ T4440] loop4: detected capacity change from 0 to 128
[   51.898718][ T4376] team0: Port device team_slave_0 added
[   51.918911][   T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.950351][ T4376] team0: Port device team_slave_1 added
[   51.958565][ T4440] syz.4.325: attempt to access beyond end of device
[   51.958565][ T4440] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[   51.998465][   T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.027439][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.034431][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.060361][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.086553][   T37] kworker/u8:2: attempt to access beyond end of device
[   52.086553][   T37] loop4: rw=1, sector=209, nr_sectors = 8 limit=128
[   52.089049][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.106961][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.132878][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.198735][ T4454] loop3: detected capacity change from 0 to 1024
[   52.207240][ T4454] EXT4-fs: Ignoring removed orlov option
[   52.213021][ T4454] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.227005][ T4376] hsr_slave_0: entered promiscuous mode
[   52.247400][ T4376] hsr_slave_1: entered promiscuous mode
[   52.254947][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.262512][ T4376] Cannot create hsr debugfs directory
[   52.286600][ T4460] loop4: detected capacity change from 0 to 512
[   52.313985][   T28] bridge_slave_1: left allmulticast mode
[   52.319655][   T28] bridge_slave_1: left promiscuous mode
[   52.325284][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.333095][   T28] bridge_slave_0: left allmulticast mode
[   52.338885][   T28] bridge_slave_0: left promiscuous mode
[   52.344564][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.394556][ T4460] loop4: detected capacity change from 512 to 511
[   52.457037][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.474146][ T4483] loop3: detected capacity change from 0 to 1024
[   52.480784][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.481648][ T4483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   52.499393][ T4483] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   52.510799][   T28] bond0 (unregistering): Released all slaves
[   52.559778][   T28] hsr_slave_0: left promiscuous mode
[   52.566671][   T28] hsr_slave_1: left promiscuous mode
[   52.572444][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.579963][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.587968][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.595406][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.605288][   T28] veth1_macvtap: left promiscuous mode
[   52.610872][   T28] veth0_macvtap: left promiscuous mode
[   52.616527][   T28] veth1_vlan: left promiscuous mode
[   52.621785][   T28] veth0_vlan: left promiscuous mode
[   52.709593][   T28] team0 (unregistering): Port device team_slave_1 removed
[   52.719719][   T28] team0 (unregistering): Port device team_slave_0 removed
[   52.810769][ T4434] chnl_net:caif_netlink_parms(): no params data found
[   52.857716][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.865013][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.872271][ T4434] bridge_slave_0: entered allmulticast mode
[   52.878734][ T4434] bridge_slave_0: entered promiscuous mode
[   52.885666][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.892739][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.900071][ T4434] bridge_slave_1: entered allmulticast mode
[   52.906461][ T4434] bridge_slave_1: entered promiscuous mode
[   52.926055][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.936511][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.958778][ T4434] team0: Port device team_slave_0 added
[   52.965500][ T4434] team0: Port device team_slave_1 added
[   52.980875][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.987878][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.013974][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.025465][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.032407][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.058354][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.087349][ T4434] hsr_slave_0: entered promiscuous mode
[   53.093436][ T4434] hsr_slave_1: entered promiscuous mode
[   53.099645][ T4434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.107265][ T4434] Cannot create hsr debugfs directory
[   53.125239][ T3261] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   53.145783][ T3261] EXT4-fs error (device loop4): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   53.159721][ T3261] EXT4-fs error (device loop4): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   53.217253][ T4434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.252674][ T4517] loop1: detected capacity change from 0 to 512
[   53.259247][ T4517] ext4: Unknown parameter 'noacl'
[   53.265435][ T4517] capability: warning: `syz.1.350' uses deprecated v2 capabilities in a way that may be insecure
[   53.289350][ T4434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.324177][ T4523] FAULT_INJECTION: forcing a failure.
[   53.324177][ T4523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.337269][ T4523] CPU: 0 UID: 0 PID: 4523 Comm: syz.1.353 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[   53.347599][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   53.357682][ T4523] Call Trace:
[   53.360950][ T4523]  <TASK>
[   53.363881][ T4523]  dump_stack_lvl+0xf2/0x150
[   53.368569][ T4523]  dump_stack+0x15/0x20
[   53.372744][ T4523]  should_fail_ex+0x229/0x230
[   53.377418][ T4523]  should_fail+0xb/0x10
[   53.381580][ T4523]  should_fail_usercopy+0x1a/0x20
[   53.386704][ T4523]  _copy_from_user+0x1e/0xd0
[   53.391452][ T4523]  do_replace+0x7b/0x2d0
[   53.395710][ T4523]  do_ebt_set_ctl+0x1bd/0xb80
[   53.400415][ T4523]  ? _parse_integer_limit+0x167/0x180
[   53.405796][ T4523]  ? _parse_integer+0x27/0x30
[   53.410489][ T4523]  ? kstrtoull+0x110/0x140
[   53.414922][ T4523]  ? tcp_release_cb+0xfe/0x380
[   53.419700][ T4523]  ? _raw_spin_unlock_bh+0x36/0x40
[   53.424811][ T4523]  ? release_sock+0x117/0x150
[   53.429563][ T4523]  ? sockopt_release_sock+0x42/0x50
[   53.434816][ T4523]  ? do_ip_setsockopt+0x1fcf/0x2340
[   53.440036][ T4523]  nf_setsockopt+0x195/0x1b0
[   53.444680][ T4523]  ip_setsockopt+0xea/0x100
[   53.449205][ T4523]  tcp_setsockopt+0x93/0xb0
[   53.453702][ T4523]  sock_common_setsockopt+0x64/0x80
[   53.458898][ T4523]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   53.464916][ T4523]  __sys_setsockopt+0x1cc/0x240
[   53.469901][ T4523]  __x64_sys_setsockopt+0x66/0x80
[   53.474944][ T4523]  x64_sys_call+0x278d/0x2d60
[   53.479621][ T4523]  do_syscall_64+0xc9/0x1c0
[   53.484125][ T4523]  ? clear_bhb_loop+0x55/0xb0
[   53.488828][ T4523]  ? clear_bhb_loop+0x55/0xb0
[   53.493539][ T4523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.499511][ T4523] RIP: 0033:0x7fa23ac4def9
[   53.503938][ T4523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.523565][ T4523] RSP: 002b:00007fa2398c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   53.531978][ T4523] RAX: ffffffffffffffda RBX: 00007fa23ae05f80 RCX: 00007fa23ac4def9
[   53.539971][ T4523] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[   53.547928][ T4523] RBP: 00007fa2398c7090 R08: 0000000000000298 R09: 0000000000000000
[   53.555953][ T4523] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[   53.563934][ T4523] R13: 0000000000000000 R14: 00007fa23ae05f80 R15: 00007ffdd1063d18
[   53.571915][ T4523]  </TASK>
[   53.595516][   T29] kauditd_printk_skb: 154 callbacks suppressed
[   53.595535][   T29] audit: type=1400 audit(1726840924.967:11408): avc:  denied  { setopt } for  pid=4524 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   53.597265][ T4525] loop1: detected capacity change from 0 to 128
[   53.628132][ T4525] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   53.657621][ T4434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.696721][ T4434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.755467][   T28] bridge_slave_1: left allmulticast mode
[   53.761309][   T28] bridge_slave_1: left promiscuous mode
[   53.767047][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.782947][   T28] bridge_slave_0: left allmulticast mode
[   53.786750][   T29] audit: type=1400 audit(1726840925.157:11409): avc:  denied  { bind } for  pid=4547 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   53.788678][   T28] bridge_slave_0: left promiscuous mode
[   53.813549][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.839622][ T4551] loop1: detected capacity change from 0 to 1024
[   53.846539][ T4551] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.855791][ T4551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c01c, mo2=0002]
[   53.865575][ T4551] System zones: 0-1, 3-12
[   53.875974][ T4551] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 16: comm syz.1.363: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0
[   53.876647][   T29] audit: type=1400 audit(1726840925.247:11410): avc:  denied  { create } for  pid=4549 comm="syz.1.363" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   53.939252][ T4555] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 16: comm syz.1.363: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0
[   53.960147][ T4551] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 16: comm syz.1.363: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0
[   53.980456][ T4551] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 16: comm syz.1.363: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0
[   54.000419][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.010668][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.020675][   T28] bond0 (unregistering): Released all slaves
[   54.067056][ T4434] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.078543][   T28] hsr_slave_0: left promiscuous mode
[   54.086052][   T28] hsr_slave_1: left promiscuous mode
[   54.092005][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.103846][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.111262][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.120685][   T28] veth1_macvtap: left promiscuous mode
[   54.126363][   T28] veth0_macvtap: left promiscuous mode
[   54.127103][   T29] audit: type=1400 audit(1726840925.497:11411): avc:  denied  { read } for  pid=4563 comm="syz.1.367" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.154869][   T29] audit: type=1400 audit(1726840925.497:11412): avc:  denied  { open } for  pid=4563 comm="syz.1.367" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.181895][   T29] audit: type=1326 audit(1726840925.547:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23ac4def9 code=0x7ffc0000
[   54.205600][   T29] audit: type=1326 audit(1726840925.547:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23ac4def9 code=0x7ffc0000
[   54.205633][   T29] audit: type=1326 audit(1726840925.547:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23ac4def9 code=0x7ffc0000
[   54.205663][   T29] audit: type=1326 audit(1726840925.547:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23ac4def9 code=0x7ffc0000
[   54.205713][   T29] audit: type=1326 audit(1726840925.547:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23ac4def9 code=0x7ffc0000
[   54.253410][   T28] team0 (unregistering): Port device team_slave_1 removed
[   54.312638][   T28] team0 (unregistering): Port device team_slave_0 removed
[   54.327937][ T4566] 9pnet_fd: Insufficient options for proto=fd
[   54.337433][ T4566] loop1: detected capacity change from 0 to 512
[   54.355794][ T4566] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.359688][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.377530][ T4434] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.377623][ T4566] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.368: corrupted inode contents
[   54.398157][ T4566] EXT4-fs (loop1): Remounting filesystem read-only
[   54.398529][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.423041][ T4434] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.437608][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.446143][ T4434] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.477562][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.490102][ T4571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4571 comm=syz.3.369
[   54.551796][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.566438][ T4434] 8021q: adding VLAN 0 to HW filter on device team0
[   54.589588][ T4529] chnl_net:caif_netlink_parms(): no params data found
[   54.602444][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.609614][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.619265][ T4583] mmap: syz.3.373 (4583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   54.619823][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.638168][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.638614][ T4584] 9pnet_fd: Insufficient options for proto=fd
[   54.658036][ T4584] loop1: detected capacity change from 0 to 512
[   54.692136][ T4584] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.708040][ T4584] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.372: corrupted inode contents
[   54.720862][ T4584] EXT4-fs (loop1): Remounting filesystem read-only
[   54.753222][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.761295][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.768402][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.776636][ T4529] bridge_slave_0: entered allmulticast mode
[   54.783020][ T4529] bridge_slave_0: entered promiscuous mode
[   54.792367][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.799485][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.806736][ T4529] bridge_slave_1: entered allmulticast mode
[   54.813236][ T4529] bridge_slave_1: entered promiscuous mode
[   54.828822][   T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.861641][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.874454][ T4376] 8021q: adding VLAN 0 to HW filter on device team0
[   54.882969][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.902369][   T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.925552][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.932673][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.941519][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.948568][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.962160][ T4529] team0: Port device team_slave_0 added
[   54.969164][ T4529] team0: Port device team_slave_1 added
[   54.977548][   T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.999783][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.006779][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.032714][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.051136][   T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.062415][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.069473][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.095423][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.112605][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.138910][ T4529] hsr_slave_0: entered promiscuous mode
[   55.145319][ T4529] hsr_slave_1: entered promiscuous mode
[   55.151170][ T4529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.158769][ T4529] Cannot create hsr debugfs directory
[   55.262834][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.273507][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.283507][   T28] bond0 (unregistering): Released all slaves
[   55.333635][   T28] hsr_slave_0: left promiscuous mode
[   55.339653][   T28] hsr_slave_1: left promiscuous mode
[   55.345415][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.352838][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.360387][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.367870][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.376921][   T28] veth1_macvtap: left promiscuous mode
[   55.382393][   T28] veth0_macvtap: left promiscuous mode
[   55.387960][   T28] veth1_vlan: left promiscuous mode
[   55.393223][   T28] veth0_vlan: left promiscuous mode
[   55.485004][   T28] team0 (unregistering): Port device team_slave_1 removed
[   55.495547][   T28] team0 (unregistering): Port device team_slave_0 removed
[   55.536472][ T4614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'.
[   55.550260][ T4614] ==================================================================
[   55.558420][ T4614] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760
[   55.565612][ T4614] 
[   55.567927][ T4614] race at unknown origin, with assert no writes to 0xffff8881001cb1e8 of 4 bytes by task 4614 on cpu 1:
[   55.579027][ T4614]  dequeue_entities+0x6df/0x760
[   55.583878][ T4614]  pick_next_task_fair+0x7d/0x410
[   55.588904][ T4614]  __schedule+0x27c/0x940
[   55.593239][ T4614]  schedule+0x55/0xc0
[   55.597226][ T4614]  synchronize_rcu_expedited+0x611/0x7a0
[   55.602859][ T4614]  netif_set_real_num_tx_queues+0x2c2/0x410
[   55.608751][ T4614]  veth_newlink+0x653/0x830
[   55.613252][ T4614]  rtnl_newlink+0xeff/0x1690
[   55.617835][ T4614]  rtnetlink_rcv_msg+0x6aa/0x710
[   55.622765][ T4614]  netlink_rcv_skb+0x12c/0x230
[   55.627525][ T4614]  rtnetlink_rcv+0x1c/0x30
[   55.631952][ T4614]  netlink_unicast+0x599/0x670
[   55.636709][ T4614]  netlink_sendmsg+0x5cc/0x6e0
[   55.641479][ T4614]  __sock_sendmsg+0x140/0x180
[   55.646169][ T4614]  ____sys_sendmsg+0x312/0x410
[   55.650929][ T4614]  __sys_sendmsg+0x1dd/0x270
[   55.655518][ T4614]  __x64_sys_sendmsg+0x46/0x50
[   55.660282][ T4614]  x64_sys_call+0x2689/0x2d60
[   55.664962][ T4614]  do_syscall_64+0xc9/0x1c0
[   55.669453][ T4614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.675346][ T4614] 
[   55.677655][ T4614] value changed: 0x00000000 -> 0x00000001
[   55.683530][ T4614] 
[   55.685853][ T4614] Reported by Kernel Concurrency Sanitizer on:
[   55.692004][ T4614] CPU: 1 UID: 0 PID: 4614 Comm: syz.3.377 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[   55.702269][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   55.712326][ T4614] ==================================================================
[   55.737842][ T4434] veth0_vlan: entered promiscuous mode
[   55.747010][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.755970][ T4434] veth1_vlan: entered promiscuous mode
[   55.778048][ T4614] loop3: detected capacity change from 0 to 1024
[   55.784605][ T4434] veth0_macvtap: entered promiscuous mode
[   55.793119][ T4614] EXT4-fs: Ignoring removed oldalloc option
[   55.794077][ T4434] veth1_macvtap: entered promiscuous mode
[   55.799101][ T4614] EXT4-fs: Ignoring removed mblk_io_submit option
[   55.816646][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.827225][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.837102][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.847695][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.859069][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.871779][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.882291][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.892141][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.902611][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.913327][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.926200][ T4434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.934999][ T4434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.943827][ T4434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.952525][ T4434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.969268][ T4376] veth0_vlan: entered promiscuous mode
[   55.983327][ T4376] veth1_vlan: entered promiscuous mode
[   56.002250][ T4376] veth0_macvtap: entered promiscuous mode
[   56.012543][ T4376] veth1_macvtap: entered promiscuous mode
[   56.029931][ T4529] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   56.038764][ T4529] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   56.047485][ T4529] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   56.058588][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.069201][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.079059][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.089566][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.099377][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.109812][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.120295][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.128521][ T4529] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   56.139118][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.149662][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.159499][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.169927][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.179749][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.190316][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.200897][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.210296][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.219071][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.227914][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.236721][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.289303][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.301189][ T4529] 8021q: adding VLAN 0 to HW filter on device team0
[   56.310157][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.317285][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.327789][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.334838][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.407465][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.522942][ T4529] veth0_vlan: entered promiscuous mode
[   56.531179][ T4529] veth1_vlan: entered promiscuous mode
[   56.545750][ T4529] veth0_macvtap: entered promiscuous mode
[   56.552870][ T4529] veth1_macvtap: entered promiscuous mode
[   56.563174][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.573691][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.583564][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.594056][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.604012][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.614476][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.624313][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.634779][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.645971][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.656462][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.667104][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.677005][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.687660][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.697611][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.708110][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.717949][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.728417][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.739256][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.750410][ T4529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.759145][ T4529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.767850][ T4529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.776638][ T4529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0