last executing test programs:

2m6.083126329s ago: executing program 0 (id=4956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)

2m6.063034191s ago: executing program 0 (id=4957):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="00fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)
syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000), &(0x7f0000000040))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r4}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m5.715316695s ago: executing program 0 (id=4959):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, 0x0, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

2m4.84935791s ago: executing program 0 (id=4973):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = accept4(r0, &(0x7f0000000680)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1004200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x78, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@resgid={'resgid', 0x3d, 0xee01}}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x200000, 0x115)
connect$vsock_stream(r9, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
ptrace(0x10, r6)
mknod(&(0x7f00000001c0)='./file0\x00', 0x10, 0x5)
ptrace$cont(0x20, r6, 0x7, 0xffffffffffffffff)

2m4.618768163s ago: executing program 0 (id=4978):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = signalfd4(r0, &(0x7f00000005c0)={[0x1]}, 0x8, 0x800)
write$P9_RFLUSH(r1, &(0x7f0000000780)={0x7, 0x6d, 0x2}, 0x7)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='$9]W', @ANYRES16=r2, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2m4.095132715s ago: executing program 0 (id=4983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a"], 0x2c}}, 0x0)

2m4.094845204s ago: executing program 32 (id=4983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a"], 0x2c}}, 0x0)

4.184986008s ago: executing program 4 (id=6589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

4.070359199s ago: executing program 4 (id=6590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

3.972835939s ago: executing program 4 (id=6591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007"], 0x50)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6e, 0x40, 0x7ffc1ff8}]})
socket$kcm(0x2, 0x5, 0x84)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18)
r4 = gettid()
tkill(0x0, 0x12)
tkill(0x0, 0x1)
tkill(r4, 0x14)
fchown(0xffffffffffffffff, 0x0, 0xee01)
unshare(0x28000600)
ptrace$setregset(0x4205, r4, 0x202, &(0x7f00000001c0)={&(0x7f0000001900)="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", 0xff8})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)

3.013861503s ago: executing program 4 (id=6600):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

2.907293864s ago: executing program 3 (id=6604):
r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

2.870869227s ago: executing program 3 (id=6606):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x4, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001a00)=0x1c, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001a80)={0x3, &(0x7f0000001a40)=[{0x6, 0x2, 0x5, 0x5}, {0xd4ce, 0xb, 0x3, 0x10}, {0x4, 0x3, 0x6, 0x7}]}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000018c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf2501f6ffff030008800800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x22020600)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00')
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_NET_NS_FD={0x8, 0x1c, r9}]}, 0x28}}, 0x0)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r7}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_clone3(&(0x7f00000017c0)={0x100000000, &(0x7f0000000440), &(0x7f0000000480)=<r11=>0x0, &(0x7f00000004c0), {0x40}, &(0x7f00000006c0)=""/4096, 0x1000, &(0x7f00000016c0)=""/234, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
fcntl$lock(r10, 0x6, &(0x7f0000001840)={0x1, 0x0, 0x1, 0x7, r11})
sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004)
syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r12}, 0x10)
syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x11, 0x2, 0x2}, 0x0, 0x0)

2.798957054s ago: executing program 3 (id=6608):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x42842, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB], 0x50)
pipe(&(0x7f0000000380))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2)

2.570020487s ago: executing program 2 (id=6610):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32006f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00000bc000030000000000ff0000e4bacae600", [0x4, 0x40000000000000]}})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
syz_clone(0x4852111, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@dioread_lock}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@auto_da_alloc}, {@nomblk_io_submit}, {@noload}]}, 0x3, 0x45e, &(0x7f0000002400)="$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")
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r11=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r11, 0xfffffe4d}}, 0x48)

2.085701845s ago: executing program 2 (id=6615):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="00fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)
syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000), &(0x7f0000000040))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r4}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7, 0x0, 0x6}, 0x18)

1.343662108s ago: executing program 1 (id=6620):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32006f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
syz_emit_ethernet(0x45, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x37, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"b3a7e3a7ca615ecc2f83ac"}}}}}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r2, 0xfffffe4d}}, 0x48)

1.315247441s ago: executing program 1 (id=6621):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101b01, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xdc, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xac, 0x2, {{0x10, [0xa, 0x3, 0x1, 0x1, 0x4, 0x2, 0x0, 0x1, 0x9, 0x2, 0xb, 0x0, 0x9, 0x0, 0x6, 0xd], 0x1, [0x5, 0x3, 0x0, 0x8, 0x5, 0x40, 0x9, 0x3, 0x8, 0x1, 0xe, 0x2, 0xfff2, 0x1000, 0x1, 0x9], [0xeb2e, 0x9, 0xffff, 0x1, 0x4, 0xbe0d, 0x7, 0x800, 0x0, 0x3, 0x8, 0x8, 0x4, 0x8, 0x9, 0x8]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0xfffffffffffffff9}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x88e}]}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r4, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0)
close(r2)

1.314527091s ago: executing program 3 (id=6622):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00'])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc05000000000000711038000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x36, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r8, 0x2f, 0x2034, r8}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket(0x10, 0x3, 0xa)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x7fffffffffffffff)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={<r11=>0x0, 0x6, 0xe85, 0x6, 0x40, 0x9, 0x4, 0x75c1, {0x0, @in6={{0xa, 0x4e21, 0x9, @private2, 0x4ceb}}, 0x6, 0xbf84, 0x10, 0xb09}}, &(0x7f00000003c0)=0xb0)
writev(r9, &(0x7f0000000480)=[{&(0x7f0000000580)="a19f65679686a64c59a75793ad5bfc4055327579c2f3e44681d17492d0529aaa6902d5360e72947e150c3a6aea26928ba2efaa1fa5a44878a8bef0d88f668e7f97d567b5f414419e269b9ce0c370a0b9aace7b87711a0da0af7cbc93b0e1e2b95bd206aa7eea6bf8cac2c6bf1e283baa58911a74fefab490c00c581c8c0c39cf007c968d1d09ff453ffbaf31fc5edd9bfad68bf19c700c69128336f707c820828945bbe8297d2cb4eee1e4055c8f24dfd83626e031112b85ee61db52037526429f", 0xc1}, {&(0x7f00000006c0)="142aa8a1c2b1ce032bdaa680625bea7c36a8a19700fe9dd1a9655686bcf2c4986020a4a0a409749a1c6468176d0aad6c234d920814a4125f37b78d78bbb0b0cef79f50504b2f3ec7988e71dcf2428b285e1a846a9e89e970dae8aa3476f7c4eb8a52550a37a5c70ad13118a123a357c0a9f6dbfa6154cb1eae35159979d4af7062f81eea36d23cccb30433c862d9d920a228cae5d969edc9cf5ea7f257b2b8a49dea20cdb6192471bf5d8fa6df8c5f60c126e756bbc5f4d943e3a12a32ba29d6fd929facbadafbb00a04dec4d91c154074b45fad5891963cf145aaccfe03c797b7d64b4106", 0xe5}], 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000400)={r11, 0xb37}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0xfffffffa, 0x4}, 0x10)
r12 = inotify_init1(0x800)
fcntl$addseals(r12, 0x409, 0x2)

1.276805814s ago: executing program 1 (id=6623):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)

1.244251068s ago: executing program 2 (id=6624):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb87}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x2a)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000908010400000073000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a00000609000200ef0b7a31000000000900010071797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x370, 0x0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv6=@empty, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e64}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @multicast1, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x4, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_setup(0x7c40, &(0x7f0000000e40)={0x0, 0xdd66, 0x200, 0x2, 0x12f})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201f6a6e4a8e9ef03f76ed81fc91dac3b418d1a8b1ac7e19c5e9a601097", 0x4a}], 0x1}, 0x48000)

1.185364804s ago: executing program 1 (id=6625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='free_extent_state\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r5)
unshare(0x28000600)
unshare(0x20020000)
stat(&(0x7f0000000080)='./cgroup/file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031b05bfe11850b716441386fe30217b1e6a12800b0001006d6179343f5fd4f40dd76dcdd01f0711650fcd8d87a60b505d7819e67e34000000000000", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newneigh={0x2c, 0x1c, 0x4, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r12, 0x2, 0x18, 0x7b7bf37a2acd0256}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_MASTER={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c4)
setns(r9, 0x66020000)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
fcntl$setsig(r1, 0xa, 0x1)

1.056289446s ago: executing program 2 (id=6626):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00')
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101b01, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xdc, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xac, 0x2, {{0x10, [0xa, 0x3, 0x1, 0x1, 0x4, 0x2, 0x0, 0x1, 0x9, 0x2, 0xb, 0x0, 0x9, 0x0, 0x6, 0xd], 0x1, [0x5, 0x3, 0x0, 0x8, 0x5, 0x40, 0x9, 0x3, 0x8, 0x1, 0xe, 0x2, 0xfff2, 0x1000, 0x1, 0x9], [0xeb2e, 0x9, 0xffff, 0x1, 0x4, 0xbe0d, 0x7, 0x800, 0x0, 0x3, 0x8, 0x8, 0x4, 0x8, 0x9, 0x8]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0xfffffffffffffff9}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x88e}]}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r2, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0)
close(r0)

972.399264ms ago: executing program 2 (id=6627):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000000000000000100000091000400"])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc05000000000000711038000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x36, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r9, 0x2f, 0x2034, r9}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket(0x10, 0x3, 0xa)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x7fffffffffffffff)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={<r12=>0x0, 0x6, 0xe85, 0x6, 0x40, 0x9, 0x4, 0x75c1, {0x0, @in6={{0xa, 0x4e21, 0x9, @private2, 0x4ceb}}, 0x6, 0xbf84, 0x10, 0xb09}}, &(0x7f00000003c0)=0xb0)
writev(r10, &(0x7f0000000480)=[{&(0x7f0000000580)="a19f65679686a64c59a75793ad5bfc4055327579c2f3e44681d17492d0529aaa6902d5360e72947e150c3a6aea26928ba2efaa1fa5a44878a8bef0d88f668e7f97d567b5f414419e269b9ce0c370a0b9aace7b87711a0da0af7cbc93b0e1e2b95bd206aa7eea6bf8cac2c6bf1e283baa58911a74fefab490c00c581c8c0c39cf007c968d1d09ff453ffbaf31fc5edd9bfad68bf19c700c69128336f707c820828945bbe8297d2cb4eee1e4055c8f24dfd83626e031112b85ee61db52037526429f", 0xc1}, {&(0x7f00000006c0)="142aa8a1c2b1ce032bdaa680625bea7c36a8a19700fe9dd1a9655686bcf2c4986020a4a0a409749a1c6468176d0aad6c234d920814a4125f37b78d78bbb0b0cef79f50504b2f3ec7988e71dcf2428b285e1a846a9e89e970dae8aa3476f7c4eb8a52550a37a5c70ad13118a123a357c0a9f6dbfa6154cb1eae35159979d4af7062f81eea36d23cccb30433c862d9d920a228cae5d969edc9cf5ea7f257b2b8a49dea20cdb6192471bf5d8fa6df8c5f60c126e756bbc5f4d943e3a12a32ba29d6fd929facbadafbb00a04dec4d91c154074b45fad5891963cf145aaccfe03c797b7d64b4106", 0xe5}], 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000400)={r12, 0xb37}, 0x8)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0xfffffffa, 0x4}, 0x10)
r13 = inotify_init1(0x800)
fcntl$addseals(r13, 0x409, 0x2)

950.016507ms ago: executing program 1 (id=6628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206010100000000000000000f000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010200000000000700000a0500010007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
socket(0xa, 0x5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18)

923.066199ms ago: executing program 4 (id=6629):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000000001000000"])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc05000000000000711038000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x36, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r8, 0x2f, 0x2034, r8}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket(0x10, 0x3, 0xa)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x7fffffffffffffff)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={<r11=>0x0, 0x6, 0xe85, 0x6, 0x40, 0x9, 0x4, 0x75c1, {0x0, @in6={{0xa, 0x4e21, 0x9, @private2, 0x4ceb}}, 0x6, 0xbf84, 0x10, 0xb09}}, &(0x7f00000003c0)=0xb0)
writev(r9, &(0x7f0000000480)=[{&(0x7f0000000580)="a19f65679686a64c59a75793ad5bfc4055327579c2f3e44681d17492d0529aaa6902d5360e72947e150c3a6aea26928ba2efaa1fa5a44878a8bef0d88f668e7f97d567b5f414419e269b9ce0c370a0b9aace7b87711a0da0af7cbc93b0e1e2b95bd206aa7eea6bf8cac2c6bf1e283baa58911a74fefab490c00c581c8c0c39cf007c968d1d09ff453ffbaf31fc5edd9bfad68bf19c700c69128336f707c820828945bbe8297d2cb4eee1e4055c8f24dfd83626e031112b85ee61db52037526429f", 0xc1}, {&(0x7f00000006c0)="142aa8a1c2b1ce032bdaa680625bea7c36a8a19700fe9dd1a9655686bcf2c4986020a4a0a409749a1c6468176d0aad6c234d920814a4125f37b78d78bbb0b0cef79f50504b2f3ec7988e71dcf2428b285e1a846a9e89e970dae8aa3476f7c4eb8a52550a37a5c70ad13118a123a357c0a9f6dbfa6154cb1eae35159979d4af7062f81eea36d23cccb30433c862d9d920a228cae5d969edc9cf5ea7f257b2b8a49dea20cdb6192471bf5d8fa6df8c5f60c126e756bbc5f4d943e3a12a32ba29d6fd929facbadafbb00a04dec4d91c154074b45fad5891963cf145aaccfe03c797b7d64b4106", 0xe5}], 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000400)={r11, 0xb37}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0xfffffffa, 0x4}, 0x10)
r12 = inotify_init1(0x800)
fcntl$addseals(r12, 0x409, 0x2)

788.095373ms ago: executing program 5 (id=6630):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_nat={0x128, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x5f, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e248c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x50)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

723.119179ms ago: executing program 5 (id=6631):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32006f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
syz_emit_ethernet(0x45, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x37, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"b3a7e3a7ca615ecc2f83ac"}}}}}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r2, 0xfffffe4d}}, 0x48)

685.010732ms ago: executing program 5 (id=6632):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48)

647.557556ms ago: executing program 5 (id=6633):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

594.872052ms ago: executing program 5 (id=6634):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

476.904673ms ago: executing program 5 (id=6635):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="00fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)
syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000), &(0x7f0000000040))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r4}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7, 0x0, 0x6}, 0x18)

253.595415ms ago: executing program 3 (id=6636):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0)

134.819607ms ago: executing program 1 (id=6637):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x880)
r1 = socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00'])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc050000000000007110380000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x36, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r6, 0x2f, 0x2034, r6}, 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket(0x10, 0x3, 0xa)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x7fffffffffffffff)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x6, 0xe85, 0x6, 0x40, 0x9, 0x4, 0x75c1, {<r9=>0x0, @in6={{0xa, 0x4e21, 0x9, @private2, 0x4ceb}}, 0x6, 0xbf84, 0x10, 0xb09}}, &(0x7f00000003c0)=0xb0)
writev(r7, &(0x7f0000000480)=[{&(0x7f0000000580)="a19f65679686a64c59a75793ad5bfc4055327579c2f3e44681d17492d0529aaa6902d5360e72947e150c3a6aea26928ba2efaa1fa5a44878a8bef0d88f668e7f97d567b5f414419e269b9ce0c370a0b9aace7b87711a0da0af7cbc93b0e1e2b95bd206aa7eea6bf8cac2c6bf1e283baa58911a74fefab490c00c581c8c0c39cf007c968d1d09ff453ffbaf31fc5edd9bfad68bf19c700c69128336f707c820828945bbe8297d2cb4eee1e4055c8f24dfd83626e031112b85ee61db52037526429f", 0xc1}, {&(0x7f00000006c0)="142aa8a1c2b1ce032bdaa680625bea7c36a8a19700fe9dd1a9655686bcf2c4986020a4a0a409749a1c6468176d0aad6c234d920814a4125f37b78d78bbb0b0cef79f50504b2f3ec7988e71dcf2428b285e1a846a9e89e970dae8aa3476f7c4eb8a52550a37a5c70ad13118a123a357c0a9f6dbfa6154cb1eae35159979d4af7062f81eea36d23cccb30433c862d9d920a228cae5d969edc9cf5ea7f257b2b8a49dea20cdb6192471bf5d8fa6df8c5f60c126e756bbc5f4d943e3a12a32ba29d6fd929facbadafbb00a04dec4d91c154074b45fad5891963cf145aaccfe03c797b7d64b4106", 0xe5}], 0x2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0xfffffffa, 0x4}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000007c0)={r9, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0xfffb}, &(0x7f0000000980)=0x90)
r10 = inotify_init1(0x800)
fcntl$addseals(r10, 0x409, 0x2)

113.053369ms ago: executing program 3 (id=6638):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000"], 0xd4}}, 0x8818)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

28.056918ms ago: executing program 4 (id=6639):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

0s ago: executing program 2 (id=6640):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb87}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x2a)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000908010400000073000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a00000609000200ef0b7a31000000000900010071797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00'}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x370, 0x0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv6=@empty, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e64}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @multicast1, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x4, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_setup(0x7c40, &(0x7f0000000e40)={0x0, 0xdd66, 0x200, 0x2, 0x12f})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201f6a6e4a8e9ef03f76ed81fc91dac3b418d1a8b1ac7e19c5e9a601097", 0x4a}], 0x1}, 0x48000)

kernel console output (not intermixed with test programs):

7f33dd50eec9 code=0x7ffc0000
[  416.924407][   T29] audit: type=1326 audit(1760074048.821:22265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22601 comm="syz.2.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  416.981082][T22613] loop5: detected capacity change from 0 to 1024
[  416.988030][T22613] EXT4-fs: inline encryption not supported
[  416.993905][T22613] EXT4-fs: Ignoring removed i_version option
[  417.083505][T22613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.467968][T22626] macvtap0: refused to change device tx_queue_len
[  417.891950][T22629] loop3: detected capacity change from 0 to 2048
[  418.005292][T22629] Alternate GPT is invalid, using primary GPT.
[  418.011858][T22629]  loop3: p1 p2 p3
[  418.015629][T22629] loop3: partition table partially beyond EOD, truncated
[  418.127301][T19965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.150315][T22638] tipc: Started in network mode
[  418.155413][T22638] tipc: Node identity d292807af091, cluster identity 4711
[  418.162715][T22638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.311560][T22638] syzkaller0: entered promiscuous mode
[  418.317173][T22638] syzkaller0: entered allmulticast mode
[  418.418182][T22638] tipc: Resetting bearer <eth:syzkaller0>
[  418.524586][T22637] tipc: Resetting bearer <eth:syzkaller0>
[  418.556480][T22637] tipc: Disabling bearer <eth:syzkaller0>
[  420.233831][T22661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5840'.
[  420.385327][T22664] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  420.611175][T22671] loop5: detected capacity change from 0 to 512
[  420.669299][T22671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.732974][T22671] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  420.783074][T22671] netlink: 'syz.5.5844': attribute type 4 has an invalid length.
[  421.058883][T22681] tipc: New replicast peer: 255.255.255.83
[  421.064902][T22681] tipc: Enabled bearer <udp:£>, priority 10
[  421.148729][T22686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=22686 comm=syz.3.5847
[  421.166244][T19965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.357643][T22700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.374779][T22700] syzkaller0: entered promiscuous mode
[  421.380510][T22700] syzkaller0: entered allmulticast mode
[  421.420255][T22702] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  421.434395][T22700] tipc: Resetting bearer <eth:syzkaller0>
[  421.443903][T22699] tipc: Resetting bearer <eth:syzkaller0>
[  421.464572][T22699] tipc: Disabling bearer <eth:syzkaller0>
[  421.817181][T22719] loop5: detected capacity change from 0 to 512
[  421.824603][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  421.824621][   T29] audit: type=1400 audit(1760074053.921:22404): avc:  denied  { mounton } for  pid=22712 comm="syz.5.5858" path="/207/file0" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  421.877657][T22719] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5858: bg 0: block 393: padding at end of block bitmap is not set
[  421.906683][T22722] syzkaller0: entered promiscuous mode
[  421.912275][T22722] syzkaller0: entered allmulticast mode
[  421.918616][T22719] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  421.938611][T22719] EXT4-fs (loop5): 2 truncates cleaned up
[  421.945721][T22719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.979856][   T29] audit: type=1400 audit(1760074054.051:22405): avc:  denied  { mount } for  pid=22712 comm="syz.5.5858" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  422.008584][   T29] audit: type=1400 audit(1760074054.101:22406): avc:  denied  { write } for  pid=22721 comm="syz.1.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  422.464308][T22730] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  422.575623][   T29] audit: type=1326 audit(1760074054.671:22407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.599437][   T29] audit: type=1326 audit(1760074054.671:22408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.623170][   T29] audit: type=1326 audit(1760074054.671:22409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.646915][   T29] audit: type=1326 audit(1760074054.671:22410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.891784][   T29] audit: type=1326 audit(1760074054.781:22411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.915581][   T29] audit: type=1326 audit(1760074054.781:22412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22736 comm="syz.2.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dd50eec9 code=0x7ffc0000
[  422.939295][   T29] audit: type=1400 audit(1760074054.831:22413): avc:  denied  { read } for  pid=22739 comm="syz.2.5867" dev="nsfs" ino=4026532383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  422.965611][T22750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.987824][T22750] syzkaller0: entered promiscuous mode
[  422.989486][T20048] tipc: Node number set to 570654842
[  422.993512][T22750] syzkaller0: entered allmulticast mode
[  423.034026][T22753] syzkaller0: entered promiscuous mode
[  423.039702][T22753] syzkaller0: entered allmulticast mode
[  423.065871][T22750] tipc: Resetting bearer <eth:syzkaller0>
[  423.093482][T22749] tipc: Resetting bearer <eth:syzkaller0>
[  423.106453][T22749] tipc: Disabling bearer <eth:syzkaller0>
[  423.155792][T22755] macvtap0: refused to change device tx_queue_len
[  423.192038][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[  423.270787][T22761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.287971][T22761] syzkaller0: entered promiscuous mode
[  423.293538][T22761] syzkaller0: entered allmulticast mode
[  423.324434][T22761] tipc: Resetting bearer <eth:syzkaller0>
[  423.339896][T22760] tipc: Resetting bearer <eth:syzkaller0>
[  423.355283][T22760] tipc: Disabling bearer <eth:syzkaller0>
[  423.500998][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'.
[  423.556356][T22771] SELinux: ebitmap: truncated map
[  423.565027][T22771] SELinux: failed to load policy
[  423.571241][T19965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.626278][T22777] loop5: detected capacity change from 0 to 1024
[  423.638476][T22777] EXT4-fs: inline encryption not supported
[  423.644567][T22777] EXT4-fs: Ignoring removed i_version option
[  423.676377][T22777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.721417][T22787] random: crng reseeded on system resumption
[  424.908732][T22821] macvlan0: entered promiscuous mode
[  424.924164][T22821] batadv0: entered promiscuous mode
[  424.940267][T22821] hsr1: entered allmulticast mode
[  424.945382][T22821] macvlan0: entered allmulticast mode
[  424.950867][T22821] veth1_vlan: entered allmulticast mode
[  424.956522][T22821] batadv0: entered allmulticast mode
[  424.979524][T22821] macvlan0: left promiscuous mode
[  424.992937][T22821] batadv0: left promiscuous mode
[  425.125760][T19965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.212226][T22826] macvtap0: refused to change device tx_queue_len
[  425.242931][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  425.242975][ T3672] Bluetooth: hci0: command 0x1003 tx timeout
[  425.377134][T22837] macvlan0: entered promiscuous mode
[  425.398934][T22837] batadv0: entered promiscuous mode
[  425.417929][T22837] hsr1: entered allmulticast mode
[  425.439251][T22837] macvlan0: left promiscuous mode
[  425.450198][T22837] batadv0: left promiscuous mode
[  425.516104][T22845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.550407][T22845] syzkaller0: entered promiscuous mode
[  425.556087][T22845] syzkaller0: entered allmulticast mode
[  425.623726][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  425.653839][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  425.675743][T22844] tipc: Disabling bearer <eth:syzkaller0>
[  425.797608][T22854] loop5: detected capacity change from 0 to 2048
[  425.831136][T22852] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  425.884992][T22854] Alternate GPT is invalid, using primary GPT.
[  425.891359][T22854]  loop5: p1 p2 p3
[  425.895199][T22854] loop5: partition table partially beyond EOD, truncated
[  425.977365][T22860] macvtap0: refused to change device tx_queue_len
[  425.990203][T22858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.017436][T22858] syzkaller0: entered promiscuous mode
[  426.023116][T22858] syzkaller0: entered allmulticast mode
[  426.065203][T22858] tipc: Resetting bearer <eth:syzkaller0>
[  426.071779][T22857] tipc: Resetting bearer <eth:syzkaller0>
[  426.079091][T22857] tipc: Disabling bearer <eth:syzkaller0>
[  426.178078][T22874] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5917'.
[  426.210396][T22876] loop3: detected capacity change from 0 to 1024
[  426.217767][T22876] EXT4-fs: inline encryption not supported
[  426.223809][T22876] EXT4-fs: Ignoring removed i_version option
[  426.228331][T22881] random: crng reseeded on system resumption
[  426.266588][T22888] macvlan0: entered promiscuous mode
[  426.269074][T22876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.272711][T22888] batadv0: entered promiscuous mode
[  426.290453][T22888] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  426.300685][T22888] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  426.313426][T22888] hsr1: entered allmulticast mode
[  426.320899][T22888] macvlan0: left promiscuous mode
[  426.327910][T22888] batadv0: left promiscuous mode
[  426.366992][T22898] macvtap0: refused to change device tx_queue_len
[  426.420725][T22905] random: crng reseeded on system resumption
[  426.597098][T22912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.611824][T22912] syzkaller0: entered promiscuous mode
[  426.617407][T22912] syzkaller0: entered allmulticast mode
[  426.804909][T22912] tipc: Resetting bearer <eth:syzkaller0>
[  426.830151][T22911] tipc: Resetting bearer <eth:syzkaller0>
[  426.870535][T22911] tipc: Disabling bearer <eth:syzkaller0>
[  427.387451][T22454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.414409][T22922] siw: device registration error -23
[  427.425466][T22924] loop5: detected capacity change from 0 to 1024
[  427.442596][T22922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5933'.
[  427.452579][T22924] EXT4-fs: inline encryption not supported
[  427.458436][T22924] EXT4-fs: Ignoring removed i_version option
[  427.494509][T22924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.509961][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  427.509980][   T29] audit: type=1400 audit(1760074059.601:22615): avc:  denied  { create } for  pid=22884 comm="syz.2.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  427.535936][   T29] audit: type=1400 audit(1760074059.601:22616): avc:  denied  { setopt } for  pid=22884 comm="syz.2.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  428.024904][T22931] random: crng reseeded on system resumption
[  428.091394][   T29] audit: type=1326 audit(1760074059.711:22617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.115118][   T29] audit: type=1326 audit(1760074059.711:22618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.138786][   T29] audit: type=1326 audit(1760074059.711:22619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.162405][   T29] audit: type=1326 audit(1760074059.711:22620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.186071][   T29] audit: type=1326 audit(1760074059.711:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.209777][   T29] audit: type=1326 audit(1760074059.711:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.233456][   T29] audit: type=1326 audit(1760074059.711:22623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.257119][   T29] audit: type=1326 audit(1760074059.711:22624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22927 comm="syz.1.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  428.413338][T19965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.543491][T22941] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  428.717631][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'.
[  428.796030][T22969] siw: device registration error -23
[  428.802148][T22969] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5950'.
[  429.148916][T22984] loop3: detected capacity change from 0 to 512
[  429.426830][T22984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5952: bg 0: block 393: padding at end of block bitmap is not set
[  429.444868][T22984] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  429.456362][T22984] EXT4-fs (loop3): 2 truncates cleaned up
[  429.463782][T22984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.904745][T22998] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5957'.
[  430.070817][T23004] random: crng reseeded on system resumption
[  430.269123][T23014] macvlan0: entered promiscuous mode
[  430.282122][T23014] batadv0: entered promiscuous mode
[  430.295683][T23014] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  430.306029][T23014] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  430.338192][T23014] hsr1: entered allmulticast mode
[  430.350527][T23014] macvlan0: left promiscuous mode
[  430.363614][T23014] batadv0: left promiscuous mode
[  430.371725][T23015] syzkaller0: entered promiscuous mode
[  430.377397][T23015] syzkaller0: entered allmulticast mode
[  430.974265][T22454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.998490][T23038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.005558][T23038] syzkaller0: entered promiscuous mode
[  431.011052][T23038] syzkaller0: entered allmulticast mode
[  431.019702][T23038] tipc: Resetting bearer <eth:syzkaller0>
[  431.026283][T23037] tipc: Resetting bearer <eth:syzkaller0>
[  431.032958][T23037] tipc: Disabling bearer <eth:syzkaller0>
[  431.093826][T23044] loop3: detected capacity change from 0 to 2048
[  431.124978][T23044] Alternate GPT is invalid, using primary GPT.
[  431.131352][T23044]  loop3: p1 p2 p3
[  431.135118][T23044] loop3: partition table partially beyond EOD, truncated
[  431.204975][T23052] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  431.625309][T23071] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5985'.
[  432.244067][T23085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.261663][T23085] syzkaller0: entered promiscuous mode
[  432.267402][T23085] syzkaller0: entered allmulticast mode
[  432.298790][T23085] tipc: Resetting bearer <eth:syzkaller0>
[  432.317883][T23084] tipc: Resetting bearer <eth:syzkaller0>
[  432.334088][T23084] tipc: Disabling bearer <eth:syzkaller0>
[  432.456704][T23094] siw: device registration error -23
[  432.467204][T23097] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  432.485032][T23094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5990'.
[  432.716546][T23106] siw: device registration error -23
[  432.747159][T23106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5996'.
[  432.982900][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  432.982921][   T29] audit: type=1326 audit(1760074065.021:22742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.012932][   T29] audit: type=1326 audit(1760074065.021:22743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.036647][   T29] audit: type=1326 audit(1760074065.021:22744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.060565][   T29] audit: type=1326 audit(1760074065.021:22745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.084210][   T29] audit: type=1326 audit(1760074065.021:22746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.107860][   T29] audit: type=1326 audit(1760074065.021:22747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.131905][   T29] audit: type=1326 audit(1760074065.021:22748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.155661][   T29] audit: type=1326 audit(1760074065.031:22749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.179487][   T29] audit: type=1326 audit(1760074065.031:22750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.208007][   T29] audit: type=1326 audit(1760074065.111:22751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.1.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  433.357948][T23121] macvtap0: refused to change device tx_queue_len
[  433.437136][T23124] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6002'.
[  433.695793][T23130] macvlan0: entered promiscuous mode
[  433.701880][T23130] batadv0: entered promiscuous mode
[  433.707798][T23130] batadv0: left promiscuous mode
[  433.715571][T23130] macvlan0: left promiscuous mode
[  433.722457][T23126] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  433.949438][T23138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.956617][T23138] syzkaller0: entered promiscuous mode
[  433.962143][T23138] syzkaller0: entered allmulticast mode
[  433.973917][T23138] tipc: Resetting bearer <eth:syzkaller0>
[  433.983376][T23137] tipc: Resetting bearer <eth:syzkaller0>
[  433.990214][T23137] tipc: Disabling bearer <eth:syzkaller0>
[  434.043446][T23147] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6011'.
[  434.084127][T23151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.091335][T23151] syzkaller0: entered promiscuous mode
[  434.097001][T23151] syzkaller0: entered allmulticast mode
[  434.106926][T23150] tipc: Resetting bearer <eth:syzkaller0>
[  434.116312][T23150] tipc: Disabling bearer <eth:syzkaller0>
[  434.242493][T23156] random: crng reseeded on system resumption
[  434.283347][T23159] random: crng reseeded on system resumption
[  434.324425][T23165] netlink: 'syz.5.6021': attribute type 1 has an invalid length.
[  434.338330][T23165] 8021q: adding VLAN 0 to HW filter on device bond2
[  434.354067][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6020'.
[  434.429746][T23163] SELinux: ebitmap: truncated map
[  434.439228][T23163] SELinux: failed to load policy
[  434.663648][T23174] macvlan0: entered promiscuous mode
[  434.684181][T23174] batadv0: entered promiscuous mode
[  434.707836][T23174] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  434.718178][T23174] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  434.777927][T23174] hsr1: entered allmulticast mode
[  434.798018][T23174] macvlan0: left promiscuous mode
[  434.818021][T23174] batadv0: left promiscuous mode
[  435.243417][T23182] macvtap0: refused to change device tx_queue_len
[  435.423145][T23194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.445491][T23194] syzkaller0: entered promiscuous mode
[  435.451167][T23194] syzkaller0: entered allmulticast mode
[  435.503862][T23193] tipc: Resetting bearer <eth:syzkaller0>
[  435.531737][T23193] tipc: Disabling bearer <eth:syzkaller0>
[  435.824611][T23208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.856234][T23208] syzkaller0: entered promiscuous mode
[  435.861786][T23208] syzkaller0: entered allmulticast mode
[  435.888025][T23208] tipc: Resetting bearer <eth:syzkaller0>
[  435.902724][T23207] tipc: Resetting bearer <eth:syzkaller0>
[  435.914438][T23207] tipc: Disabling bearer <eth:syzkaller0>
[  436.651586][T23236] random: crng reseeded on system resumption
[  437.221954][T23263] syzkaller0: entered promiscuous mode
[  437.227551][T23263] syzkaller0: entered allmulticast mode
[  438.044794][T23288] random: crng reseeded on system resumption
[  438.371801][   T29] kauditd_printk_skb: 156 callbacks suppressed
[  438.371817][   T29] audit: type=1326 audit(1760074070.461:22908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  438.494272][T23292] macvlan0: entered promiscuous mode
[  438.520619][T23292] batadv0: entered promiscuous mode
[  438.539574][T23292] batadv0: left promiscuous mode
[  438.554885][T23292] macvlan0: left promiscuous mode
[  438.570228][   T29] audit: type=1326 audit(1760074070.551:22909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  438.593874][   T29] audit: type=1326 audit(1760074070.551:22910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  438.617559][   T29] audit: type=1326 audit(1760074070.551:22911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  438.641160][   T29] audit: type=1326 audit(1760074070.551:22912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  438.813336][T23299] netlink: 'syz.5.6069': attribute type 39 has an invalid length.
[  438.911447][T23300] macvtap0: entered promiscuous mode
[  438.935655][T23300] macvtap0: left promiscuous mode
[  439.034760][   T29] audit: type=1400 audit(1760074071.091:22913): avc:  denied  { read } for  pid=23305 comm="syz.2.6072" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  439.058559][   T29] audit: type=1400 audit(1760074071.091:22914): avc:  denied  { open } for  pid=23305 comm="syz.2.6072" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  439.160461][   T29] audit: type=1400 audit(1760074071.191:22915): avc:  denied  { write } for  pid=23293 comm="syz.1.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  439.181373][   T29] audit: type=1400 audit(1760074071.191:22916): avc:  denied  { prog_load } for  pid=23305 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  439.200752][   T29] audit: type=1400 audit(1760074071.191:22917): avc:  denied  { bpf } for  pid=23305 comm="syz.2.6072" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  439.460554][T23315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.479647][T23315] tipc: Resetting bearer <eth:syzkaller0>
[  439.503980][T23314] tipc: Disabling bearer <eth:syzkaller0>
[  439.515892][T23317] random: crng reseeded on system resumption
[  439.786701][T23339] macvlan0: entered promiscuous mode
[  439.805698][T23339] batadv0: entered promiscuous mode
[  439.819443][T23339] batadv0: left promiscuous mode
[  439.824619][T23339] macvlan0: left promiscuous mode
[  439.932334][T23350] syzkaller0: entered promiscuous mode
[  439.938062][T23350] syzkaller0: entered allmulticast mode
[  440.019642][T23358] random: crng reseeded on system resumption
[  441.272392][T23389] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6104'.
[  441.612382][T23404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6109'.
[  442.013250][T23416] random: crng reseeded on system resumption
[  442.250678][T23429] macvlan0: entered promiscuous mode
[  442.258607][T23429] batadv0: entered promiscuous mode
[  442.264596][T23429] hsr1: entered allmulticast mode
[  442.272878][T23429] macvlan0: left promiscuous mode
[  442.278843][T23429] batadv0: left promiscuous mode
[  442.289630][T23427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.297190][T23427] syzkaller0: entered promiscuous mode
[  442.302721][T23427] syzkaller0: entered allmulticast mode
[  442.315716][T23427] tipc: Resetting bearer <eth:syzkaller0>
[  442.323252][T23426] tipc: Resetting bearer <eth:syzkaller0>
[  442.330813][T23426] tipc: Disabling bearer <eth:syzkaller0>
[  442.360501][T23430] lo speed is unknown, defaulting to 1000
[  442.428994][T23443] syzkaller0: entered promiscuous mode
[  442.434617][T23443] syzkaller0: entered allmulticast mode
[  442.460430][T23430] chnl_net:caif_netlink_parms(): no params data found
[  442.489078][T23452] syzkaller0: entered promiscuous mode
[  442.494718][T23452] syzkaller0: entered allmulticast mode
[  442.515831][T23430] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.523158][T23430] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.533325][T23430] bridge_slave_0: entered allmulticast mode
[  442.540246][T23430] bridge_slave_0: entered promiscuous mode
[  442.542926][T23457] random: crng reseeded on system resumption
[  442.552424][T23430] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.559595][T23430] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.576155][T23430] bridge_slave_1: entered allmulticast mode
[  442.577343][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6129'.
[  442.583082][T23430] bridge_slave_1: entered promiscuous mode
[  442.609493][T23459] bridge_slave_1: left allmulticast mode
[  442.615266][T23459] bridge_slave_1: left promiscuous mode
[  442.621058][T23459] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.629086][T23459] bridge_slave_0: left allmulticast mode
[  442.634902][T23459] bridge_slave_0: left promiscuous mode
[  442.640535][T23459] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.655109][T23462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6130'.
[  442.683615][T23463] SELinux: ebitmap: truncated map
[  442.690571][T23463] SELinux: failed to load policy
[  442.694462][T23430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.709174][T23430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.730187][T23430] team0: Port device team_slave_0 added
[  442.736934][T23430] team0: Port device team_slave_1 added
[  442.754659][T23430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.761619][T23430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.788257][T23430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.799927][T23430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.806937][T23430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.832976][T23430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.876074][T23430] hsr_slave_0: entered promiscuous mode
[  442.882369][T23430] hsr_slave_1: entered promiscuous mode
[  442.888486][T23430] debugfs: 'hsr0' already exists in 'hsr'
[  442.894291][T23430] Cannot create hsr debugfs directory
[  442.902106][T23467] macvlan0: entered promiscuous mode
[  442.908893][T23467] batadv0: entered promiscuous mode
[  442.914631][T23467] hsr1: entered allmulticast mode
[  442.921172][T23467] macvlan0: left promiscuous mode
[  442.926805][T23467] batadv0: left promiscuous mode
[  443.222844][T23487] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6141'.
[  443.258363][T23430] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  443.278777][T23430] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  443.295545][T23430] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  443.313527][T23430] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  443.378628][T23430] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.386155][   T29] kauditd_printk_skb: 234 callbacks suppressed
[  443.386172][   T29] audit: type=1326 audit(1760074075.481:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  443.416096][   T29] audit: type=1326 audit(1760074075.481:23153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  443.445258][T23430] 8021q: adding VLAN 0 to HW filter on device team0
[  443.464247][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.471382][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.487713][T23499] random: crng reseeded on system resumption
[  443.488687][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.500867][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.600098][T23512] macvlan0: entered promiscuous mode
[  443.607879][T23512] batadv0: entered promiscuous mode
[  443.613744][T23512] hsr1: entered allmulticast mode
[  443.620129][T23512] macvlan0: left promiscuous mode
[  443.625831][T23512] batadv0: left promiscuous mode
[  443.639672][T23430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.680850][   T29] audit: type=1326 audit(1760074075.771:23154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.704634][   T29] audit: type=1326 audit(1760074075.771:23155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.729298][   T29] audit: type=1326 audit(1760074075.771:23156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.745657][T23430] veth0_vlan: entered promiscuous mode
[  443.753011][   T29] audit: type=1326 audit(1760074075.771:23157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.761607][T23430] veth1_vlan: entered promiscuous mode
[  443.782042][   T29] audit: type=1326 audit(1760074075.821:23158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.806693][T23430] veth0_macvtap: entered promiscuous mode
[  443.811805][   T29] audit: type=1326 audit(1760074075.901:23159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.820154][T23430] veth1_macvtap: entered promiscuous mode
[  443.840086][   T29] audit: type=1326 audit(1760074075.901:23160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.869467][   T29] audit: type=1326 audit(1760074075.901:23161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a332eec9 code=0x7ffc0000
[  443.881214][T23430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.919833][T23430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.931894][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.950576][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.960784][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.972892][ T4068] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.191970][T23553] random: crng reseeded on system resumption
[  444.322030][T23557] macvlan0: entered promiscuous mode
[  444.349136][T23557] batadv0: entered promiscuous mode
[  444.366818][T23557] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  444.377046][T23557] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  444.460570][T23557] hsr1: entered allmulticast mode
[  444.476001][T23557] macvlan0: left promiscuous mode
[  444.488019][T23557] batadv0: left promiscuous mode
[  444.612897][T23580] syzkaller0: entered promiscuous mode
[  444.618443][T23580] syzkaller0: entered allmulticast mode
[  444.719699][T23591] random: crng reseeded on system resumption
[  444.787689][T23581] lo speed is unknown, defaulting to 1000
[  444.871889][T23581] chnl_net:caif_netlink_parms(): no params data found
[  444.918605][T23581] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.925798][T23581] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.933465][T23581] bridge_slave_0: entered allmulticast mode
[  444.942069][T23581] bridge_slave_0: entered promiscuous mode
[  444.949136][T23581] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.956385][T23581] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.963847][T23581] bridge_slave_1: entered allmulticast mode
[  444.970393][T23581] bridge_slave_1: entered promiscuous mode
[  444.991054][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.001783][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.025842][T23581] team0: Port device team_slave_0 added
[  445.033089][T23581] team0: Port device team_slave_1 added
[  445.052023][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.059092][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.085102][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.097503][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.104548][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.130608][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.163904][T23581] hsr_slave_0: entered promiscuous mode
[  445.170105][T23581] hsr_slave_1: entered promiscuous mode
[  445.176242][T23581] debugfs: 'hsr0' already exists in 'hsr'
[  445.182005][T23581] Cannot create hsr debugfs directory
[  445.453052][T23581] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  445.463662][T23581] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  445.475024][T23581] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  445.485237][T23581] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  445.536531][T23581] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.551536][T23581] 8021q: adding VLAN 0 to HW filter on device team0
[  445.561919][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.569080][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.600857][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.608034][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.726413][T23581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.758557][T23645] random: crng reseeded on system resumption
[  447.215602][T23581] veth0_vlan: entered promiscuous mode
[  447.224121][T23581] veth1_vlan: entered promiscuous mode
[  447.238684][T23581] veth0_macvtap: entered promiscuous mode
[  447.247716][T23581] veth1_macvtap: entered promiscuous mode
[  447.259799][T23581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.270675][T23581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.456809][ T4081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.473647][ T4081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.495773][ T4081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.513930][ T4081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.588088][T23687] macvlan0: entered promiscuous mode
[  447.606867][T23687] batadv0: entered promiscuous mode
[  447.621349][T23687] hsr1: entered allmulticast mode
[  447.626568][T23687] macvlan0: entered allmulticast mode
[  447.632041][T23687] veth1_vlan: entered allmulticast mode
[  447.637717][T23687] batadv0: entered allmulticast mode
[  447.671695][T23687] macvlan0: left promiscuous mode
[  447.681301][T23687] batadv0: left promiscuous mode
[  447.708606][T23689] syzkaller0: entered promiscuous mode
[  447.714275][T23689] syzkaller0: entered allmulticast mode
[  447.829743][T23698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.837031][T23698] syzkaller0: entered promiscuous mode
[  447.842557][T23698] syzkaller0: entered allmulticast mode
[  447.853189][T23697] tipc: Resetting bearer <eth:syzkaller0>
[  447.863565][T23697] tipc: Disabling bearer <eth:syzkaller0>
[  447.979204][T23707] FAULT_INJECTION: forcing a failure.
[  447.979204][T23707] name failslab, interval 1, probability 0, space 0, times 0
[  447.992097][T23707] CPU: 1 UID: 0 PID: 23707 Comm: syz.1.6202 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  447.992132][T23707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  447.992149][T23707] Call Trace:
[  447.992155][T23707]  <TASK>
[  447.992232][T23707]  __dump_stack+0x1d/0x30
[  447.992256][T23707]  dump_stack_lvl+0xe8/0x140
[  447.992276][T23707]  dump_stack+0x15/0x1b
[  447.992295][T23707]  should_fail_ex+0x265/0x280
[  447.992397][T23707]  should_failslab+0x8c/0xb0
[  447.992429][T23707]  kmem_cache_alloc_noprof+0x50/0x480
[  447.992458][T23707]  ? getname_flags+0x80/0x3b0
[  447.992551][T23707]  getname_flags+0x80/0x3b0
[  447.992582][T23707]  user_path_at+0x28/0x130
[  447.992617][T23707]  __se_sys_inotify_add_watch+0x102/0x7b0
[  447.992777][T23707]  __x64_sys_inotify_add_watch+0x43/0x50
[  447.992846][T23707]  x64_sys_call+0xfc7/0x3000
[  447.992872][T23707]  do_syscall_64+0xd2/0x200
[  447.992900][T23707]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  447.992929][T23707]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  447.993005][T23707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.993088][T23707] RIP: 0033:0x7f3553feeec9
[  447.993104][T23707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.993157][T23707] RSP: 002b:00007f3552a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[  447.993178][T23707] RAX: ffffffffffffffda RBX: 00007f3554245fa0 RCX: 00007f3553feeec9
[  447.993192][T23707] RDX: 0000000025000001 RSI: 0000200000000280 RDI: 0000000000000006
[  447.993205][T23707] RBP: 00007f3552a57090 R08: 0000000000000000 R09: 0000000000000000
[  447.993218][T23707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.993231][T23707] R13: 00007f3554246038 R14: 00007f3554245fa0 R15: 00007ffe09cf4fe8
[  447.993255][T23707]  </TASK>
[  448.436269][T23717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6204'.
[  448.584409][T23722] macvlan0: entered promiscuous mode
[  448.598600][T23722] batadv0: entered promiscuous mode
[  448.617766][T23722] hsr1: entered allmulticast mode
[  448.622882][T23722] macvlan0: entered allmulticast mode
[  448.628291][T23722] veth1_vlan: entered allmulticast mode
[  448.633874][T23722] batadv0: entered allmulticast mode
[  448.655511][T23722] macvlan0: left promiscuous mode
[  448.661250][T23722] batadv0: left promiscuous mode
[  448.771242][   T29] kauditd_printk_skb: 204 callbacks suppressed
[  448.771284][   T29] audit: type=1400 audit(1760074080.861:23366): avc:  denied  { name_bind } for  pid=23728 comm="syz.5.6210" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  448.799544][   T29] audit: type=1400 audit(1760074080.861:23367): avc:  denied  { node_bind } for  pid=23728 comm="syz.5.6210" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  448.850910][   T29] audit: type=1400 audit(1760074080.941:23368): avc:  denied  { write } for  pid=23733 comm="syz.3.6211" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  448.862044][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6211'.
[  448.887733][T23737] random: crng reseeded on system resumption
[  448.915665][T23734] SELinux: ebitmap: truncated map
[  448.917802][   T29] audit: type=1400 audit(1760074081.011:23369): avc:  denied  { load_policy } for  pid=23733 comm="syz.3.6211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  448.922670][T23734] SELinux: failed to load policy
[  448.949203][T23734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6211'.
[  448.960746][   T29] audit: type=1400 audit(1760074081.051:23370): avc:  denied  { create } for  pid=23733 comm="syz.3.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  449.034413][   T29] audit: type=1400 audit(1760074081.131:23371): avc:  denied  { create } for  pid=23742 comm="syz.3.6216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  449.041786][T23743] siw: device registration error -23
[  449.055172][   T29] audit: type=1400 audit(1760074081.131:23372): avc:  denied  { write } for  pid=23742 comm="syz.3.6216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  449.083954][T23743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6216'.
[  449.217094][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'.
[  449.270467][   T29] audit: type=1326 audit(1760074081.361:23373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23754 comm="syz.1.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  449.318724][   T29] audit: type=1326 audit(1760074081.391:23374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23754 comm="syz.1.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  449.342589][   T29] audit: type=1326 audit(1760074081.391:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23754 comm="syz.1.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3553feeec9 code=0x7ffc0000
[  449.443630][ T3399] kernel write not supported for file bpf-prog (pid: 3399 comm: kworker/0:4)
[  449.664020][T23778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.672165][T23778] tipc: Resetting bearer <eth:syzkaller0>
[  449.678873][T23777] tipc: Disabling bearer <eth:syzkaller0>
[  449.841131][T23787] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  449.854575][T23787] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.862215][T23787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.014663][T23791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6232'.
[  450.031678][T23790] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  450.041412][T23790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.397387][T23799] random: crng reseeded on system resumption
[  450.450993][T23807] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  450.473496][T23809] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6240'.
[  450.540760][T23818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6242'.
[  450.634525][T23832] lo speed is unknown, defaulting to 1000
[  450.733042][T23839] random: crng reseeded on system resumption
[  450.872654][T23845] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  450.882336][T23845] netlink: 316 bytes leftover after parsing attributes in process `syz.5.6252'.
[  450.908063][T23847] FAULT_INJECTION: forcing a failure.
[  450.908063][T23847] name failslab, interval 1, probability 0, space 0, times 0
[  450.920773][T23847] CPU: 1 UID: 0 PID: 23847 Comm: syz.5.6253 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  450.920802][T23847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  450.920844][T23847] Call Trace:
[  450.920853][T23847]  <TASK>
[  450.920864][T23847]  __dump_stack+0x1d/0x30
[  450.920892][T23847]  dump_stack_lvl+0xe8/0x140
[  450.920913][T23847]  dump_stack+0x15/0x1b
[  450.920929][T23847]  should_fail_ex+0x265/0x280
[  450.921034][T23847]  should_failslab+0x8c/0xb0
[  450.921124][T23847]  __kvmalloc_node_noprof+0x12e/0x670
[  450.921166][T23847]  ? vmemdup_user+0x2b/0xd0
[  450.921200][T23847]  vmemdup_user+0x2b/0xd0
[  450.921273][T23847]  map_lookup_elem+0x18f/0x460
[  450.921309][T23847]  ? security_bpf+0x2b/0x90
[  450.921343][T23847]  __sys_bpf+0x3b9/0x7c0
[  450.921392][T23847]  __x64_sys_bpf+0x41/0x50
[  450.921439][T23847]  x64_sys_call+0x2aee/0x3000
[  450.921464][T23847]  do_syscall_64+0xd2/0x200
[  450.921490][T23847]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  450.921521][T23847]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  450.921591][T23847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.921618][T23847] RIP: 0033:0x7f9481d1eec9
[  450.921680][T23847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.921699][T23847] RSP: 002b:00007f948077f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  450.921763][T23847] RAX: ffffffffffffffda RBX: 00007f9481f75fa0 RCX: 00007f9481d1eec9
[  450.921776][T23847] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000001
[  450.921823][T23847] RBP: 00007f948077f090 R08: 0000000000000000 R09: 0000000000000000
[  450.921840][T23847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.921857][T23847] R13: 00007f9481f76038 R14: 00007f9481f75fa0 R15: 00007fffafeb3cc8
[  450.921881][T23847]  </TASK>
[  450.922963][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  450.933131][ T3672] Bluetooth: hci0: command 0x1003 tx timeout
[  451.141637][T23851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6255'.
[  451.239313][T23863] binfmt_misc: register: failed to install interpreter file ./file0
[  451.646446][T23892] bridge_slave_1: left allmulticast mode
[  451.652168][T23892] bridge_slave_1: left promiscuous mode
[  451.658039][T23892] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.687954][T23892] bridge_slave_0: left allmulticast mode
[  451.693713][T23892] bridge_slave_0: left promiscuous mode
[  451.699641][T23892] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.707346][T23890] random: crng reseeded on system resumption
[  451.773802][T23903] SELinux: ebitmap: truncated map
[  451.780932][T23903] SELinux: failed to load policy
[  451.889837][T23912] macvlan0: entered promiscuous mode
[  451.896680][T23912] batadv0: entered promiscuous mode
[  451.902484][T23912] hsr1: entered allmulticast mode
[  451.920826][T23912] macvlan0: left promiscuous mode
[  451.947348][T23915] random: crng reseeded on system resumption
[  451.953478][T23912] batadv0: left promiscuous mode
[  452.008245][T23078] Bluetooth: hci0: Frame reassembly failed (-84)
[  452.139392][T23925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.150140][T23925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.178857][T23925] veth1_vlan: left allmulticast mode
[  452.199781][T23927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.207975][T23927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.218020][T23927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.225535][T23927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.244831][T23920] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  452.254499][T23920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.270222][T23078] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.280134][ T4068] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.289472][ T4068] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.299201][ T4068] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.390452][T23937] SELinux: ebitmap: truncated map
[  452.400901][T23937] SELinux: failed to load policy
[  452.406747][T23939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23939 comm=syz.2.6290
[  452.618101][T23964] syzkaller0: entered promiscuous mode
[  452.623652][T23964] syzkaller0: entered allmulticast mode
[  452.980560][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.027738][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.103157][T23970] veth1_vlan: left allmulticast mode
[  453.177756][T23969] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  453.187494][T23969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.202980][ T1901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.216417][ T1901] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.275195][ T1901] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.318452][ T1901] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.412608][T23974] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  453.422241][T23974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.504648][T23981] __nla_validate_parse: 10 callbacks suppressed
[  453.504666][T23981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6303'.
[  453.522903][T23982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6302'.
[  453.552735][T23979] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  453.562537][T23979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.791781][   T29] kauditd_printk_skb: 546 callbacks suppressed
[  453.791800][   T29] audit: type=1326 audit(1760074085.881:23922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24000 comm="syz.3.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  453.827306][T24008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6311'.
[  453.828535][   T29] audit: type=1400 audit(1760074085.881:23923): avc:  denied  { setopt } for  pid=23993 comm="syz.1.6308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  453.857235][   T29] audit: type=1400 audit(1760074085.921:23924): avc:  denied  { create } for  pid=24004 comm="syz.2.6311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  453.877651][   T29] audit: type=1400 audit(1760074085.921:23925): avc:  denied  { write } for  pid=24004 comm="syz.2.6311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  453.898121][   T29] audit: type=1326 audit(1760074085.921:23926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24000 comm="syz.3.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  453.922252][   T29] audit: type=1400 audit(1760074085.931:23927): avc:  denied  { read write } for  pid=24004 comm="syz.2.6311" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  453.946789][   T29] audit: type=1400 audit(1760074085.931:23928): avc:  denied  { open } for  pid=24004 comm="syz.2.6311" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  453.972117][   T29] audit: type=1326 audit(1760074085.951:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23992 comm="syz.4.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  453.995737][   T29] audit: type=1326 audit(1760074085.951:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23992 comm="syz.4.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  454.019822][   T29] audit: type=1326 audit(1760074086.091:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24000 comm="syz.3.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  454.044222][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  454.092551][T24015] random: crng reseeded on system resumption
[  454.200852][T24021] syzkaller0: entered promiscuous mode
[  454.206636][T24021] syzkaller0: entered allmulticast mode
[  454.249211][T24025] syzkaller0: entered promiscuous mode
[  454.254891][T24025] syzkaller0: entered allmulticast mode
[  454.364631][T24030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.378855][T24030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.447981][T24035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6322'.
[  454.478232][T24032] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  454.487954][T24032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.503189][ T1901] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.529732][ T1901] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.552243][T23078] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.575804][T23078] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.614897][T24047] random: crng reseeded on system resumption
[  454.644925][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6330'.
[  454.656580][T24052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6327'.
[  454.827946][T24061] SELinux:  policydb magic number 0x24 does not match expected magic number 0xf97cff8c
[  454.861430][T24061] SELinux: failed to load policy
[  454.876933][T24061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6330'.
[  455.296896][T24085] random: crng reseeded on system resumption
[  455.317002][T24089] siw: device registration error -23
[  455.499382][T24104] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  455.566927][T24111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6350'.
[  455.828929][T24105] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  455.838597][T24105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.243839][T24132] syz.5.6357 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  457.258380][T24132] CPU: 1 UID: 0 PID: 24132 Comm: syz.5.6357 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  457.258491][T24132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  457.258505][T24132] Call Trace:
[  457.258512][T24132]  <TASK>
[  457.258520][T24132]  __dump_stack+0x1d/0x30
[  457.258555][T24132]  dump_stack_lvl+0xe8/0x140
[  457.258642][T24132]  dump_stack+0x15/0x1b
[  457.258666][T24132]  dump_header+0x81/0x220
[  457.258711][T24132]  oom_kill_process+0x342/0x400
[  457.258750][T24132]  out_of_memory+0x979/0xb80
[  457.258791][T24132]  try_charge_memcg+0x5e6/0x9e0
[  457.258833][T24132]  obj_cgroup_charge_pages+0xa6/0x150
[  457.258875][T24132]  __memcg_kmem_charge_page+0x9f/0x170
[  457.258921][T24132]  __alloc_frozen_pages_noprof+0x188/0x360
[  457.258972][T24132]  alloc_pages_mpol+0xb3/0x260
[  457.258997][T24132]  ? alloc_pages_noprof+0x61/0x130
[  457.259021][T24132]  alloc_pages_noprof+0x90/0x130
[  457.259063][T24132]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  457.259116][T24132]  __kvmalloc_node_noprof+0x483/0x670
[  457.259158][T24132]  ? ip_set_alloc+0x24/0x30
[  457.259246][T24132]  ? ip_set_alloc+0x24/0x30
[  457.259281][T24132]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  457.259325][T24132]  ip_set_alloc+0x24/0x30
[  457.259356][T24132]  hash_netiface_create+0x282/0x740
[  457.259413][T24132]  ? __pfx_hash_netiface_create+0x10/0x10
[  457.259442][T24132]  ip_set_create+0x3cc/0x970
[  457.259480][T24132]  ? __nla_parse+0x40/0x60
[  457.259526][T24132]  nfnetlink_rcv_msg+0x4c6/0x590
[  457.259582][T24132]  netlink_rcv_skb+0x120/0x220
[  457.259620][T24132]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  457.259703][T24132]  nfnetlink_rcv+0x167/0x16c0
[  457.259741][T24132]  ? perf_trace_buf_update+0xb4/0xe0
[  457.259773][T24132]  ? __rcu_read_unlock+0x34/0x70
[  457.259867][T24132]  ? perf_tp_event+0x9b3/0x9f0
[  457.259977][T24132]  ? page_counter_charge+0x207/0x230
[  457.260023][T24132]  ? __rcu_read_unlock+0x4f/0x70
[  457.260070][T24132]  ? __rcu_read_unlock+0x4f/0x70
[  457.260137][T24132]  ? should_fail_ex+0x30/0x280
[  457.260177][T24132]  ? selinux_nlmsg_lookup+0x99/0x890
[  457.260211][T24132]  ? __rcu_read_unlock+0x34/0x70
[  457.260326][T24132]  ? __netlink_lookup+0x266/0x2a0
[  457.260371][T24132]  netlink_unicast+0x5c0/0x690
[  457.260410][T24132]  netlink_sendmsg+0x58b/0x6b0
[  457.260447][T24132]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.260550][T24132]  __sock_sendmsg+0x142/0x180
[  457.260578][T24132]  ____sys_sendmsg+0x31e/0x4e0
[  457.260666][T24132]  ___sys_sendmsg+0x17b/0x1d0
[  457.260713][T24132]  __x64_sys_sendmsg+0xd4/0x160
[  457.260818][T24132]  x64_sys_call+0x191e/0x3000
[  457.260845][T24132]  do_syscall_64+0xd2/0x200
[  457.260873][T24132]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  457.260984][T24132]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  457.261006][T24132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.261032][T24132] RIP: 0033:0x7f9481d1eec9
[  457.261106][T24132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.261131][T24132] RSP: 002b:00007f948077f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.261158][T24132] RAX: ffffffffffffffda RBX: 00007f9481f75fa0 RCX: 00007f9481d1eec9
[  457.261176][T24132] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  457.261195][T24132] RBP: 00007f9481da1f91 R08: 0000000000000000 R09: 0000000000000000
[  457.261212][T24132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.261230][T24132] R13: 00007f9481f76038 R14: 00007f9481f75fa0 R15: 00007fffafeb3cc8
[  457.261258][T24132]  </TASK>
[  457.261265][T24132] memory: usage 307200kB, limit 307200kB, failcnt 149
[  457.617104][T24132] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0
[  457.625122][T24132] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0
[  457.632441][T24132] Memory cgroup stats for /syz5:
[  457.632661][T24132] cache 0
[  457.640790][T24132] rss 118784
[  457.644070][T24132] shmem 0
[  457.647032][T24132] mapped_file 0
[  457.650552][T24132] dirty 0
[  457.653555][T24132] writeback 0
[  457.656843][T24132] workingset_refault_anon 79
[  457.661427][T24132] workingset_refault_file 0
[  457.665987][T24132] swap 49152
[  457.669182][T24132] swapcached 139264
[  457.673019][T24132] pgpgin 87151
[  457.676441][T24132] pgpgout 87114
[  457.679891][T24132] pgfault 107316
[  457.683495][T24132] pgmajfault 39
[  457.686951][T24132] inactive_anon 36864
[  457.690922][T24132] active_anon 114688
[  457.694915][T24132] inactive_file 0
[  457.698547][T24132] active_file 0
[  457.702033][T24132] unevictable 0
[  457.705557][T24132] hierarchical_memory_limit 314572800
[  457.710978][T24132] hierarchical_memsw_limit 9223372036854771712
[  457.717249][T24132] total_cache 0
[  457.720710][T24132] total_rss 118784
[  457.724504][T24132] total_shmem 0
[  457.727959][T24132] total_mapped_file 0
[  457.731931][T24132] total_dirty 0
[  457.735488][T24132] total_writeback 0
[  457.739301][T24132] total_workingset_refault_anon 79
[  457.744427][T24132] total_workingset_refault_file 0
[  457.749607][T24132] total_swap 49152
[  457.753360][T24132] total_swapcached 139264
[  457.757695][T24132] total_pgpgin 87151
[  457.761582][T24132] total_pgpgout 87114
[  457.765658][T24132] total_pgfault 107316
[  457.769725][T24132] total_pgmajfault 39
[  457.773746][T24132] total_inactive_anon 36864
[  457.778335][T24132] total_active_anon 114688
[  457.782746][T24132] total_inactive_file 0
[  457.787028][T24132] total_active_file 0
[  457.791026][T24132] total_unevictable 0
[  457.795143][T24132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6357,pid=24130,uid=0
[  457.809916][T24132] Memory cgroup out of memory: Killed process 24132 (syz.5.6357) total-vm:93956kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  458.004506][T24145] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6360'.
[  458.054406][T24154] random: crng reseeded on system resumption
[  458.074970][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6363'.
[  458.102641][T24149] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  458.112356][T24149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  458.390018][T24169] SELinux: ebitmap: truncated map
[  458.425638][T24169] SELinux: failed to load policy
[  458.525871][T21939] Bluetooth: hci0: command 0x1003 tx timeout
[  458.533957][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  459.341477][T21690] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  459.352612][T21690] CPU: 0 UID: 0 PID: 21690 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  459.352643][T21690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  459.352692][T21690] Call Trace:
[  459.352701][T21690]  <TASK>
[  459.352712][T21690]  __dump_stack+0x1d/0x30
[  459.352737][T21690]  dump_stack_lvl+0xe8/0x140
[  459.352756][T21690]  dump_stack+0x15/0x1b
[  459.352773][T21690]  dump_header+0x81/0x220
[  459.352874][T21690]  oom_kill_process+0x342/0x400
[  459.352915][T21690]  out_of_memory+0x979/0xb80
[  459.352947][T21690]  try_charge_memcg+0x5e6/0x9e0
[  459.352978][T21690]  ? should_fail_ex+0x30/0x280
[  459.353036][T21690]  charge_memcg+0x51/0xc0
[  459.353064][T21690]  __mem_cgroup_charge+0x28/0xb0
[  459.353103][T21690]  filemap_add_folio+0x111/0x360
[  459.353137][T21690]  __filemap_get_folio+0x31e/0x650
[  459.353196][T21690]  filemap_fault+0x447/0xb60
[  459.353291][T21690]  __do_fault+0xb9/0x200
[  459.353433][T21690]  handle_mm_fault+0xf78/0x2be0
[  459.353462][T21690]  ? vma_start_read+0x141/0x1f0
[  459.353497][T21690]  do_user_addr_fault+0x630/0x1080
[  459.353527][T21690]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  459.353652][T21690]  exc_page_fault+0x62/0xa0
[  459.353683][T21690]  asm_exc_page_fault+0x26/0x30
[  459.353710][T21690] RIP: 0033:0x7f3553ec5db4
[  459.353729][T21690] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1
[  459.353748][T21690] RSP: 002b:00007ffe09cf5370 EFLAGS: 00010202
[  459.353836][T21690] RAX: 0000001b30124000 RBX: 000000000000018d RCX: 000000000006fd10
[  459.353850][T21690] RDX: 000000000f7da558 RSI: 00007ffe09cf5400 RDI: 0000000000000001
[  459.353862][T21690] RBP: 00007ffe09cf53ac R08: 000000003b17bd0f R09: 7fffffffffffffff
[  459.353879][T21690] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  459.353897][T21690] R13: 00000000000927c0 R14: 000000000006fe39 R15: 00007ffe09cf5400
[  459.353922][T21690]  </TASK>
[  459.548567][T21690] memory: usage 307200kB, limit 307200kB, failcnt 3345
[  459.555583][T21690] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0
[  459.563604][T21690] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0
[  459.570971][T21690] Memory cgroup stats for /syz1:
[  459.636581][T24183] siw: device registration error -23
[  459.647166][   T44] Bluetooth: hci1: command 0x1003 tx timeout
[  459.653245][ T3672] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  459.677179][T24183] __nla_validate_parse: 2 callbacks suppressed
[  459.677200][T24183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6375'.
[  459.711926][T24187] random: crng reseeded on system resumption
[  459.776749][T21690] cache 0
[  459.779737][T21690] rss 0
[  459.782527][T21690] shmem 0
[  459.785510][T21690] mapped_file 0
[  459.789060][T21690] dirty 0
[  459.792021][T21690] writeback 0
[  459.795365][T21690] workingset_refault_anon 691
[  459.800084][T21690] workingset_refault_file 7904
[  459.804896][T21690] swap 172032
[  459.808247][T21690] swapcached 28672
[  459.811975][T21690] pgpgin 444245
[  459.815465][T21690] pgpgout 444220
[  459.819030][T21690] pgfault 557515
[  459.822660][T21690] pgmajfault 429
[  459.826329][T21690] inactive_anon 24576
[  459.830354][T21690] active_anon 4096
[  459.834158][T21690] inactive_file 73728
[  459.838358][T21690] active_file 0
[  459.841830][T21690] unevictable 0
[  459.845331][T21690] hierarchical_memory_limit 314572800
[  459.850787][T21690] hierarchical_memsw_limit 9223372036854771712
[  459.857085][T21690] total_cache 0
[  459.860558][T21690] total_rss 0
[  459.863861][T21690] total_shmem 0
[  459.867453][T21690] total_mapped_file 0
[  459.871440][T21690] total_dirty 0
[  459.874972][T21690] total_writeback 0
[  459.878872][T21690] total_workingset_refault_anon 691
[  459.884146][T21690] total_workingset_refault_file 7904
[  459.889447][T21690] total_swap 172032
[  459.893298][T21690] total_swapcached 28672
[  459.897552][T21690] total_pgpgin 444245
[  459.901543][T21690] total_pgpgout 444220
[  459.905708][T21690] total_pgfault 557515
[  459.909792][T21690] total_pgmajfault 429
[  459.913946][T21690] total_inactive_anon 24576
[  459.918460][T21690] total_active_anon 4096
[  459.922740][T21690] total_inactive_file 73728
[  459.927275][T21690] total_active_file 0
[  459.931267][T21690] total_unevictable 0
[  459.935283][T21690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6369,pid=24165,uid=0
[  459.950113][T21690] Memory cgroup out of memory: Killed process 24165 (syz.1.6369) total-vm:96004kB, anon-rss:1216kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  460.352747][T24207] macvlan0: entered promiscuous mode
[  460.395838][T24207] batadv0: entered promiscuous mode
[  460.411612][T24207] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  460.422598][T24207] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  460.440615][T24207] hsr1: entered allmulticast mode
[  460.457949][T24207] macvlan0: left promiscuous mode
[  460.475255][T24207] batadv0: left promiscuous mode
[  460.588734][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6387'.
[  460.657768][   T29] kauditd_printk_skb: 218 callbacks suppressed
[  460.657783][   T29] audit: type=1326 audit(1760074092.751:24150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.692988][   T29] audit: type=1326 audit(1760074092.781:24151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.716732][   T29] audit: type=1326 audit(1760074092.781:24152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.740508][   T29] audit: type=1326 audit(1760074092.781:24153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.784443][T24212] SELinux: ebitmap: truncated map
[  460.791086][   T29] audit: type=1326 audit(1760074092.881:24154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.798608][T24212] SELinux: failed to load policy
[  460.814805][   T29] audit: type=1326 audit(1760074092.881:24155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.834673][T24212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6387'.
[  460.843290][   T29] audit: type=1326 audit(1760074092.881:24156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.932980][T24215] siw: device registration error -23
[  460.938795][T24215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6388'.
[  460.975607][   T29] audit: type=1326 audit(1760074092.971:24157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  460.999497][   T29] audit: type=1326 audit(1760074092.971:24158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  461.023211][   T29] audit: type=1326 audit(1760074092.971:24159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02d8eec9 code=0x7ffc0000
[  461.344490][T24229] bridge0: port 1(batadv1) entered blocking state
[  461.347846][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'.
[  461.357658][T24229] bridge0: port 1(batadv1) entered disabled state
[  461.369659][T24229] batadv1: entered allmulticast mode
[  461.385859][T24229] batadv1: entered promiscuous mode
[  461.808906][T23078] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  461.818256][T23078] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  462.409877][T24256] FAULT_INJECTION: forcing a failure.
[  462.409877][T24256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.423182][T24256] CPU: 1 UID: 0 PID: 24256 Comm: syz.5.6402 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  462.423296][T24256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  462.423359][T24256] Call Trace:
[  462.423369][T24256]  <TASK>
[  462.423379][T24256]  __dump_stack+0x1d/0x30
[  462.423405][T24256]  dump_stack_lvl+0xe8/0x140
[  462.423425][T24256]  dump_stack+0x15/0x1b
[  462.423452][T24256]  should_fail_ex+0x265/0x280
[  462.423527][T24256]  should_fail+0xb/0x20
[  462.423565][T24256]  should_fail_usercopy+0x1a/0x20
[  462.423589][T24256]  strncpy_from_user+0x25/0x230
[  462.423671][T24256]  ? kmem_cache_alloc_noprof+0x242/0x480
[  462.423741][T24256]  ? getname_flags+0x80/0x3b0
[  462.423788][T24256]  getname_flags+0xae/0x3b0
[  462.423885][T24256]  user_path_at+0x28/0x130
[  462.423930][T24256]  user_statfs+0x4d/0x110
[  462.423975][T24256]  __x64_sys_statfs+0x65/0xf0
[  462.424021][T24256]  ? fput+0x8f/0xc0
[  462.424065][T24256]  ? ksys_write+0x192/0x1a0
[  462.424166][T24256]  x64_sys_call+0x2a07/0x3000
[  462.424196][T24256]  do_syscall_64+0xd2/0x200
[  462.424286][T24256]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  462.424351][T24256]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  462.424451][T24256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.424511][T24256] RIP: 0033:0x7f9481d1eec9
[  462.424526][T24256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.424545][T24256] RSP: 002b:00007f948077f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  462.424568][T24256] RAX: ffffffffffffffda RBX: 00007f9481f75fa0 RCX: 00007f9481d1eec9
[  462.424586][T24256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  462.424624][T24256] RBP: 00007f948077f090 R08: 0000000000000000 R09: 0000000000000000
[  462.424636][T24256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.424648][T24256] R13: 00007f9481f76038 R14: 00007f9481f75fa0 R15: 00007fffafeb3cc8
[  462.424669][T24256]  </TASK>
[  462.667967][T24259] syzkaller0: entered promiscuous mode
[  462.673618][T24259] syzkaller0: entered allmulticast mode
[  462.745878][T24265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6403'.
[  462.763793][T24264] random: crng reseeded on system resumption
[  462.788969][T24260] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  462.798752][T24260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.835866][T24267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6407'.
[  462.906820][T24267] SELinux: ebitmap: truncated map
[  462.927236][T24267] SELinux: failed to load policy
[  462.962375][T24267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6407'.
[  462.996253][T24276] x_tables: duplicate underflow at hook 1
[  463.359870][T24288] random: crng reseeded on system resumption
[  463.384233][T24276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6411'.
[  463.813428][T24297] macvlan0: entered promiscuous mode
[  463.834718][T24297] batadv0: entered promiscuous mode
[  463.850426][T24297] hsr1: entered allmulticast mode
[  463.855558][T24297] macvlan0: entered allmulticast mode
[  463.860983][T24297] veth1_vlan: entered allmulticast mode
[  463.866621][T24297] batadv0: entered allmulticast mode
[  463.896099][T24297] macvlan0: left promiscuous mode
[  463.907668][T24297] batadv0: left promiscuous mode
[  463.954829][T24300] syzkaller0: entered promiscuous mode
[  463.960376][T24300] syzkaller0: entered allmulticast mode
[  464.022611][T24304] siw: device registration error -23
[  464.029864][T24304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6421'.
[  464.260224][T24314] veth1_vlan: left allmulticast mode
[  464.384623][T24306] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  464.394340][T24306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  464.418768][ T4068] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.444836][ T4068] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.472694][ T4068] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.516527][ T4068] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.035310][T24342] FAULT_INJECTION: forcing a failure.
[  465.035310][T24342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.048417][T24342] CPU: 1 UID: 0 PID: 24342 Comm: syz.3.6433 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  465.048466][T24342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  465.048478][T24342] Call Trace:
[  465.048485][T24342]  <TASK>
[  465.048492][T24342]  __dump_stack+0x1d/0x30
[  465.048512][T24342]  dump_stack_lvl+0xe8/0x140
[  465.048529][T24342]  dump_stack+0x15/0x1b
[  465.048544][T24342]  should_fail_ex+0x265/0x280
[  465.048656][T24342]  should_fail+0xb/0x20
[  465.048684][T24342]  should_fail_usercopy+0x1a/0x20
[  465.048703][T24342]  _copy_to_user+0x20/0xa0
[  465.048730][T24342]  simple_read_from_buffer+0xb5/0x130
[  465.048751][T24342]  proc_fail_nth_read+0x10e/0x150
[  465.048780][T24342]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  465.048863][T24342]  vfs_read+0x1a5/0x770
[  465.048962][T24342]  ? __rcu_read_unlock+0x4f/0x70
[  465.048985][T24342]  ? __fget_files+0x184/0x1c0
[  465.049007][T24342]  ? __sys_bind+0x223/0x2a0
[  465.049029][T24342]  ksys_read+0xda/0x1a0
[  465.049052][T24342]  __x64_sys_read+0x40/0x50
[  465.049110][T24342]  x64_sys_call+0x27c0/0x3000
[  465.049189][T24342]  do_syscall_64+0xd2/0x200
[  465.049212][T24342]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  465.049237][T24342]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  465.049258][T24342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.049327][T24342] RIP: 0033:0x7fd42972d8dc
[  465.049381][T24342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  465.049398][T24342] RSP: 002b:00007fd428197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  465.049416][T24342] RAX: ffffffffffffffda RBX: 00007fd429985fa0 RCX: 00007fd42972d8dc
[  465.049427][T24342] RDX: 000000000000000f RSI: 00007fd4281970a0 RDI: 0000000000000006
[  465.049439][T24342] RBP: 00007fd428197090 R08: 0000000000000000 R09: 0000000000000000
[  465.049450][T24342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.049522][T24342] R13: 00007fd429986038 R14: 00007fd429985fa0 R15: 00007ffecbfaabf8
[  465.049540][T24342]  </TASK>
[  465.320921][T24352] syzkaller0: entered promiscuous mode
[  465.326642][T24352] syzkaller0: entered allmulticast mode
[  465.435819][T24356] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.683095][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  465.683115][   T29] audit: type=1400 audit(1760074097.781:24475): avc:  denied  { create } for  pid=24373 comm="syz.3.6441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  465.743067][   T29] audit: type=1400 audit(1760074097.811:24476): avc:  denied  { write } for  pid=24373 comm="syz.3.6441" dev="sockfs" ino=67090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  465.765091][   T29] audit: type=1400 audit(1760074097.811:24477): avc:  denied  { setattr } for  pid=24373 comm="syz.3.6441" name="RAWv6" dev="sockfs" ino=67090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  465.788118][   T29] audit: type=1400 audit(1760074097.811:24478): avc:  denied  { ioctl } for  pid=24373 comm="syz.3.6441" path="socket:[67090]" dev="sockfs" ino=67090 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  465.815067][T24372] bridge0: port 1(batadv0) entered blocking state
[  465.822307][T24372] bridge0: port 1(batadv0) entered disabled state
[  465.839222][T24372] batadv0: entered allmulticast mode
[  465.854497][T24372] batadv0: entered promiscuous mode
[  465.885297][   T29] audit: type=1326 audit(1760074097.941:24479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  465.909123][   T29] audit: type=1326 audit(1760074097.941:24480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  465.932938][   T29] audit: type=1326 audit(1760074097.941:24481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  465.958805][T24380] __nla_validate_parse: 1 callbacks suppressed
[  465.958822][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6444'.
[  466.002135][   T29] audit: type=1326 audit(1760074098.051:24482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  466.025925][   T29] audit: type=1326 audit(1760074098.051:24483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  466.049872][   T29] audit: type=1326 audit(1760074098.051:24484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.3.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd42972eec9 code=0x7ffc0000
[  466.080241][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6446'.
[  466.144478][T24396] macvlan0: entered promiscuous mode
[  466.150967][T24396] macvlan0: left promiscuous mode
[  466.162921][ T4081] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  466.172231][ T4081] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  466.208414][T24404] random: crng reseeded on system resumption
[  466.232385][T24406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6456'.
[  466.313413][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6463'.
[  466.322507][T24421] bridge_slave_1: left allmulticast mode
[  466.328239][T24421] bridge_slave_1: left promiscuous mode
[  466.334026][T24421] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.342436][T24421] bridge_slave_0: left allmulticast mode
[  466.348480][T24421] bridge_slave_0: left promiscuous mode
[  466.351539][T24423] FAULT_INJECTION: forcing a failure.
[  466.351539][T24423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.354497][T24421] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.367183][T24423] CPU: 1 UID: 0 PID: 24423 Comm: syz.1.6464 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  466.367222][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  466.367242][T24423] Call Trace:
[  466.367253][T24423]  <TASK>
[  466.367270][T24423]  __dump_stack+0x1d/0x30
[  466.367361][T24423]  dump_stack_lvl+0xe8/0x140
[  466.367391][T24423]  dump_stack+0x15/0x1b
[  466.367537][T24423]  should_fail_ex+0x265/0x280
[  466.367632][T24423]  should_fail+0xb/0x20
[  466.367675][T24423]  should_fail_usercopy+0x1a/0x20
[  466.367707][T24423]  _copy_from_user+0x1c/0xb0
[  466.367781][T24423]  ___sys_sendmsg+0xc1/0x1d0
[  466.367841][T24423]  __x64_sys_sendmsg+0xd4/0x160
[  466.367890][T24423]  x64_sys_call+0x191e/0x3000
[  466.367994][T24423]  do_syscall_64+0xd2/0x200
[  466.368098][T24423]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  466.368167][T24423]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  466.368198][T24423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.368230][T24423] RIP: 0033:0x7f3553feeec9
[  466.368252][T24423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.368279][T24423] RSP: 002b:00007f3552a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.368324][T24423] RAX: ffffffffffffffda RBX: 00007f3554245fa0 RCX: 00007f3553feeec9
[  466.368342][T24423] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  466.368400][T24423] RBP: 00007f3552a57090 R08: 0000000000000000 R09: 0000000000000000
[  466.368419][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.368437][T24423] R13: 00007f3554246038 R14: 00007f3554245fa0 R15: 00007ffe09cf4fe8
[  466.368465][T24423]  </TASK>
[  466.459727][T24427] SELinux: ebitmap: truncated map
[  466.466003][T24428] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  466.473808][T24427] SELinux: failed to load policy
[  466.511118][T24429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6463'.
[  466.739286][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'.
[  466.813429][T24448] random: crng reseeded on system resumption
[  467.009876][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'.
[  467.046951][T24459] SELinux: ebitmap: truncated map
[  467.055156][T24459] SELinux: failed to load policy
[  467.066901][T24459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6477'.
[  467.096881][T24461] random: crng reseeded on system resumption
[  467.292118][T24435] syz.5.6467 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  467.306525][T24435] CPU: 0 UID: 0 PID: 24435 Comm: syz.5.6467 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  467.306563][T24435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  467.306582][T24435] Call Trace:
[  467.306590][T24435]  <TASK>
[  467.306601][T24435]  __dump_stack+0x1d/0x30
[  467.306688][T24435]  dump_stack_lvl+0xe8/0x140
[  467.306715][T24435]  dump_stack+0x15/0x1b
[  467.306739][T24435]  dump_header+0x81/0x220
[  467.306774][T24435]  oom_kill_process+0x342/0x400
[  467.306931][T24435]  out_of_memory+0x979/0xb80
[  467.306971][T24435]  try_charge_memcg+0x5e6/0x9e0
[  467.307067][T24435]  obj_cgroup_charge_pages+0xa6/0x150
[  467.307118][T24435]  __memcg_kmem_charge_page+0x9f/0x170
[  467.307158][T24435]  __alloc_frozen_pages_noprof+0x188/0x360
[  467.307326][T24435]  alloc_pages_mpol+0xb3/0x260
[  467.307355][T24435]  alloc_pages_noprof+0x90/0x130
[  467.307378][T24435]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  467.307473][T24435]  __kvmalloc_node_noprof+0x483/0x670
[  467.307508][T24435]  ? ip_set_alloc+0x24/0x30
[  467.307565][T24435]  ? ip_set_alloc+0x24/0x30
[  467.307604][T24435]  ip_set_alloc+0x24/0x30
[  467.307645][T24435]  hash_netiface_create+0x282/0x740
[  467.307680][T24435]  ? __pfx_hash_netiface_create+0x10/0x10
[  467.307721][T24435]  ip_set_create+0x3cc/0x970
[  467.307764][T24435]  ? __nla_parse+0x40/0x60
[  467.307835][T24435]  nfnetlink_rcv_msg+0x4c6/0x590
[  467.307885][T24435]  netlink_rcv_skb+0x120/0x220
[  467.307915][T24435]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  467.307958][T24435]  nfnetlink_rcv+0x167/0x16c0
[  467.308042][T24435]  ? xfd_validate_state+0x45/0xf0
[  467.308119][T24435]  ? css_rstat_updated+0xb7/0x240
[  467.308315][T24435]  ? page_counter_charge+0x207/0x230
[  467.308350][T24435]  ? __rcu_read_unlock+0x4f/0x70
[  467.308438][T24435]  ? obj_cgroup_charge_pages+0xf7/0x150
[  467.308480][T24435]  ? __rcu_read_unlock+0x4f/0x70
[  467.308556][T24435]  ? __memcg_kmem_charge_page+0xd1/0x170
[  467.308629][T24435]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  467.308685][T24435]  ? mas_next_slot+0x69b/0x6f0
[  467.308723][T24435]  ? __rcu_read_unlock+0x4f/0x70
[  467.308748][T24435]  ? should_fail_ex+0x30/0x280
[  467.308829][T24435]  ? selinux_nlmsg_lookup+0x99/0x890
[  467.308864][T24435]  ? __rcu_read_unlock+0x34/0x70
[  467.308931][T24435]  ? __netlink_lookup+0x266/0x2a0
[  467.308971][T24435]  netlink_unicast+0x5c0/0x690
[  467.309008][T24435]  netlink_sendmsg+0x58b/0x6b0
[  467.309067][T24435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  467.309198][T24435]  __sock_sendmsg+0x142/0x180
[  467.309220][T24435]  ____sys_sendmsg+0x31e/0x4e0
[  467.309264][T24435]  ___sys_sendmsg+0x17b/0x1d0
[  467.309362][T24435]  __x64_sys_sendmsg+0xd4/0x160
[  467.309404][T24435]  x64_sys_call+0x191e/0x3000
[  467.309428][T24435]  do_syscall_64+0xd2/0x200
[  467.309460][T24435]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  467.309524][T24435]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  467.309547][T24435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.309570][T24435] RIP: 0033:0x7f9481d1eec9
[  467.309652][T24435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.309680][T24435] RSP: 002b:00007f948077f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  467.309700][T24435] RAX: ffffffffffffffda RBX: 00007f9481f75fa0 RCX: 00007f9481d1eec9
[  467.309713][T24435] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  467.309734][T24435] RBP: 00007f9481da1f91 R08: 0000000000000000 R09: 0000000000000000
[  467.309746][T24435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  467.309758][T24435] R13: 00007f9481f76038 R14: 00007f9481f75fa0 R15: 00007fffafeb3cc8
[  467.309842][T24435]  </TASK>
[  467.309874][T24435] memory: usage 307200kB, limit 307200kB, failcnt 297
[  467.675344][T24435] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  467.683281][T24435] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  467.690595][T24435] Memory cgroup stats for /syz5:
[  467.691192][T24435] cache 0
[  467.699236][T24435] rss 8192
[  467.702277][T24435] shmem 0
[  467.705319][T24435] mapped_file 0
[  467.708800][T24435] dirty 0
[  467.711744][T24435] writeback 0
[  467.715120][T24435] workingset_refault_anon 114
[  467.719895][T24435] workingset_refault_file 0
[  467.724568][T24435] swap 184320
[  467.727940][T24435] swapcached 16384
[  467.731678][T24435] pgpgin 97124
[  467.735162][T24435] pgpgout 97120
[  467.738659][T24435] pgfault 119301
[  467.742363][T24435] pgmajfault 52
[  467.745979][T24435] inactive_anon 8192
[  467.749885][T24435] active_anon 8192
[  467.753930][T24435] inactive_file 0
[  467.757593][T24435] active_file 0
[  467.761152][T24435] unevictable 0
[  467.764701][T24435] hierarchical_memory_limit 314572800
[  467.770181][T24435] hierarchical_memsw_limit 9223372036854771712
[  467.771710][T24475] random: crng reseeded on system resumption
[  467.776392][T24435] total_cache 0
[  467.776404][T24435] total_rss 8192
[  467.776415][T24435] total_shmem 0
[  467.776425][T24435] total_mapped_file 0
[  467.776434][T24435] total_dirty 0
[  467.776444][T24435] total_writeback 0
[  467.776454][T24435] total_workingset_refault_anon 114
[  467.776479][T24435] total_workingset_refault_file 0
[  467.776489][T24435] total_swap 184320
[  467.776498][T24435] total_swapcached 16384
[  467.776508][T24435] total_pgpgin 97124
[  467.776517][T24435] total_pgpgout 97120
[  467.776527][T24435] total_pgfault 119301
[  467.834793][T24435] total_pgmajfault 52
[  467.838783][T24435] total_inactive_anon 8192
[  467.843247][T24435] total_active_anon 8192
[  467.847504][T24435] total_inactive_file 0
[  467.851758][T24435] total_active_file 0
[  467.855824][T24435] total_unevictable 0
[  467.859824][T24435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6467,pid=24434,uid=0
[  467.874557][T24435] Memory cgroup out of memory: Killed process 24434 (syz.5.6467) total-vm:93956kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  468.039363][T24473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.056668][T24480] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  468.115865][T24473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.158141][T24436] Can't find ip_set type hash:net,n
[  468.168214][T24473] veth1_vlan: left allmulticast mode
[  468.217834][T24476] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  468.227708][T24476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  468.244976][ T4071] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.262183][ T4071] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.301068][ T4071] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.315637][ T4071] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.373679][T24502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6494'.
[  468.423261][T24501] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  468.497281][T24514] siw: device registration error -23
[  468.686348][T24518] bridge0: port 2(batadv2) entered blocking state
[  468.694179][T24518] bridge0: port 2(batadv2) entered disabled state
[  468.712170][T24522] siw: device registration error -23
[  468.718356][T24518] batadv2: entered allmulticast mode
[  468.725534][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'.
[  468.743687][T24518] batadv2: entered promiscuous mode
[  469.184789][   T57] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  469.194205][   T57] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  469.393992][T24594] syzkaller0: entered promiscuous mode
[  469.399534][T24594] syzkaller0: entered allmulticast mode
[  469.771595][T24612] siw: device registration error -23
[  469.830149][T24618] random: crng reseeded on system resumption
[  469.932088][T24623] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  469.941911][T24623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.136919][T24632] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  470.149816][T24632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.163635][T24632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.335324][T24636] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  470.427352][T24648] SELinux: ebitmap: truncated map
[  470.447720][T24648] SELinux: failed to load policy
[  470.659716][T24656] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  470.669381][T24656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.291837][T24666] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.441020][   T29] kauditd_printk_skb: 572 callbacks suppressed
[  471.441036][   T29] audit: type=1400 audit(1760074103.531:25057): avc:  denied  { create } for  pid=24668 comm="syz.5.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  471.547641][   T29] audit: type=1400 audit(1760074103.591:25058): avc:  denied  { bind } for  pid=24668 comm="syz.5.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  471.567835][   T29] audit: type=1400 audit(1760074103.591:25059): avc:  denied  { write } for  pid=24668 comm="syz.5.6534" path="socket:[67540]" dev="sockfs" ino=67540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  471.732941][   T29] audit: type=1400 audit(1760074103.741:25060): avc:  denied  { sys_module } for  pid=24670 comm="syz.2.6535" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  471.770151][T24680] __nla_validate_parse: 4 callbacks suppressed
[  471.770173][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6535'.
[  471.855762][   T29] audit: type=1326 audit(1760074103.951:25061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  471.940416][T24691] syzkaller0: entered promiscuous mode
[  471.946017][T24691] syzkaller0: entered allmulticast mode
[  471.989571][   T29] audit: type=1326 audit(1760074103.981:25062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  472.013313][   T29] audit: type=1326 audit(1760074103.981:25063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  472.037016][   T29] audit: type=1326 audit(1760074103.981:25064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  472.060918][   T29] audit: type=1326 audit(1760074103.981:25065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  472.084706][   T29] audit: type=1326 audit(1760074103.981:25066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz.2.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f6eec9 code=0x7ffc0000
[  472.112003][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6540'.
[  472.161946][T24686] bridge0: port 2(batadv1) entered blocking state
[  472.170315][T24686] bridge0: port 2(batadv1) entered disabled state
[  472.194441][T24686] batadv1: entered allmulticast mode
[  472.242425][T24686] batadv1: entered promiscuous mode
[  472.366116][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6545'.
[  472.483102][T24582] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  472.492375][T24582] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  472.591674][T24726] FAULT_INJECTION: forcing a failure.
[  472.591674][T24726] name failslab, interval 1, probability 0, space 0, times 0
[  472.604426][T24726] CPU: 1 UID: 0 PID: 24726 Comm: syz.3.6551 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  472.604495][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  472.604510][T24726] Call Trace:
[  472.604519][T24726]  <TASK>
[  472.604530][T24726]  __dump_stack+0x1d/0x30
[  472.604557][T24726]  dump_stack_lvl+0xe8/0x140
[  472.604581][T24726]  dump_stack+0x15/0x1b
[  472.604670][T24726]  should_fail_ex+0x265/0x280
[  472.604715][T24726]  should_failslab+0x8c/0xb0
[  472.604744][T24726]  __kvmalloc_node_noprof+0x12e/0x670
[  472.604829][T24726]  ? alloc_netdev_mqs+0xa5/0xa50
[  472.604861][T24726]  ? __pfx_sl_setup+0x10/0x10
[  472.604896][T24726]  alloc_netdev_mqs+0xa5/0xa50
[  472.604998][T24726]  slip_open+0x2d1/0x920
[  472.605061][T24726]  ? vfree+0x295/0x3a0
[  472.605131][T24726]  ? up_write+0x18/0x60
[  472.605171][T24726]  tty_ldisc_open+0x5a/0xb0
[  472.605253][T24726]  tty_set_ldisc+0x1db/0x380
[  472.605277][T24726]  tiocsetd+0x51/0x60
[  472.605306][T24726]  tty_ioctl+0xa79/0xb80
[  472.605401][T24726]  ? __pfx_tty_ioctl+0x10/0x10
[  472.605427][T24726]  __se_sys_ioctl+0xce/0x140
[  472.605453][T24726]  __x64_sys_ioctl+0x43/0x50
[  472.605520][T24726]  x64_sys_call+0x1816/0x3000
[  472.605596][T24726]  do_syscall_64+0xd2/0x200
[  472.605624][T24726]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  472.605715][T24726]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  472.605742][T24726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.605769][T24726] RIP: 0033:0x7fd42972eec9
[  472.605785][T24726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.605803][T24726] RSP: 002b:00007fd428197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  472.605924][T24726] RAX: ffffffffffffffda RBX: 00007fd429985fa0 RCX: 00007fd42972eec9
[  472.605941][T24726] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000003
[  472.605956][T24726] RBP: 00007fd428197090 R08: 0000000000000000 R09: 0000000000000000
[  472.605972][T24726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.605986][T24726] R13: 00007fd429986038 R14: 00007fd429985fa0 R15: 00007ffecbfaabf8
[  472.606006][T24726]  </TASK>
[  472.880584][T24732] random: crng reseeded on system resumption
[  472.930569][T24737] macvlan0: entered promiscuous mode
[  472.943516][T24737] batadv0: entered promiscuous mode
[  472.949637][T24737] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  472.959828][T24737] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  472.995498][T24737] hsr1: entered allmulticast mode
[  473.000599][T24737] batadv0: entered allmulticast mode
[  473.017110][T24737] macvlan0: left promiscuous mode
[  473.022730][T24737] batadv0: left promiscuous mode
[  473.184859][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6556'.
[  473.439245][T24728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'.
[  474.859995][T24769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6566'.
[  474.869156][T24769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6566'.
[  474.922895][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  475.039041][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6567'.
[  475.060772][T24784] syzkaller0: entered promiscuous mode
[  475.066401][T24784] syzkaller0: entered allmulticast mode
[  475.667201][T24782] syz.5.6570 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  475.681405][T24782] CPU: 1 UID: 0 PID: 24782 Comm: syz.5.6570 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  475.681433][T24782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  475.681446][T24782] Call Trace:
[  475.681513][T24782]  <TASK>
[  475.681521][T24782]  __dump_stack+0x1d/0x30
[  475.681543][T24782]  dump_stack_lvl+0xe8/0x140
[  475.681562][T24782]  dump_stack+0x15/0x1b
[  475.681579][T24782]  dump_header+0x81/0x220
[  475.681686][T24782]  oom_kill_process+0x342/0x400
[  475.681717][T24782]  out_of_memory+0x979/0xb80
[  475.681755][T24782]  try_charge_memcg+0x5e6/0x9e0
[  475.681853][T24782]  obj_cgroup_charge_pages+0xa6/0x150
[  475.681910][T24782]  __memcg_kmem_charge_page+0x9f/0x170
[  475.681997][T24782]  __alloc_frozen_pages_noprof+0x188/0x360
[  475.682113][T24782]  alloc_pages_mpol+0xb3/0x260
[  475.682141][T24782]  alloc_pages_noprof+0x90/0x130
[  475.682172][T24782]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  475.682224][T24782]  __kvmalloc_node_noprof+0x483/0x670
[  475.682350][T24782]  ? ip_set_alloc+0x24/0x30
[  475.682383][T24782]  ? ip_set_alloc+0x24/0x30
[  475.682487][T24782]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  475.682522][T24782]  ip_set_alloc+0x24/0x30
[  475.682550][T24782]  hash_netiface_create+0x282/0x740
[  475.682581][T24782]  ? __pfx_hash_netiface_create+0x10/0x10
[  475.682618][T24782]  ip_set_create+0x3cc/0x970
[  475.682672][T24782]  ? __nla_parse+0x40/0x60
[  475.682698][T24782]  nfnetlink_rcv_msg+0x4c6/0x590
[  475.682819][T24782]  netlink_rcv_skb+0x120/0x220
[  475.682853][T24782]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  475.682890][T24782]  nfnetlink_rcv+0x167/0x16c0
[  475.682999][T24782]  ? tty_termios_baud_rate+0x8f/0xb0
[  475.683035][T24782]  ? css_rstat_updated+0xb7/0x240
[  475.683071][T24782]  ? page_counter_charge+0x207/0x230
[  475.683167][T24782]  ? __rcu_read_unlock+0x4f/0x70
[  475.683197][T24782]  ? obj_cgroup_charge_pages+0xf7/0x150
[  475.683239][T24782]  ? __rcu_read_unlock+0x4f/0x70
[  475.683327][T24782]  ? __memcg_kmem_charge_page+0xd1/0x170
[  475.683366][T24782]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  475.683492][T24782]  ? mas_next_slot+0x69b/0x6f0
[  475.683522][T24782]  ? __rcu_read_unlock+0x4f/0x70
[  475.683583][T24782]  ? should_fail_ex+0x30/0x280
[  475.683624][T24782]  ? selinux_nlmsg_lookup+0x99/0x890
[  475.683648][T24782]  ? __rcu_read_unlock+0x34/0x70
[  475.683671][T24782]  ? __netlink_lookup+0x266/0x2a0
[  475.683710][T24782]  netlink_unicast+0x5c0/0x690
[  475.683785][T24782]  netlink_sendmsg+0x58b/0x6b0
[  475.683820][T24782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.683849][T24782]  __sock_sendmsg+0x142/0x180
[  475.683887][T24782]  ____sys_sendmsg+0x31e/0x4e0
[  475.683927][T24782]  ___sys_sendmsg+0x17b/0x1d0
[  475.683979][T24782]  __x64_sys_sendmsg+0xd4/0x160
[  475.684129][T24782]  x64_sys_call+0x191e/0x3000
[  475.684154][T24782]  do_syscall_64+0xd2/0x200
[  475.684182][T24782]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  475.684278][T24782]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  475.684301][T24782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.684322][T24782] RIP: 0033:0x7f9481d1eec9
[  475.684342][T24782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.684363][T24782] RSP: 002b:00007f948077f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  475.684382][T24782] RAX: ffffffffffffffda RBX: 00007f9481f75fa0 RCX: 00007f9481d1eec9
[  475.684465][T24782] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  475.684480][T24782] RBP: 00007f9481da1f91 R08: 0000000000000000 R09: 0000000000000000
[  475.684493][T24782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.684507][T24782] R13: 00007f9481f76038 R14: 00007f9481f75fa0 R15: 00007fffafeb3cc8
[  475.684533][T24782]  </TASK>
[  476.047150][T24782] memory: usage 307200kB, limit 307200kB, failcnt 587
[  476.053983][T24782] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[  476.061942][T24782] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  476.069335][T24782] Memory cgroup stats for /syz5:
[  476.076303][T24782] cache 0
[  476.084300][T24782] rss 4096
[  476.087396][T24782] shmem 0
[  476.090346][T24782] mapped_file 0
[  476.093891][T24782] dirty 0
[  476.096852][T24782] writeback 0
[  476.100164][T24782] workingset_refault_anon 168
[  476.104966][T24782] workingset_refault_file 0
[  476.109486][T24782] swap 196608
[  476.112775][T24782] swapcached 4096
[  476.116508][T24782] pgpgin 102453
[  476.119983][T24782] pgpgout 102452
[  476.123689][T24782] pgfault 126968
[  476.127240][T24782] pgmajfault 85
[  476.130743][T24782] inactive_anon 0
[  476.134517][T24782] active_anon 0
[  476.137990][T24782] inactive_file 0
[  476.141694][T24782] active_file 0
[  476.145295][T24782] unevictable 0
[  476.148767][T24782] hierarchical_memory_limit 314572800
[  476.154162][T24782] hierarchical_memsw_limit 9223372036854771712
[  476.160479][T24782] total_cache 0
[  476.163984][T24782] total_rss 4096
[  476.167544][T24782] total_shmem 0
[  476.171083][T24782] total_mapped_file 0
[  476.175178][T24782] total_dirty 0
[  476.178654][T24782] total_writeback 0
[  476.182470][T24782] total_workingset_refault_anon 168
[  476.187715][T24782] total_workingset_refault_file 0
[  476.192766][T24782] total_swap 196608
[  476.196638][T24782] total_swapcached 4096
[  476.200815][T24782] total_pgpgin 102453
[  476.204863][T24782] total_pgpgout 102452
[  476.209009][T24782] total_pgfault 126968
[  476.213108][T24782] total_pgmajfault 85
[  476.217107][T24782] total_inactive_anon 0
[  476.221427][T24782] total_active_anon 0
[  476.225466][T24782] total_inactive_file 0
[  476.229639][T24782] total_active_file 0
[  476.233658][T24782] total_unevictable 0
[  476.237745][T24782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6570,pid=24781,uid=0
[  476.252604][T24782] Memory cgroup out of memory: Killed process 24781 (syz.5.6570) total-vm:93956kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  476.495488][T24810] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  476.497368][T24816] random: crng reseeded on system resumption
[  476.506814][   T29] kauditd_printk_skb: 267 callbacks suppressed
[  476.506831][   T29] audit: type=1400 audit(1760074108.591:25334): avc:  denied  { write } for  pid=24815 comm="syz.5.6581" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  476.542294][   T29] audit: type=1400 audit(1760074108.591:25335): avc:  denied  { open } for  pid=24815 comm="syz.5.6581" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  477.285804][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6586'.
[  477.479147][T24844] audit: audit_backlog=65 > audit_backlog_limit=64
[  477.485904][T24844] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  477.493597][T24844] audit: backlog limit exceeded
[  477.502499][T24844] audit: audit_backlog=65 > audit_backlog_limit=64
[  477.509184][T24844] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[  477.516908][T24844] audit: backlog limit exceeded
[  477.518358][   T29] audit: type=1400 audit(1760074108.681:25336): avc:  denied  { read } for  pid=24820 comm="syz.2.6584" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  477.544938][   T29] audit: type=1400 audit(1760074108.681:25337): avc:  denied  { open } for  pid=24820 comm="syz.2.6584" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  478.299970][T24857] bridge0: port 3(batadv2) entered blocking state
[  478.307593][T24857] bridge0: port 3(batadv2) entered disabled state
[  478.325255][T24857] batadv2: entered allmulticast mode
[  478.340544][T24857] batadv2: entered promiscuous mode
[  478.357119][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6593'.
[  478.732923][T24580] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  478.742202][T24580] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  478.821502][T24580] Bluetooth: hci0: Frame reassembly failed (-84)
[  478.895829][T24884] random: crng reseeded on system resumption
[  478.948642][T24897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6602'.
[  479.009556][T24886] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  479.019268][T24886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.213041][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'.
[  479.284898][T24906] SELinux: ebitmap: truncated map
[  479.302293][T24906] SELinux: failed to load policy
[  479.320521][T24906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6609'.
[  479.405653][T24912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6610'.
[  479.499238][T24909] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  479.508966][T24909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.736748][T24920] random: crng reseeded on system resumption
[  479.752067][T24900] syz.3.6608 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  479.766358][T24900] CPU: 1 UID: 0 PID: 24900 Comm: syz.3.6608 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  479.766393][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  479.766410][T24900] Call Trace:
[  479.766419][T24900]  <TASK>
[  479.766429][T24900]  __dump_stack+0x1d/0x30
[  479.766524][T24900]  dump_stack_lvl+0xe8/0x140
[  479.766547][T24900]  dump_stack+0x15/0x1b
[  479.766565][T24900]  dump_header+0x81/0x220
[  479.766663][T24900]  oom_kill_process+0x342/0x400
[  479.766701][T24900]  out_of_memory+0x979/0xb80
[  479.766751][T24900]  try_charge_memcg+0x5e6/0x9e0
[  479.766821][T24900]  obj_cgroup_charge_pages+0xa6/0x150
[  479.766858][T24900]  __memcg_kmem_charge_page+0x9f/0x170
[  479.766899][T24900]  __alloc_frozen_pages_noprof+0x188/0x360
[  479.766987][T24900]  alloc_pages_mpol+0xb3/0x260
[  479.767006][T24900]  ? alloc_pages_noprof+0xf4/0x130
[  479.767027][T24900]  alloc_pages_noprof+0x90/0x130
[  479.767048][T24900]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  479.767131][T24900]  __kvmalloc_node_noprof+0x483/0x670
[  479.767174][T24900]  ? ip_set_alloc+0x24/0x30
[  479.767209][T24900]  ? ip_set_alloc+0x24/0x30
[  479.767248][T24900]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  479.767285][T24900]  ip_set_alloc+0x24/0x30
[  479.767411][T24900]  hash_netiface_create+0x282/0x740
[  479.767449][T24900]  ? __pfx_hash_netiface_create+0x10/0x10
[  479.767489][T24900]  ip_set_create+0x3cc/0x970
[  479.767618][T24900]  ? __nla_parse+0x40/0x60
[  479.767708][T24900]  nfnetlink_rcv_msg+0x4c6/0x590
[  479.767739][T24900]  ? ida_alloc_range+0x63e/0x6c0
[  479.767862][T24900]  netlink_rcv_skb+0x120/0x220
[  479.767896][T24900]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  479.768007][T24900]  nfnetlink_rcv+0x167/0x16c0
[  479.768099][T24900]  ? perf_trace_buf_update+0xb4/0xe0
[  479.768121][T24900]  ? __rcu_read_unlock+0x34/0x70
[  479.768169][T24900]  ? perf_tp_event+0x9b3/0x9f0
[  479.768196][T24900]  ? page_counter_charge+0x207/0x230
[  479.768230][T24900]  ? __rcu_read_unlock+0x4f/0x70
[  479.768269][T24900]  ? __rcu_read_unlock+0x4f/0x70
[  479.768360][T24900]  ? should_fail_ex+0x30/0x280
[  479.768406][T24900]  ? selinux_nlmsg_lookup+0x99/0x890
[  479.768434][T24900]  ? __rcu_read_unlock+0x34/0x70
[  479.768509][T24900]  ? __netlink_lookup+0x266/0x2a0
[  479.768577][T24900]  netlink_unicast+0x5c0/0x690
[  479.768613][T24900]  netlink_sendmsg+0x58b/0x6b0
[  479.768646][T24900]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.768729][T24900]  __sock_sendmsg+0x142/0x180
[  479.768756][T24900]  ____sys_sendmsg+0x31e/0x4e0
[  479.768902][T24900]  ___sys_sendmsg+0x17b/0x1d0
[  479.768945][T24900]  __x64_sys_sendmsg+0xd4/0x160
[  479.768986][T24900]  x64_sys_call+0x191e/0x3000
[  479.769020][T24900]  do_syscall_64+0xd2/0x200
[  479.769053][T24900]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  479.769093][T24900]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  479.769166][T24900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.769217][T24900] RIP: 0033:0x7fd42972eec9
[  479.769247][T24900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.769273][T24900] RSP: 002b:00007fd428197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.769299][T24900] RAX: ffffffffffffffda RBX: 00007fd429985fa0 RCX: 00007fd42972eec9
[  479.769313][T24900] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  479.769326][T24900] RBP: 00007fd4297b1f91 R08: 0000000000000000 R09: 0000000000000000
[  479.769341][T24900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.769383][T24900] R13: 00007fd429986038 R14: 00007fd429985fa0 R15: 00007ffecbfaabf8
[  479.769409][T24900]  </TASK>
[  479.769416][T24900] memory: usage 307200kB, limit 307200kB, failcnt 2952
[  480.128072][T24900] memory+swap: usage 307612kB, limit 9007199254740988kB, failcnt 0
[  480.136114][T24900] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  480.143457][T24900] Memory cgroup stats for /syz3:
[  480.143860][T24900] cache 0
[  480.152283][T24900] rss 0
[  480.155095][T24900] shmem 0
[  480.158042][T24900] mapped_file 0
[  480.161511][T24900] dirty 0
[  480.164567][T24900] writeback 0
[  480.167862][T24900] workingset_refault_anon 495
[  480.172545][T24900] workingset_refault_file 6606
[  480.177345][T24900] swap 421888
[  480.180642][T24900] swapcached 8192
[  480.184399][T24900] pgpgin 642871
[  480.187904][T24900] pgpgout 642861
[  480.191505][T24900] pgfault 692546
[  480.195089][T24900] pgmajfault 289
[  480.198635][T24900] inactive_anon 0
[  480.202280][T24900] active_anon 8192
[  480.206057][T24900] inactive_file 0
[  480.209767][T24900] active_file 32768
[  480.213678][T24900] unevictable 0
[  480.217234][T24900] hierarchical_memory_limit 314572800
[  480.222618][T24900] hierarchical_memsw_limit 9223372036854771712
[  480.228885][T24900] total_cache 0
[  480.232386][T24900] total_rss 0
[  480.235745][T24900] total_shmem 0
[  480.239211][T24900] total_mapped_file 0
[  480.243232][T24900] total_dirty 0
[  480.246782][T24900] total_writeback 0
[  480.250668][T24900] total_workingset_refault_anon 495
[  480.255899][T24900] total_workingset_refault_file 6606
[  480.261195][T24900] total_swap 421888
[  480.265069][T24900] total_swapcached 8192
[  480.269235][T24900] total_pgpgin 642871
[  480.273249][T24900] total_pgpgout 642861
[  480.277389][T24900] total_pgfault 692546
[  480.281462][T24900] total_pgmajfault 289
[  480.285649][T24900] total_inactive_anon 0
[  480.289819][T24900] total_active_anon 8192
[  480.294156][T24900] total_inactive_file 0
[  480.298325][T24900] total_active_file 32768
[  480.302670][T24900] total_unevictable 0
[  480.306687][T24900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6608,pid=24899,uid=0
[  480.321506][T24900] Memory cgroup out of memory: Killed process 24899 (syz.3.6608) total-vm:96136kB, anon-rss:1132kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  480.374708][T24929] siw: device registration error -23
[  480.381800][T24929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6617'.
[  480.490734][T24937] random: crng reseeded on system resumption
[  480.709484][T24943] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  480.745402][T24948] random: crng reseeded on system resumption
[  480.784508][T24949] siw: device registration error -23
[  480.804242][T24949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6625'.
[  480.842982][ T3672] Bluetooth: hci0: command 0x1003 tx timeout
[  480.843291][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  481.233773][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6634'.
[  481.383787][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6628'.
[  481.434586][T24955] bridge0: port 3(batadv3) entered blocking state
[  481.442745][T24955] bridge0: port 3(batadv3) entered disabled state
[  481.484335][T24955] batadv3: entered allmulticast mode
[  481.528380][T24955] batadv3: entered promiscuous mode
[  481.545710][   T29] kauditd_printk_skb: 443 callbacks suppressed
[  481.545727][   T29] audit: type=1326 audit(1760074113.641:25781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.575570][   T29] audit: type=1326 audit(1760074113.641:25782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.717756][   T29] audit: type=1326 audit(1760074113.641:25783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.741591][   T29] audit: type=1326 audit(1760074113.641:25784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.765457][   T29] audit: type=1326 audit(1760074113.641:25785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.789097][   T29] audit: type=1326 audit(1760074113.691:25786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.813026][   T29] audit: type=1326 audit(1760074113.691:25787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  481.836768][T24580] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  481.836873][   T29] ==================================================================
[  481.846088][T24580] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  481.854081][   T29] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  481.870100][   T29] 
[  481.872445][   T29] write to 0xffffffff86870c98 of 8 bytes by task 24580 on cpu 1:
[  481.880179][   T29]  data_alloc+0x274/0x2e0
[  481.884549][   T29]  prb_reserve+0x807/0xaf0
[  481.888994][   T29]  vprintk_store+0x56d/0x860
[  481.893613][   T29]  vprintk_emit+0x10d/0x580
[  481.898136][   T29]  vprintk_default+0x26/0x30
[  481.902747][   T29]  vprintk+0x1d/0x30
[  481.906667][   T29]  _printk+0x79/0xa0
[  481.910584][   T29]  batadv_mcast_mla_update+0x1761/0x1830
[  481.915230][T24990] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  481.916239][   T29]  process_scheduled_works+0x4cb/0x9d0
[  481.932815][   T29]  worker_thread+0x582/0x770
[  481.937432][   T29]  kthread+0x486/0x510
[  481.941535][   T29]  ret_from_fork+0x122/0x1b0
[  481.946146][   T29]  ret_from_fork_asm+0x1a/0x30
[  481.950932][   T29] 
[  481.953273][   T29] read to 0xffffffff86870c98 of 16 bytes by task 29 on cpu 0:
[  481.960747][   T29]  _prb_read_valid+0x1bc/0x920
[  481.965536][   T29]  prb_read_valid+0x3c/0x60
[  481.970057][   T29]  console_unlock+0x164/0x2e0
[  481.974756][   T29]  vprintk_emit+0x3b5/0x580
[  481.979284][   T29]  vprintk_default+0x26/0x30
[  481.983898][   T29]  vprintk+0x1d/0x30
[  481.987824][   T29]  _printk+0x79/0xa0
[  481.991760][   T29]  kauditd_hold_skb+0x1b1/0x1c0
[  481.996635][   T29]  kauditd_send_queue+0x273/0x2c0
[  482.001687][   T29]  kauditd_thread+0x421/0x630
[  482.006392][   T29]  kthread+0x486/0x510
[  482.010494][   T29]  ret_from_fork+0x122/0x1b0
[  482.015110][   T29]  ret_from_fork_asm+0x1a/0x30
[  482.019915][   T29] 
[  482.022261][   T29] Reported by Kernel Concurrency Sanitizer on:
[  482.028422][   T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  482.037733][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  482.047816][   T29] ==================================================================
[  482.056014][   T29] audit: type=1326 audit(1760074113.691:25788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  482.079769][   T29] audit: type=1326 audit(1760074113.691:25789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000
[  482.103388][   T29] audit: type=1326 audit(1760074113.691:25790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.5.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9481d1eec9 code=0x7ffc0000