last executing test programs:

30.481799342s ago: executing program 4 (id=127):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x200000a, &(0x7f0000001080)=ANY=[], 0xfc, 0x2b5, &(0x7f0000000480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_misc(r4, &(0x7f0000000400)="21a0249f68", 0x5)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
memfd_secret(0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$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")
listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f00000007c0)="5cfc62b9aaa70b0fbbdfd173ded9451e66f07e5c820ce4dc6c8f657cc6b9538166dc90a0927a0003080ed4218c6a40e68c886668824a397f6d2377865abf45d00b69996eb4421a575c490699a39e83d45ca91e5c690e469092b42c336f1db94c9e8e18f3c25ab9fd21c03d589ff88ff0b542906bc67a92016a6a0690f040d8530d97daf16942837cc6277eb1b30fda8fe0cf3ef240181b88df6b0567312b016dad9d214d1b8ccb2ecd2f15853c894a918b45f53e7786e88d7f13ef98f68af361c6a5160f9ab49c9b0dcda5e7622230d012b01b1b", &(0x7f00000008c0)=""/255}, 0x20)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x44, 0x140f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000)

30.356349272s ago: executing program 4 (id=130):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r0}}}]}}]}, 0x60}}, 0x4044840)

30.269479961s ago: executing program 4 (id=131):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94)
socket$packet(0x11, 0x2, 0x300)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000030c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r8 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0xe, 0xb, 0x8}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)

29.437292809s ago: executing program 4 (id=145):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x2041c3, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="458e41598c10c8b6bc82d3ec9c8f966aea38fe0d8dfaeb2003394c41fa40363689199af02a353fe8120b117c04e41988a2b0b3486bdc0d552aea49d2f5c3be77750c40f85d9a10897458e3c4f310d9568bb100f57df81df8209a3ef8647a512d873653f5cf88fe90352b2d6e7520fc5ae3d0156a", @ANYRES8, @ANYRES16=r1, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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")
accept4(r1, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x0, 0x800)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
ioctl$BLKTRACESETUP(r6, 0x1276, 0x0)

29.292552759s ago: executing program 4 (id=147):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
unshare(0x2040400)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_COOKIE(r3, 0x1, 0x47, 0x0, &(0x7f0000000080))
listen(r0, 0x20000005)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

29.074411968s ago: executing program 4 (id=153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000780)={0x2d, 0x67, 0x2, {0x4, 0x3, 0x4}}, 0x14)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x50440, 0x0)
r2 = io_uring_setup(0x48d, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f00000003c0)="354f17b7ada962f1a87716ff1228101812f126e1bd6f7d897897efe41b5f5f", &(0x7f00000005c0)=""/137}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000001008d00000000000000000018110353de3ec30019e06e6c17ae06618c540000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095097dba330f4b361c6085bff42047d44515ca463997c39b6e00dc84ffae21786ee1f2c3f54fcc920d092464936cc82004d6837f6e5e50654d3e4409a3914042b88b96eb8dd49a9777a39108daaa6a5391d51b2dcc55c9ada3f2c8879908a45a5e03c878a55aee5e157633384e62d08b9580a4a92c6a9f9291b75efab7ea6fdb50c95b04c65d25828d0517499415ad3aef3f98e96814516ecdd1d3bbf64e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fb0cf50080060005004e2300000800f4fc4b2339943476b990ab7be8f22ebe0d6eac29e9823d1cbff5d2030005000000050005000c005c2b347a722f1c00000500edbddbb58c313bda227ceefbe05c465ab512e59e9aef7b3e7f73be1ed791ccbfbee5c79b64972f45b73af8678d4769d4dacbf30bf506403dc00332051ad4726df9109e707e9904eac0f92e869e7de1dc67f9dca0b267021a632251df92666df58dd7d609c04b5e37d05b88bda38ab7163f04b39d3b3fa993c6cb4cec1181091461b6cca4edc89aa2bb8e02dfc16f9f26822cc7f31b649f290d9c767f4ddc81b639a65f10"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008000)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

29.074159208s ago: executing program 32 (id=153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000780)={0x2d, 0x67, 0x2, {0x4, 0x3, 0x4}}, 0x14)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x50440, 0x0)
r2 = io_uring_setup(0x48d, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f00000003c0)="354f17b7ada962f1a87716ff1228101812f126e1bd6f7d897897efe41b5f5f", &(0x7f00000005c0)=""/137}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000001008d00000000000000000018110353de3ec30019e06e6c17ae06618c540000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095097dba330f4b361c6085bff42047d44515ca463997c39b6e00dc84ffae21786ee1f2c3f54fcc920d092464936cc82004d6837f6e5e50654d3e4409a3914042b88b96eb8dd49a9777a39108daaa6a5391d51b2dcc55c9ada3f2c8879908a45a5e03c878a55aee5e157633384e62d08b9580a4a92c6a9f9291b75efab7ea6fdb50c95b04c65d25828d0517499415ad3aef3f98e96814516ecdd1d3bbf64e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fb0cf50080060005004e2300000800f4fc4b2339943476b990ab7be8f22ebe0d6eac29e9823d1cbff5d2030005000000050005000c005c2b347a722f1c00000500edbddbb58c313bda227ceefbe05c465ab512e59e9aef7b3e7f73be1ed791ccbfbee5c79b64972f45b73af8678d4769d4dacbf30bf506403dc00332051ad4726df9109e707e9904eac0f92e869e7de1dc67f9dca0b267021a632251df92666df58dd7d609c04b5e37d05b88bda38ab7163f04b39d3b3fa993c6cb4cec1181091461b6cca4edc89aa2bb8e02dfc16f9f26822cc7f31b649f290d9c767f4ddc81b639a65f10"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008000)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

27.000873473s ago: executing program 0 (id=175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x20001}, 0x18)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x7, 0x804, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0)

26.874496212s ago: executing program 0 (id=176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="071200020400000018006be842a00100100000fff0707951e3e8cd8390a52152368f064f821d1016bd947c790c757f79cf90db48130f6f5021c5af0815a35344f963395cf82ada642f538e50f20b3e2975db1b5f6e9abac0e345f11da14186619b2e894e2f1d0ca41a41b9b5784a691ec2b869a08c5769bc2128665425994236e3d79ea6237a7b678b1a2cc475645e44a8f0d2a1ac49e00f24417904ca8324855d3e5c7c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}, {r4, 0x400}], 0x2, 0x483a4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})

26.03652449s ago: executing program 0 (id=192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x7) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x200000000200}, 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x970}}}}, {{@ip={@loopback, @dev, 0x0, 0xffffff00, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff], @ipv4=@broadcast, [0x0, 0x35be66baa0a3113a, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff00007f, 0xffffff00, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 0x9377, 0x317, 0x3a, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x2000, 0x100}, 0x1, 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async, rerun: 64)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 64)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x1f, 0x100, &(0x7f00000000c0)="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"}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r8, 0x0, r10, 0x0, 0x400000, 0x0) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) (async, rerun: 32)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)

25.95425566s ago: executing program 0 (id=196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000)={[{@nouid32}, {@grpquota}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$eJzs3U9vVF8ZAOD3Tju0vzJQUBZqVBBRNITpH6AhuBAWagghMRJXLqC2Q9N0hmk6LdDKoizdGyVxpR/BnQsTVi7cudOdG1yYoBINNXEx5t4Z2qHt0FHajp15nuTOvefcYd5zZjjnzD2X4QTQt85FxHpEHIuBLD3azE+aW9xsbOnz3r55NrPx5tlMEvX6vb8l2fk0L1r+TOp48zWHI+J734n4YbIzbm11bWG6XC4tNdNjy5XFsdrq2uX5XDNncmpiavz6lWuT+1bXs5Vfvf72/J3v/+bXX3j1+/Wv/ygtVuHHJ7JzrfXYT42q56PQkjcYEXcOIliXDGZ/fziK0tb2qYg4HxEPYjQGsk8TAOhl9fpo1Edb0wBAr0uv/wuR5IrNuYBC5HLFYmMO70yM5MrV2vKl0erKo9nI5rBORT73cL5cGm/OFZ6KfJKmJ7LjrfTktvSViDgdET8Z+iRLF2eq5dlufvEBgD52fNv4/8+hxvgPAPS44W4XAAA4dMZ/AOg/xn8A6D//xfjv14EA0CNc/wNA/zH+A0D/2XP8f94m390AADiKvnv3brrVN5r///Xs49WVbxQeX54t1RaKlZWZ4kx1abE4V63OlUvFmXp9r9crV6uLE1c3k7XVtfuV6sqj5fvzlem50v1S/oDrAwDs7fTZl39MImL9xifZFi1rORirobflul0AoGsGul0AoGvcwYP+1cE1vmkA6HG7LNH7nrb/ROiFxV/hqLr4WfP/0K/M/0P/+t/m/7+57+UADp/5f+hf9XpizX8A6DPm+IGPuv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfaqQbUmumK0Fvp4+5orFiBMRcSryycP5cmk8Ik5GxB+G8kNpeqLbhQYAPlLuL0lz/a+LoxcK288eS/41lO0j4snP7/3s6fTy8tJEmv/3zfzlF838yWPdqAAA0OrmzqzGON3ct1zIv33zbObddphFfH2rsbhoGnejuTXODMZgth+OfESM/CNpphvS7ysD+xB//XlEfGar/k9bIhSyOZDGyqfb46exTxxA/K33f3v83Hvxc9m5dJ/P3otPdxRtaB9KDL3j5a1GP9lse2kTa7a/XJzL9ru3/+Gsh/p47/q/jR39X26z/xvYET/J2vy5zfSHS/L66m9v78isjzbOPY/43OBu8ZPN+Emb/vdCh3X80+e/eL7dufovIi7G7vEbKlk3O7ZcWRyrra5dnq9Mz5XmSo8mJ6cmpsavX7k2OZbNUTcef7dbjL/euHSyXfy0/iNt4g/vUf+vdFj/X/77wQ++9IH4X/vy7p//mQ/ET8fEr3YYf3rkZtvlu9P4s23qv9fnf6nD+K/+vDbb4VMBgENQW11bmC6XS0t7HKTfNfd6joOjeRDr2W2cbhej84Nv3f7pk/+DYhzswbsW2q1idLdfAg7eVqPvdkkAAAAAAAAAAAAAAIB2aqtrC0NxsD8n6nYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6F3/CQAA//9rHMmx")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0013040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1e0400000008c72f00000000000000021ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31", 0xf0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='+}[@\x00')
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)

25.751988429s ago: executing program 0 (id=203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}}, 0x0)

25.395303438s ago: executing program 0 (id=214):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4044840)

25.359384668s ago: executing program 33 (id=214):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4044840)

4.606155483s ago: executing program 2 (id=799):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000a36c008500000017", @ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x7, 0x1, 0x85e7, &(0x7f0000000640)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)}, 0x40)
r4 = socket$inet(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f0000000100", @ANYRES32, @ANYBLOB="00008b"], 0x48)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r9, @ANYBLOB="0000800000000000"], 0x20}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000680)='cdg\x00', 0x4)
r10 = syz_open_procfs(0x0, &(0x7f0000000340)='clear_refs\x00')
preadv(r10, 0x0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/94, &(0x7f00000005c0)=0x5e)
sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r12 = syz_open_dev$mouse(&(0x7f0000000200), 0x81, 0x82)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)

4.477450892s ago: executing program 2 (id=800):
r0 = io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x1, 0x328})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x564a0000)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0xfffffffd, 0x0, 0x5})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
ustat(0x6, &(0x7f0000000340))
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sched_rr_get_interval(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
memfd_secret(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x200000, 0x0, 0x10, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff1, 0x4}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)

4.452648462s ago: executing program 2 (id=801):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4841)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xffffffffffffffc3)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r0, {0x8}}, './file0\x00'})
process_mrelease(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39df039a8c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5f82199d82815a02cd9c7ec610"}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xbbcd60ad8d9f9c26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r8}, 0x10)
r9 = socket$inet(0x2, 0x3, 0x6)
fsetxattr$security_selinux(r9, &(0x7f0000000540), &(0x7f0000000040)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r10}, 0x18)
fcntl$getownex(r11, 0x10, &(0x7f0000000180))
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r14, 0x1, 0x2a, &(0x7f0000000000), 0x20000000)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

4.341779812s ago: executing program 2 (id=804):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000600)=ANY=[], 0x1, 0x266, &(0x7f0000000340)="$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")
socket$kcm(0x2, 0x1, 0x84)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f00000000c0), 0xfffffff4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000dd5c6302d5dfa7c66cbff566097454de52201ff0dcb7312c1edf99346c72f8ac2cadc52fff20c228183607d397dcee5bfb973299f33d26f4704e91", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8080c61)

4.238480512s ago: executing program 2 (id=808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

4.231368951s ago: executing program 2 (id=809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='rseq_update\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='rseq_update\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000600000000000000000000000000000000f8ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000400)=0x8, 0x4) (async)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000400)=0x8, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="07309afc4eb7482ca77951ad93fb8630ae3e3684905c58abaf5a5b03f63d5aec08f526aed375e0f092ed2e46ee3552096a32f0bc691a659a67e717a22e01dee5d9bda6c979", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="07309afc4eb7482ca77951ad93fb8630ae3e3684905c58abaf5a5b03f63d5aec08f526aed375e0f092ed2e46ee3552096a32f0bc691a659a67e717a22e01dee5d9bda6c979", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080))
ioctl$EVIOCGABS20(r5, 0x40044591, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x4, 0x5) (async)
r7 = socket(0x10, 0x4, 0x5)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff1, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff1, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x64}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.205537222s ago: executing program 34 (id=809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='rseq_update\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='rseq_update\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000600000000000000000000000000000000f8ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000400)=0x8, 0x4) (async)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000400)=0x8, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="07309afc4eb7482ca77951ad93fb8630ae3e3684905c58abaf5a5b03f63d5aec08f526aed375e0f092ed2e46ee3552096a32f0bc691a659a67e717a22e01dee5d9bda6c979", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="07309afc4eb7482ca77951ad93fb8630ae3e3684905c58abaf5a5b03f63d5aec08f526aed375e0f092ed2e46ee3552096a32f0bc691a659a67e717a22e01dee5d9bda6c979", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080))
ioctl$EVIOCGABS20(r5, 0x40044591, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x4, 0x5) (async)
r7 = socket(0x10, 0x4, 0x5)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff1, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff1, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x64}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.020108438s ago: executing program 3 (id=832):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x149)
close_range(r1, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000d00)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9b92fc056f07d114fe3b41c776904545fb44d8e5dc0e57fdbba583dbc1bf026f", "ba38149afe78e80f44a98eddddbf2b6f237458668eb2461a95cd9a215310bae58679f26df35b2d9306a4a2e1dc85e86f", "6ba2c77aea3ef00f0ac8f0e3066b25082e39f5fb07fb432ca8f22890", {"e79710a9e57f1011496e538064796900", "f9d98c0072c691ce00"}}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x91}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='^\'\x00', &(0x7f00000000c0)='9p\x00', 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
write$UHID_CREATE2(r4, &(0x7f0000000240)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='dlm_send\x00', r0, 0x0, 0x200080000000}, 0x26)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f00000000c0)={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES16=r6], 0x28}}, 0x4000040)

2.542339377s ago: executing program 3 (id=840):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], "99"}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x61, 0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f0000000280)=""/137, 0x54, 0x89, 0x0, 0x8, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

2.506368027s ago: executing program 3 (id=841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})

2.498663317s ago: executing program 6 (id=842):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a0015400200142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0040fad95667e006dcdf63951f215ce3bb9ad809d5e14ace69ed0bffece0b42a9ecbee5de6ccd40dd6954b43370e970105ca1f06ba7ea1d51a4f82c904979104", 0xd8}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r1, r0, 0x0)
read$watch_queue(r5, &(0x7f0000000580)=""/199, 0xc7)

2.398395697s ago: executing program 3 (id=844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/157, 0x9d}], 0x1, &(0x7f0000000200)=""/11, 0xb}, 0x7ff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/76, 0x4c}], 0x6, &(0x7f0000000800)=""/58, 0x3a}, 0x6}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001d00)=[{&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/229, 0xe5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/183, 0xb7}, {&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x7, &(0x7f0000001d80)=""/201, 0xc9}, 0x4}, {{&(0x7f0000001e80)=@pptp, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000001f00)=""/37, 0x25}, 0xf914}, {{&(0x7f0000001f40)=@ax25={{0x3, @rose}, [@rose, @null, @bcast, @netrom, @default, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)=""/133, 0x85}, 0xf9}, {{&(0x7f00000020c0)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000002140)=""/218, 0xda}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000002240)=""/47, 0x2f}, {&(0x7f0000002280)=""/30, 0x1e}, {&(0x7f00000022c0)=""/90, 0x5a}, {&(0x7f0000002340)=""/139, 0x8b}, {&(0x7f0000002400)=""/60, 0x3c}, {&(0x7f0000002440)=""/145, 0x91}, {&(0x7f0000002500)=""/27, 0x1b}], 0x9, &(0x7f0000002600)=""/120, 0x78}, 0x9}], 0x6, 0x1, &(0x7f0000002800))

2.314062986s ago: executing program 3 (id=846):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xa1)
mmap(&(0x7f000049a000/0x1000)=nil, 0x1000, 0x300000e, 0x80010, r0, 0x7b3b4000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

2.306830716s ago: executing program 3 (id=847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x101}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x400000, 0x100000000000000)

1.602380605s ago: executing program 6 (id=851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c"], 0xb0}}, 0x0)

1.334569624s ago: executing program 6 (id=852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file1'}, 0xb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x1c45b1, &(0x7f0000002080)=ANY=[], 0x1, 0x120e, &(0x7f00000004c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
set_tid_address(0x0)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)

971.122663ms ago: executing program 6 (id=859):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4008800, &(0x7f0000000240)={0xa, 0x4e20, 0x200, @remote}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)

889.308593ms ago: executing program 6 (id=860):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94)
socket$packet(0x11, 0x2, 0x300)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000400000000000000000000000ed69bd07ffb06996d1cab12a574f37ef8e", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000030c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r8 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0xe, 0xb, 0x8}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)

826.520572ms ago: executing program 5 (id=861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x18, 0x2, 0xd, 0xfd, 0x0, 0x6, 0x82820, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp, 0x0, 0x7fffffff, 0x6, 0x1, 0x3, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

784.291353ms ago: executing program 1 (id=863):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x0, 0x60, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)

757.403902ms ago: executing program 1 (id=864):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r0}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

689.917012ms ago: executing program 1 (id=865):
removexattr(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x78a0, 0x2044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x5}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x4014)
removexattr(0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x78a0, 0x2044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x5}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x4014) (async)

610.149602ms ago: executing program 1 (id=866):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x783, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_usbip_server_init(0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
utime(0x0, 0x0)
kexec_load(0x9, 0x1, &(0x7f0000003080)=[{0x0, 0x0, 0x7, 0xffffffff80000001}], 0x1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a00)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e", 0x86}, {&(0x7f0000000b00)="8df0b915d24279a8a885f493db2928d00700a146a30cd7bb10151b1440228faa8782a6f51ebb0d223eac7e0015c044b186538ff583c4da86a8ddd211000000", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000bc0)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9b33d2d55cb92f17bc9e8aaf62f94fb1143a79e72dcd910f5f45125", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000018c0)="a45ea7ecf9a8d6a6dbcbf2f17ef46f78f244639ce94c6b53a6d704c4d559ca956b8fbd06eff8d13922bfb66e931091a0d98a45277e0528c497b608ec2118075ba79ef62af69c4309a5259badd320aea0ebfa1eb5991de58bd246deae894634d866c659b3223fe3f489aa675f8024c3f89184d551876678f9c7fb8904160b2e8e82eb384a1fc1962d9c7b323345237badff7ede15b8c3896c010400000000", 0x9e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

609.665142ms ago: executing program 5 (id=867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x2f, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

591.205072ms ago: executing program 5 (id=868):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a)
r1 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001f00)=[{0x3, 0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a40)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8000000000000001, 0x8, 0x0, 0x24, 0x6bf]}, {0x2, 0x0, 0x0, &(0x7f0000001d40)=[{0x0}, {&(0x7f0000001cc0)=""/91, 0x5b}], &(0x7f0000001d80)=[0x735, 0x2]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000001ec0)=[0x2, 0x5, 0x3d, 0x6]}], 0x3)

566.486222ms ago: executing program 5 (id=869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x54)
syz_io_uring_setup(0x4b5, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000))
connect$netlink(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000580)=""/104, 0x68, <r6=>0x0, &(0x7f0000000600)=""/172, 0xac}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x2, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x86, &(0x7f00000004c0)=""/134, 0x41000, 0x32, '\x00', r4, @cgroup_skb=0x1, r5, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x0, &(0x7f0000000700)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000))
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000000000000bdd531a6bfc88a4790d8", @ANYRES32=r4, @ANYBLOB="0080020000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x2}, 0x0)

491.860371ms ago: executing program 5 (id=870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})

476.646672ms ago: executing program 5 (id=871):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50)
r1 = io_uring_setup(0x79bf, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x4, 0x32f})
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_op={0x1, 0x9}], 0x2)
recvmmsg$unix(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000024000001)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x20044043}, 0x0)

365.374971ms ago: executing program 7 (id=875):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0xb}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x128, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "a3684f98aef856400f4195b97a11f7a241628f39bba797dbde60f2013bf665a7b763b2ce539e89fa9126bb7f2f70f48160393c3a76f1de706ba803c13da99b4eab150c28611f8799554fa5bb26270108efc101bdffa62c488223cf68532f1017a5268a1d354cc28ced6d19928833b1dc408dbe970d878d7e7439752c853ee85cff3d9c699cfb23f6fa1bfbb1f0c41f5c9f1991577e46fe61c8ab0e22758662130ab7b786d778504ee994a2f7cc58d3dc0270ca01ef027855e1b14bd22f6b8448b7bf92015e3afc0cfa7587db7b1d4a3b38340805b99e5d1c30cd7039ea9d751ac5"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x22000000}, 0x40040)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x80, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2}, 0x810)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34fc88ea7585ec7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

295.769341ms ago: executing program 7 (id=876):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)

273.501141ms ago: executing program 7 (id=877):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
unshare(0x2c040000)
ioperm(0x2, 0x7ff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ata_eh_link_autopsy\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0)

115.601671ms ago: executing program 7 (id=878):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, <r1=>0x0})
r2 = gettid()
syz_clone3(&(0x7f0000000700)={0x48011000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x10}, &(0x7f00000017c0)=""/4096, 0x1000, &(0x7f0000000580)=""/87, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r1, r2], 0x7}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4}, 0x18)
pipe(&(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)

114.339571ms ago: executing program 7 (id=879):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a)
r1 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001f00)=[{0x3, 0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a40)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8000000000000001, 0x8, 0x0, 0x24, 0x6bf]}, {0x2, 0x0, 0x0, &(0x7f0000001d40)=[{0x0}, {&(0x7f0000001cc0)=""/91, 0x5b}], &(0x7f0000001d80)=[0x735, 0x2]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000001ec0)=[0x2, 0x5, 0x3d, 0x6]}], 0x3)

54.252091ms ago: executing program 7 (id=880):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x1}}, 0x18)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000000340)={&(0x7f00000003c0)="db87a14dd5ad07f3f7be2ff3c20df3b772391b853c163a75d1f0f823eeb77844a0ff850eb46aed4f31c771a39c924f9bd01da2f3c601522b5f09e09adcb226ff0a0ea9648fdeff9cb058555be49aab65e4c0622618a206d8d338b1e2028c7e164dce323e2c61358551c91f4663ca135a7eb4ce3e3fb8cbb266612b44fc9dd72df4b8e3691ca7322c6f054e94b1ffc87d8f5c33fa0a0a48393d5efe6ac537cf9c28871772ba243e5a1d6b002d85", 0xad}, 0x1, 0x0, 0x0, 0x24048811}, 0x20)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {}, 0xfe}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b87567319c", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000880)="fb2df4c974ff6c2b4cfbb15b139e61e0f42ec4c41514025c0724358219f9e71f4b34c83f97214e2ff1388fe58b3d6affab4d38afb764912dcc6512d85d6d25f3f0d6fb9f154fec80b29194374adc15923ab8", 0x52}, {&(0x7f0000000a00)="7d861191bdeaf460161533a8bd9e8cbecc7b4779dabe74b00f18ba9e9b70aef49ba46ea5e242a1b1902bda76dc01c53c2f24eb5ecb83f2c5d171f6d526ce2739c2168c6d70df23edb9955288f91521a6668a757e034f2db97cfb262ad06dc1808df24e664f01dbca22060ca87e1803b39e1156a833270b95f40ef239b1fd986912e51d94a23caac9a5f2", 0x8a}, {&(0x7f0000000900)="ac4f6c7a52abf6b73a", 0x9}, {&(0x7f0000000940)="87cebd97f1df861fdc2d9e4e75c140193fb0c2cce1adfbde8033a0bd7b4ebfe7", 0x20}, {&(0x7f0000000b40)="f3eb24bd370d5fe3be34cde150b49b55c51fbde803cb7aa0a724bae2ce64d56f7dfc3ae233b49ecac20632d8523ebd2b0a57184a9416b72cd674bb11555fecf1a61610faf9ea56d151de90a762629df296aeee3565742e9592e2fdad5f4637475b32d7", 0x63}, {&(0x7f0000000d80)="41aef18ae62dc6f2dde41bce6a3a09f3a07fd9cedcab6ec7def22a003b908b430ad4f6e0fba1d97f874aeb7303eea6fbbe6b08c1bf37f5a9ccd83f8964afb07084383819cc15184efc", 0x49}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="d00000000000000004010000030000003f8d090527de8c1c338c774ab9fa86bdd221968fa1f88f8cb2efc8e36d04fd9bf3f0397b9b999b250bce375e07e6e1505aee2eed68f828b7eccfdcba301385cd91fefae62895f7f696a7ddd4aca565154f2b8af27a16c25c404558795f38b42cb57e86f887a1d46bc6e3f1af105306279598a6d69ed165f0fcf5097b7efe7e18a52fba55292e526be28331347187a65b66210dc7d4ba40a4f4ca286ec790f73555d7e966798b18de27c71f492aa1bdafb88a5f357174e3ca540000aa00000000"], 0xd0}}], 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4800)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6)
r9 = socket(0x10, 0x803, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xf0, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000127bd7002fedbdf258100000008000300", @ANYRES32=r13, @ANYBLOB="0cd587c577ee4e53334f00478800"/29], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000085)
vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
write$eventfd(r7, &(0x7f00000001c0)=0x2, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x403882ad3367a9fc, 0x8}}, 0x20)

54.02142ms ago: executing program 1 (id=881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})

26.15669ms ago: executing program 1 (id=882):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000a36c008500000017", @ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x7, 0x1, 0x85e7, &(0x7f0000000640)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)}, 0x40)
r4 = socket$inet(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f0000000100", @ANYRES32, @ANYBLOB="00008b"], 0x48)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0)

0s ago: executing program 6 (id=883):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x50, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x50, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000008000000030000000f00000000400000", @ANYRES32=r0, @ANYBLOB="0b1e00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="040000000020"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000003c0)="f5015a1c74b4686115506e4908b6bec378e98008a44c675df990caf0d8e44f26ee8363d0087318d25d7c3f77d6952b8384550bc9fcdf5123d97e9f7c9f6ddbe8b42aa2dc195d334192464b41c4e0a66c90b9dd6a4c63fe48dab2c8da50e0e1d01364e905638ed300", &(0x7f0000000640)=""/178}, 0x20)
getpid() (async)
r6 = getpid()
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000001000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r10=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r10}}, 0xfffffe10)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r11}}, 0x48)
syz_pidfd_open(r6, 0x0) (async)
r12 = syz_pidfd_open(r6, 0x0)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r13=>0x0)
socket$tipc(0x1e, 0x2, 0x0)
setfsgid(r13)
process_madvise(r12, &(0x7f0000000300)=[{0x0}], 0x1, 0xc, 0x0)
setns(r12, 0x24020000) (async)
setns(r12, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

tered allmulticast mode
[   28.542034][ T3299] bridge_slave_0: entered promiscuous mode
[   28.560379][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.574744][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.581843][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.589012][ T3299] bridge_slave_1: entered allmulticast mode
[   28.595557][ T3299] bridge_slave_1: entered promiscuous mode
[   28.625246][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.632353][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.639464][ T3304] bridge_slave_0: entered allmulticast mode
[   28.645837][ T3304] bridge_slave_0: entered promiscuous mode
[   28.653680][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.660904][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.668215][ T3304] bridge_slave_1: entered allmulticast mode
[   28.674453][ T3304] bridge_slave_1: entered promiscuous mode
[   28.681512][ T3297] team0: Port device team_slave_0 added
[   28.706528][ T3297] team0: Port device team_slave_1 added
[   28.721926][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.731090][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.738273][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.745405][ T3300] bridge_slave_0: entered allmulticast mode
[   28.751837][ T3300] bridge_slave_0: entered promiscuous mode
[   28.758492][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.765559][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.772776][ T3300] bridge_slave_1: entered allmulticast mode
[   28.779327][ T3300] bridge_slave_1: entered promiscuous mode
[   28.794559][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.801550][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.827627][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.839592][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.849631][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.871375][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.878428][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.904369][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.923118][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.933344][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.953302][ T3299] team0: Port device team_slave_0 added
[   28.969711][ T3297] hsr_slave_0: entered promiscuous mode
[   28.975824][ T3297] hsr_slave_1: entered promiscuous mode
[   28.982922][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.999848][ T3299] team0: Port device team_slave_1 added
[   29.011834][ T3304] team0: Port device team_slave_0 added
[   29.017889][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.035664][ T3304] team0: Port device team_slave_1 added
[   29.048977][ T3300] team0: Port device team_slave_0 added
[   29.073302][ T3300] team0: Port device team_slave_1 added
[   29.083788][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.090798][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.116729][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.128005][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.134960][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.160901][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.183030][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.190080][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.216074][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.227137][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.234186][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.260196][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.277420][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.284427][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.310459][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.348771][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.355732][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.381843][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.415996][ T3304] hsr_slave_0: entered promiscuous mode
[   29.422128][ T3304] hsr_slave_1: entered promiscuous mode
[   29.428092][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.435634][ T3304] Cannot create hsr debugfs directory
[   29.476727][ T3299] hsr_slave_0: entered promiscuous mode
[   29.482866][ T3299] hsr_slave_1: entered promiscuous mode
[   29.488835][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.496392][ T3299] Cannot create hsr debugfs directory
[   29.514374][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.521522][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.528794][ T3303] bridge_slave_0: entered allmulticast mode
[   29.535164][ T3303] bridge_slave_0: entered promiscuous mode
[   29.541851][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.548955][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.556065][ T3303] bridge_slave_1: entered allmulticast mode
[   29.562505][ T3303] bridge_slave_1: entered promiscuous mode
[   29.570782][ T3300] hsr_slave_0: entered promiscuous mode
[   29.576925][ T3300] hsr_slave_1: entered promiscuous mode
[   29.582910][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.591319][ T3300] Cannot create hsr debugfs directory
[   29.621201][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.640739][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.675082][ T3303] team0: Port device team_slave_0 added
[   29.681750][ T3303] team0: Port device team_slave_1 added
[   29.722675][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.729762][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.755825][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.783341][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.790323][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.816346][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.831507][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.854492][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.879717][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.889992][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.915191][ T3303] hsr_slave_0: entered promiscuous mode
[   29.921468][ T3303] hsr_slave_1: entered promiscuous mode
[   29.927581][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.935194][ T3303] Cannot create hsr debugfs directory
[   29.967888][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.979114][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.999722][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.008111][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.059456][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.081978][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.090399][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.109092][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.121075][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.130045][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.140532][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.147848][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.156661][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.187359][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   30.198358][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.206906][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.215652][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.229364][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.236468][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.246446][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.272953][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.280068][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.341316][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.352073][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.365760][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   30.385866][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.393018][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.408056][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.415128][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.428726][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   30.438085][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.463436][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.474533][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.481707][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.490701][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.497775][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.520013][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.534679][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.546386][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.553491][  T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.565508][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.581757][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.588841][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.605845][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.626341][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.636876][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.650162][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.657247][  T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.666564][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.673716][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.704023][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.750966][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.807158][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.851080][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.891814][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.912040][ T3297] veth0_vlan: entered promiscuous mode
[   30.923739][ T3297] veth1_vlan: entered promiscuous mode
[   30.944348][ T3297] veth0_macvtap: entered promiscuous mode
[   30.961700][ T3297] veth1_macvtap: entered promiscuous mode
[   30.989439][ T3299] veth0_vlan: entered promiscuous mode
[   31.003178][ T3299] veth1_vlan: entered promiscuous mode
[   31.028340][ T3299] veth0_macvtap: entered promiscuous mode
[   31.035333][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.062345][ T3299] veth1_macvtap: entered promiscuous mode
[   31.072422][ T3304] veth0_vlan: entered promiscuous mode
[   31.081621][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.092317][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.103072][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.111269][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.124205][ T3303] veth0_vlan: entered promiscuous mode
[   31.139714][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.148595][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.157406][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.166150][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.178511][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.189127][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.199934][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.213862][ T3304] veth1_vlan: entered promiscuous mode
[   31.221496][ T3299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.230310][ T3299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.239152][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.247935][ T3299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.264204][ T3303] veth1_vlan: entered promiscuous mode
[   31.271752][ T3300] veth0_vlan: entered promiscuous mode
[   31.297642][ T3300] veth1_vlan: entered promiscuous mode
[   31.318927][ T3304] veth0_macvtap: entered promiscuous mode
[   31.326047][ T3303] veth0_macvtap: entered promiscuous mode
[   31.327141][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.347489][ T3304] veth1_macvtap: entered promiscuous mode
[   31.358687][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.369172][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.379023][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.389540][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.400100][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.416590][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.427141][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.437280][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.447952][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.459318][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.470008][ T3443] FAULT_INJECTION: forcing a failure.
[   31.470008][ T3443] name failslab, interval 1, probability 0, space 0, times 1
[   31.478941][ T3300] veth0_macvtap: entered promiscuous mode
[   31.482784][ T3443] CPU: 0 UID: 0 PID: 3443 Comm: syz.3.4 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   31.490596][ T3300] veth1_macvtap: entered promiscuous mode
[   31.498761][ T3443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   31.498778][ T3443] Call Trace:
[   31.509517][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.514592][ T3443]  <TASK>
[   31.517868][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.528223][ T3443]  dump_stack_lvl+0xf2/0x150
[   31.531241][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.541018][ T3443]  dump_stack+0x15/0x1a
[   31.541120][ T3443]  should_fail_ex+0x223/0x230
[   31.541150][ T3443]  should_failslab+0x8f/0xb0
[   31.541189][ T3443]  kmem_cache_alloc_node_noprof+0x59/0x320
[   31.545787][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.556171][ T3443]  ? dup_task_struct+0x6c/0x710
[   31.560365][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.565042][ T3443]  dup_task_struct+0x6c/0x710
[   31.569649][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.574578][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.575456][ T3443]  ? kstrtoull+0x110/0x140
[   31.586719][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.590117][ T3443]  copy_process+0x3a9/0x1f90
[   31.590149][ T3443]  ? 0xffffffff81000000
[   31.590178][ T3443]  ? selinux_file_permission+0x22a/0x360
[   31.600615][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.605255][ T3443]  ? __rcu_read_unlock+0x4e/0x70
[   31.615056][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.622307][ T3443]  kernel_clone+0x167/0x5e0
[   31.626797][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.637168][ T3443]  ? vfs_write+0x596/0x920
[   31.641835][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.645904][ T3443]  __x64_sys_clone+0xe8/0x120
[   31.651526][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.661298][ T3443]  x64_sys_call+0x2d7e/0x2dc0
[   31.671644][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.676609][ T3443]  do_syscall_64+0xc9/0x1c0
[   31.682580][ T3300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.690888][ T3443]  ? clear_bhb_loop+0x55/0xb0
[   31.690920][ T3443]  ? clear_bhb_loop+0x55/0xb0
[   31.690952][ T3443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.690991][ T3443] RIP: 0033:0x7fdf7c1f5d29
[   31.695421][ T3300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.705810][ T3443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.705834][ T3443] RSP: 002b:00007fdf7a860fe8 EFLAGS: 00000206
[   31.710586][ T3300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.720268][ T3443]  ORIG_RAX: 0000000000000038
[   31.720289][ T3443] RAX: ffffffffffffffda RBX: 00007fdf7c3e5fa0 RCX: 00007fdf7c1f5d29
[   31.724957][ T3300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.732124][ T3443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024001000
[   31.732142][ T3443] RBP: 00007fdf7a861090 R08: 0000000000000000 R09: 0000000000000000
[   31.845705][ T3443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   31.853676][ T3443] R13: 0000000000000000 R14: 00007fdf7c3e5fa0 R15: 00007ffcc2536dd8
[   31.861665][ T3443]  </TASK>
[   31.871462][ T3303] veth1_macvtap: entered promiscuous mode
[   31.887891][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.898429][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.908328][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.918880][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.928834][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.939312][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.949177][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.959696][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.970432][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.978484][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.987207][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.996130][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.005052][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.018827][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.029333][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.039224][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.049938][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.059959][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.070700][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.080782][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.091487][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.102959][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.142823][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   32.142841][   T29] audit: type=1400 audit(1737207112.577:126): avc:  denied  { create } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   32.144884][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.158494][   T29] audit: type=1400 audit(1737207112.587:127): avc:  denied  { map_create } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.168191][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.204576][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.206192][   T29] audit: type=1400 audit(1737207112.647:128): avc:  denied  { map_read map_write } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.213432][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.253736][   T29] audit: type=1400 audit(1737207112.687:129): avc:  denied  { create } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.298762][ T3451] loop2: detected capacity change from 0 to 128
[   32.301805][ T3457] loop3: detected capacity change from 0 to 512
[   32.321799][ T3457] EXT4-fs: dax option not supported
[   32.390427][   T29] audit: type=1400 audit(1737207112.727:130): avc:  denied  { bind } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.409718][   T29] audit: type=1400 audit(1737207112.727:131): avc:  denied  { create } for  pid=3455 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.430542][   T29] audit: type=1400 audit(1737207112.727:132): avc:  denied  { name_bind } for  pid=3450 comm="syz.2.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   32.451232][   T29] audit: type=1400 audit(1737207112.727:133): avc:  denied  { node_bind } for  pid=3450 comm="syz.2.3" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   32.473802][   T29] audit: type=1400 audit(1737207112.727:134): avc:  denied  { write } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.493032][   T29] audit: type=1400 audit(1737207112.727:135): avc:  denied  { setopt } for  pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.698111][ T3469] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11'.
[   32.750502][ T3477] loop2: detected capacity change from 0 to 128
[   32.769986][ T3469] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   32.778244][ T3469] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   32.895597][ T3477] syz.2.10: attempt to access beyond end of device
[   32.895597][ T3477] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[   32.977586][ T3477] syz.2.10: attempt to access beyond end of device
[   32.977586][ T3477] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128
[   32.993327][ T3477] syz.2.10: attempt to access beyond end of device
[   32.993327][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.009653][ T3477] syz.2.10: attempt to access beyond end of device
[   33.009653][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.022860][ T3477] syz.2.10: attempt to access beyond end of device
[   33.022860][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.037461][ T3477] syz.2.10: attempt to access beyond end of device
[   33.037461][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.052431][ T3477] syz.2.10: attempt to access beyond end of device
[   33.052431][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.067397][ T3485] syz.0.15[3485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.067490][ T3485] syz.0.15[3485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.080501][ T3485] syz.0.15[3485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.087851][ T3477] syz.2.10: attempt to access beyond end of device
[   33.087851][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.135825][ T3485] IPv6: NLM_F_CREATE should be specified when creating new route
[   33.141675][ T3477] syz.2.10: attempt to access beyond end of device
[   33.141675][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.164646][ T3477] syz.2.10: attempt to access beyond end of device
[   33.164646][ T3477] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[   33.218386][ T3489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18'.
[   33.249570][ T3493] xt_TCPMSS: Only works on TCP SYN packets
[   33.979697][ T3518] syz.2.28[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.979827][ T3518] syz.2.28[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.001180][ T3518] syz.2.28[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.038947][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'.
[   34.123870][ T3527] serio: Serial port ptm0
[   34.233330][ T3539] netlink: 256 bytes leftover after parsing attributes in process `syz.2.35'.
[   34.249711][ T3541] process 'syz.3.36' launched './file0' with NULL argv: empty string added
[   34.249912][ T3539] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   34.266717][ T3539] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   34.348215][ T3548] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   34.352244][ T3549] loop4: detected capacity change from 0 to 256
[   34.398479][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.414219][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.875728][ T3560] Zero length message leads to an empty skb
[   34.973057][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'.
[   34.983340][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.995236][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.076046][ T3576] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   35.084299][ T3576] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   35.265364][ T3578] loop4: detected capacity change from 0 to 512
[   35.272108][ T3578] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   35.636993][ T3597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.645626][ T3597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.875071][    C0] hrtimer: interrupt took 37204 ns
[   35.883311][ T3609] syz.2.63[3609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.884197][ T3609] syz.2.63[3609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.898931][ T3609] syz.2.63[3609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.946822][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   35.968303][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.980628][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.032092][ T3618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'.
[   36.123776][ T3634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'.
[   36.133096][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   36.287556][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[   36.302345][ T3655] loop4: detected capacity change from 0 to 512
[   36.306655][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.333747][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.342939][ T3655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.359648][ T3655] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.408025][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.495695][ T3684] loop0: detected capacity change from 0 to 164
[   36.530274][ T3684] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   36.568698][ T3684] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   36.577351][ T3684] rock: directory entry would overflow storage
[   36.583605][ T3684] rock: sig=0x4f50, size=4, remaining=3
[   36.589681][ T3684] iso9660: Corrupted directory entry in block 4 of inode 1792
[   37.554337][   T29] kauditd_printk_skb: 338 callbacks suppressed
[   37.554382][   T29] audit: type=1400 audit(1737207117.987:474): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   37.732557][ T3751] syz.2.108[3751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.049907][   T29] audit: type=1400 audit(1737207118.487:475): avc:  denied  { write } for  pid=3769 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.267480][ T3772] bpf_get_probe_write_proto: 5 callbacks suppressed
[   38.267516][ T3772] syz.2.115[3772] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.274468][ T3772] syz.2.115[3772] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.285764][ T3772] syz.2.115[3772] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.374713][   T29] audit: type=1400 audit(1737207118.807:476): avc:  denied  { create } for  pid=3774 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   38.408948][   T29] audit: type=1400 audit(1737207118.847:477): avc:  denied  { connect } for  pid=3774 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   38.428660][   T29] audit: type=1400 audit(1737207118.847:478): avc:  denied  { ioctl } for  pid=3774 comm="syz.1.116" path="socket:[5106]" dev="sockfs" ino=5106 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   38.459032][   T29] audit: type=1326 audit(1737207118.897:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   38.496648][ T3776] ip6t_REJECT: ECHOREPLY is not supported
[   38.532097][   T29] audit: type=1326 audit(1737207118.927:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   38.555429][   T29] audit: type=1326 audit(1737207118.927:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   38.578788][   T29] audit: type=1326 audit(1737207118.927:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   38.602248][   T29] audit: type=1326 audit(1737207118.927:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   38.685531][ T3782] __nla_validate_parse: 13 callbacks suppressed
[   38.685546][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'.
[   38.703135][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'.
[   39.972343][ T3809] loop2: detected capacity change from 0 to 256
[   39.992570][ T3809] FAT-fs (loop2): Directory bread(block 64) failed
[   40.005775][ T3809] FAT-fs (loop2): Directory bread(block 65) failed
[   40.024850][ T3809] FAT-fs (loop2): Directory bread(block 66) failed
[   40.031850][ T3809] FAT-fs (loop2): Directory bread(block 67) failed
[   40.040098][ T3809] FAT-fs (loop2): Directory bread(block 68) failed
[   40.046695][ T3809] FAT-fs (loop2): Directory bread(block 69) failed
[   40.054404][ T3811] loop4: detected capacity change from 0 to 256
[   40.064429][ T3809] FAT-fs (loop2): Directory bread(block 70) failed
[   40.071041][ T3809] FAT-fs (loop2): Directory bread(block 71) failed
[   40.077904][ T3795] syz.1.120 (3795) used greatest stack depth: 8928 bytes left
[   40.093951][ T3809] FAT-fs (loop2): Directory bread(block 72) failed
[   40.104088][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'.
[   40.109631][ T3809] FAT-fs (loop2): Directory bread(block 73) failed
[   40.124328][ T3813] bridge_slave_1: left allmulticast mode
[   40.130078][ T3813] bridge_slave_1: left promiscuous mode
[   40.135810][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.140997][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   40.159772][ T3813] bridge_slave_0: left allmulticast mode
[   40.165478][ T3813] bridge_slave_0: left promiscuous mode
[   40.171278][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.196709][ T3809] bio_check_eod: 3310 callbacks suppressed
[   40.196726][ T3809] syz.2.125: attempt to access beyond end of device
[   40.196726][ T3809] loop2: rw=2049, sector=1224, nr_sectors = 608 limit=256
[   40.210713][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'.
[   40.220289][ T3809] syz.2.125: attempt to access beyond end of device
[   40.220289][ T3809] loop2: rw=2049, sector=1864, nr_sectors = 1440 limit=256
[   40.243622][ T3816] geneve2: entered promiscuous mode
[   40.249014][ T3816] geneve2: entered allmulticast mode
[   40.366164][ T3828] loop0: detected capacity change from 0 to 8192
[   40.419645][ T3835] syz.0.137[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.419761][ T3835] syz.0.137[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.431130][ T3835] syz.0.137[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.451373][ T3836] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   40.471157][ T3836] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   40.532750][ T3843] netlink: 'syz.0.140': attribute type 1 has an invalid length.
[   40.540505][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   40.743025][ T3846] loop0: detected capacity change from 0 to 128
[   40.751892][ T3846] EXT4-fs: Ignoring removed nobh option
[   40.765902][ T3846] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.779630][ T3846] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.813258][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   40.962567][ T3852] syz.3.142[3852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.962654][ T3852] syz.3.142[3852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.974090][ T3852] syz.3.142[3852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.012016][ T3854] xt_TPROXY: Can be used only with -p tcp or -p udp
[   41.046991][ T3856] xt_ecn: cannot match TCP bits for non-tcp packets
[   41.054490][ T3857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'.
[   41.115710][ T3861] loop4: detected capacity change from 0 to 8192
[   41.122480][ T3861] =======================================================
[   41.122480][ T3861] WARNING: The mand mount option has been deprecated and
[   41.122480][ T3861]          and is ignored by this kernel. Remove the mand
[   41.122480][ T3861]          option from the mount to silence this warning.
[   41.122480][ T3861] =======================================================
[   41.157423][ T3861] vfat: Unknown parameter '0177777777777777777777718446744073709551615'
[   41.303676][ T3872] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   41.443719][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.513096][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.571411][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.624979][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.650598][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.738590][ T3881] chnl_net:caif_netlink_parms(): no params data found
[   41.782519][   T56] bridge_slave_1: left allmulticast mode
[   41.788302][   T56] bridge_slave_1: left promiscuous mode
[   41.794024][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.814388][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'.
[   41.831290][   T56] bridge_slave_0: left allmulticast mode
[   41.837034][   T56] bridge_slave_0: left promiscuous mode
[   41.842789][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.874298][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[   41.930922][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.941140][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.951985][   T56] bond0 (unregistering): Released all slaves
[   42.024232][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.034432][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.043423][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.050668][ T3881] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.065805][ T3881] bridge_slave_0: entered allmulticast mode
[   42.073282][ T3881] bridge_slave_0: entered promiscuous mode
[   42.091907][   T56] hsr_slave_0: left promiscuous mode
[   42.099115][   T56] hsr_slave_1: left promiscuous mode
[   42.104953][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.112435][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.121617][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.129164][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.141183][   T56] veth1_macvtap: left promiscuous mode
[   42.146721][   T56] veth0_macvtap: left promiscuous mode
[   42.152689][   T56] veth1_vlan: left promiscuous mode
[   42.158031][   T56] veth0_vlan: left promiscuous mode
[   42.230472][   T56] team0 (unregistering): Port device team_slave_1 removed
[   42.240605][   T56] team0 (unregistering): Port device team_slave_0 removed
[   42.271305][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.278424][ T3881] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.285625][ T3881] bridge_slave_1: entered allmulticast mode
[   42.292416][ T3881] bridge_slave_1: entered promiscuous mode
[   42.304807][ T3913] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   42.313236][ T3913] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   42.330440][ T3881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.360323][ T3881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.396314][ T3881] team0: Port device team_slave_0 added
[   42.403111][ T3881] team0: Port device team_slave_1 added
[   42.422130][ T3881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.429219][ T3881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.455295][ T3881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.466664][ T3881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.473660][ T3881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.499726][ T3881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.530343][ T3881] hsr_slave_0: entered promiscuous mode
[   42.536605][ T3881] hsr_slave_1: entered promiscuous mode
[   42.542601][ T3881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.550276][ T3881] Cannot create hsr debugfs directory
[   42.625303][ T3881] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   42.646515][ T3881] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   42.663406][ T3881] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   42.685464][ T3881] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   42.701184][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   42.701198][   T29] audit: type=1400 audit(1737207123.137:591): avc:  denied  { getopt } for  pid=3944 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   42.738849][   T29] audit: type=1400 audit(1737207123.167:592): avc:  denied  { write } for  pid=3944 comm="syz.0.164" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   42.773568][ T3945] loop0: detected capacity change from 0 to 2048
[   42.790661][ T3881] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.801556][ T3945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.820838][   T29] audit: type=1400 audit(1737207123.257:593): avc:  denied  { write } for  pid=3944 comm="syz.0.164" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.847012][   T29] audit: type=1400 audit(1737207123.257:594): avc:  denied  { add_name } for  pid=3944 comm="syz.0.164" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.867733][   T29] audit: type=1400 audit(1737207123.257:595): avc:  denied  { create } for  pid=3944 comm="syz.0.164" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.877115][ T3881] 8021q: adding VLAN 0 to HW filter on device team0
[   42.887869][   T29] audit: type=1400 audit(1737207123.257:596): avc:  denied  { read write } for  pid=3944 comm="syz.0.164" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.887904][   T29] audit: type=1400 audit(1737207123.257:597): avc:  denied  { open } for  pid=3944 comm="syz.0.164" path="/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.908968][ T3881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   42.949330][ T3881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   42.988084][ T3403] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.995186][ T3403] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.006343][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.013534][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.030766][ T3969] syz.3.166[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.031531][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.107945][ T3979] loop0: detected capacity change from 0 to 256
[   43.167709][   T29] audit: type=1326 audit(1737207123.597:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07978f5d29 code=0x7ffc0000
[   43.170163][ T3881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.191069][   T29] audit: type=1326 audit(1737207123.597:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f07978f5d29 code=0x7ffc0000
[   43.221722][   T29] audit: type=1326 audit(1737207123.597:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07978f5d29 code=0x7ffc0000
[   43.313633][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.373777][ T4003] bpf_get_probe_write_proto: 2 callbacks suppressed
[   43.373797][ T4003] syz.0.173[4003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.377906][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.397806][ T4003] syz.0.173[4003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.399519][ T4003] syz.0.173[4003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.695047][ T4026] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   43.714650][ T4026] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   43.754155][ T3881] veth0_vlan: entered promiscuous mode
[   43.776038][ T3881] veth1_vlan: entered promiscuous mode
[   43.867612][ T3881] veth0_macvtap: entered promiscuous mode
[   43.875103][ T3881] veth1_macvtap: entered promiscuous mode
[   43.885636][ T3881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.896264][ T3881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.906352][ T3881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.916818][ T3881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.926810][ T3881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.937333][ T3881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.947287][ T3881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.957770][ T3881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.968609][ T3881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.979424][ T3881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.990096][ T3881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.000980][ T3881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.009376][ T3881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.018276][ T3881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.027128][ T3881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.035864][ T3881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.081985][ T4048] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure
[   44.120896][ T4051] loop5: detected capacity change from 0 to 256
[   44.269834][ T4067] __nla_validate_parse: 2 callbacks suppressed
[   44.269852][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   44.375746][ T4094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'.
[   44.396888][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   44.572976][ T4127] loop0: detected capacity change from 0 to 512
[   44.618307][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.631812][ T4127] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.657054][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   44.676526][ T4141] netlink: 96 bytes leftover after parsing attributes in process `syz.5.200'.
[   44.702704][ T4141] bond_slave_1: mtu less than device minimum
[   44.743674][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.759710][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.782676][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.796454][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.812148][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.827130][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.846034][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.860812][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.874922][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   44.891528][ T3304] EXT4-fs error (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   45.080913][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'.
[   45.098921][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.116044][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.161562][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.204337][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.220997][ T4203] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   45.229305][ T4203] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   45.263210][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.301174][ T4217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.342962][ T4220] netlink: 'syz.3.220': attribute type 1 has an invalid length.
[   45.412719][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.423170][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.434583][   T36] bond0 (unregistering): Released all slaves
[   45.470459][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   45.509767][   T36] hsr_slave_0: left promiscuous mode
[   45.523202][   T36] hsr_slave_1: left promiscuous mode
[   45.529199][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.536762][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.554101][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.561756][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.594832][   T36] veth1_macvtap: left promiscuous mode
[   45.600426][   T36] veth0_macvtap: left promiscuous mode
[   45.606073][   T36] veth1_vlan: left promiscuous mode
[   45.611443][   T36] veth0_vlan: left promiscuous mode
[   45.615243][ T4249] SELinux: failure in selinux_parse_skb(), unable to parse packet
[   45.678244][ T4256] loop5: detected capacity change from 0 to 256
[   45.723474][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'.
[   45.776765][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.790015][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.804597][   T36] team0 (unregistering): Port device team_slave_1 removed
[   45.814360][   T35] IPVS: starting estimator thread 0...
[   45.835578][   T36] team0 (unregistering): Port device team_slave_0 removed
[   45.884676][ T4204] chnl_net:caif_netlink_parms(): no params data found
[   45.908578][ T4273] IPVS: using max 2448 ests per chain, 122400 per kthread
[   45.955436][ T4289] 9pnet_fd: Insufficient options for proto=fd
[   45.974161][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.981405][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.988949][ T4204] bridge_slave_0: entered allmulticast mode
[   45.997163][ T4204] bridge_slave_0: entered promiscuous mode
[   46.006781][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.013959][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.021428][ T4204] bridge_slave_1: entered allmulticast mode
[   46.028497][ T4204] bridge_slave_1: entered promiscuous mode
[   46.042138][ T4296] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   46.050483][ T4296] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   46.063377][ T4204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.083193][ T4204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.104348][ T4204] team0: Port device team_slave_0 added
[   46.112695][ T4204] team0: Port device team_slave_1 added
[   46.145075][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.152125][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.178245][ T4204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.191125][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.198188][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.224212][ T4204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.272049][ T4204] hsr_slave_0: entered promiscuous mode
[   46.285313][ T4204] hsr_slave_1: entered promiscuous mode
[   46.299210][ T4204] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.326496][ T4204] Cannot create hsr debugfs directory
[   46.490947][ T4204] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   46.518172][ T4204] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   46.545663][ T4204] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   46.574171][ T4204] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   46.682111][ T4204] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.723828][ T4204] 8021q: adding VLAN 0 to HW filter on device team0
[   46.735340][ T4340] Illegal XDP return value 4294967274 on prog  (id 207) dev N/A, expect packet loss!
[   46.757540][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.764741][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.832168][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.839321][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.968185][ T4359] syz.1.251[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.968338][ T4359] syz.1.251[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.980226][ T4359] syz.1.251[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.027131][ T4204] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.052827][ T4369] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   47.061240][ T4369] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   47.097116][ T4376] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   47.105425][ T4376] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   47.299848][ T4204] veth0_vlan: entered promiscuous mode
[   47.311342][ T4204] veth1_vlan: entered promiscuous mode
[   47.339869][ T4204] veth0_macvtap: entered promiscuous mode
[   47.349218][ T4204] veth1_macvtap: entered promiscuous mode
[   47.359631][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.370169][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.380048][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.390521][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.400414][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.410918][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.420869][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.431407][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.442953][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.459772][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.470255][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.489795][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.508257][ T4204] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517028][ T4204] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.525903][ T4204] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.534748][ T4204] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.750110][   T29] kauditd_printk_skb: 284 callbacks suppressed
[   47.750144][   T29] audit: type=1400 audit(1737207128.187:885): avc:  denied  { write } for  pid=4435 comm="syz.6.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.784759][ T4436] bridge0: entered promiscuous mode
[   47.793359][ T4436] macvlan2: entered promiscuous mode
[   47.815254][ T4436] bridge0: port 3(macvlan2) entered blocking state
[   47.822037][ T4436] bridge0: port 3(macvlan2) entered disabled state
[   47.841315][ T4436] macvlan2: entered allmulticast mode
[   47.846754][ T4436] bridge0: entered allmulticast mode
[   47.860207][ T4436] macvlan2: left allmulticast mode
[   47.865399][ T4436] bridge0: left allmulticast mode
[   47.872056][ T4436] bridge0: left promiscuous mode
[   48.579241][ T4477] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   48.587499][ T4477] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   48.645980][   T29] audit: type=1326 audit(1737207129.077:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.672828][   T29] audit: type=1326 audit(1737207129.107:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.696390][   T29] audit: type=1326 audit(1737207129.107:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.720590][   T29] audit: type=1326 audit(1737207129.107:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.726909][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[   48.763580][   T29] audit: type=1326 audit(1737207129.107:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.776578][ T4492] bond_slave_1: mtu greater than device maximum
[   48.786889][   T29] audit: type=1326 audit(1737207129.107:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.808194][ T4482] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   48.816529][   T29] audit: type=1326 audit(1737207129.107:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.847118][   T29] audit: type=1326 audit(1737207129.107:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.870545][   T29] audit: type=1326 audit(1737207129.107:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   48.955835][ T4505] syz.1.282[4505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.955912][ T4505] syz.1.282[4505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.972062][ T4505] syz.1.282[4505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.061843][ T4518] mmap: syz.1.287 (4518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.174559][ T4538] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   49.207427][ T4542] syz.1.291: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   49.222093][ T4542] CPU: 1 UID: 0 PID: 4542 Comm: syz.1.291 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   49.232743][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   49.242858][ T4542] Call Trace:
[   49.246159][ T4542]  <TASK>
[   49.249110][ T4542]  dump_stack_lvl+0xf2/0x150
[   49.253756][ T4542]  dump_stack+0x15/0x1a
[   49.258026][ T4542]  warn_alloc+0x145/0x1b0
[   49.262461][ T4542]  ? __vmalloc_node_range_noprof+0x88/0xe80
[   49.268396][ T4542]  ? tracing_record_taskinfo_sched_switch+0x6f/0x270
[   49.275102][ T4542]  __vmalloc_node_range_noprof+0xaa/0xe80
[   49.280847][ T4542]  ? probe_sched_wakeup+0x81/0xa0
[   49.285901][ T4542]  ? ttwu_do_activate+0x206/0x240
[   49.290978][ T4542]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   49.296796][ T4542]  ? try_to_wake_up+0x35e/0x570
[   49.301663][ T4542]  ? __rcu_read_unlock+0x4e/0x70
[   49.306631][ T4542]  ? avc_has_perm_noaudit+0x1cc/0x210
[   49.312215][ T4542]  ? should_fail_ex+0x31/0x230
[   49.316996][ T4542]  ? xskq_create+0x36/0xd0
[   49.321592][ T4542]  ? should_failslab+0x8f/0xb0
[   49.326427][ T4542]  vmalloc_user_noprof+0x59/0x70
[   49.331441][ T4542]  ? xskq_create+0x79/0xd0
[   49.335923][ T4542]  xskq_create+0x79/0xd0
[   49.340207][ T4542]  xsk_init_queue+0x82/0xd0
[   49.344715][ T4542]  xsk_setsockopt+0x388/0x520
[   49.349475][ T4542]  ? __pfx_xsk_setsockopt+0x10/0x10
[   49.354739][ T4542]  __sys_setsockopt+0x187/0x200
[   49.359625][ T4542]  __x64_sys_setsockopt+0x66/0x80
[   49.364709][ T4542]  x64_sys_call+0x282e/0x2dc0
[   49.369664][ T4542]  do_syscall_64+0xc9/0x1c0
[   49.374186][ T4542]  ? clear_bhb_loop+0x55/0xb0
[   49.378885][ T4542]  ? clear_bhb_loop+0x55/0xb0
[   49.383578][ T4542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.389491][ T4542] RIP: 0033:0x7fa117d75d29
[   49.393994][ T4542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.413780][ T4542] RSP: 002b:00007fa1163e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   49.422230][ T4542] RAX: ffffffffffffffda RBX: 00007fa117f65fa0 RCX: 00007fa117d75d29
[   49.430293][ T4542] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   49.438289][ T4542] RBP: 00007fa117df1b08 R08: 0000000000000004 R09: 0000000000000000
[   49.446286][ T4542] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[   49.454329][ T4542] R13: 0000000000000000 R14: 00007fa117f65fa0 R15: 00007ffd5bd5cc48
[   49.462335][ T4542]  </TASK>
[   49.465473][ T4542] Mem-Info:
[   49.468727][ T4542] active_anon:4799 inactive_anon:0 isolated_anon:0
[   49.468727][ T4542]  active_file:5002 inactive_file:1999 isolated_file:0
[   49.468727][ T4542]  unevictable:0 dirty:1488 writeback:0
[   49.468727][ T4542]  slab_reclaimable:2843 slab_unreclaimable:13588
[   49.468727][ T4542]  mapped:28801 shmem:326 pagetables:853
[   49.468727][ T4542]  sec_pagetables:0 bounce:0
[   49.468727][ T4542]  kernel_misc_reclaimable:0
[   49.468727][ T4542]  free:1903487 free_pcp:10228 free_cma:0
[   49.513583][ T4542] Node 0 active_anon:19312kB inactive_anon:0kB active_file:20008kB inactive_file:7996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115204kB dirty:5952kB writeback:0kB shmem:1304kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no
[   49.541483][ T4542] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   49.568468][ T4542] lowmem_reserve[]: 0 2884 7863 0
[   49.573545][ T4542] Node 0 DMA32 free:2950376kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[   49.602021][ T4542] lowmem_reserve[]: 0 0 4978 0
[   49.607018][ T4542] Node 0 Normal free:4648212kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:19236kB inactive_anon:0kB active_file:20008kB inactive_file:8004kB unevictable:60kB writepending:5988kB present:5242880kB managed:5098208kB mlocked:60kB bounce:0kB free_pcp:37284kB local_pcp:25656kB free_cma:0kB
[   49.637549][ T4542] lowmem_reserve[]: 0 0 0 0
[   49.642221][ T4542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   49.655170][ T4542] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950376kB
[   49.671534][ T4542] Node 0 Normal: 1*4kB (M) 98*8kB (U) 34*16kB (UM) 39*32kB (UME) 28*64kB (UME) 24*128kB (UE) 54*256kB (UE) 45*512kB (UME) 38*1024kB (UME) 29*2048kB (UM) 1100*4096kB (UM) = 4648212kB
[   49.689864][ T4542] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   49.699570][ T4542] 7332 total pagecache pages
[   49.704197][ T4542] 0 pages in swap cache
[   49.708448][ T4542] Free swap  = 124996kB
[   49.712625][ T4542] Total swap = 124996kB
[   49.716822][ T4542] 2097051 pages RAM
[   49.720748][ T4542] 0 pages HighMem/MovableOnly
[   49.725518][ T4542] 80182 pages reserved
[   49.742055][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'.
[   49.865825][ T4559] syz.1.296[4559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.865963][ T4559] syz.1.296[4559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.890893][ T4559] syz.1.296[4559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.999937][ T4566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.124008][ T4573] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   50.167788][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   50.177260][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[   50.330724][ T4590] syz.1.308[4590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.330869][ T4590] syz.1.308[4590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.342471][ T4590] syz.1.308[4590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.378444][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   50.399153][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'.
[   50.484115][ T4604] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   50.514111][ T4609] netlink: 'syz.5.315': attribute type 13 has an invalid length.
[   50.531195][ T4609] gretap0: refused to change device tx_queue_len
[   50.537548][ T4609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   50.590137][ T4613] loop6: detected capacity change from 0 to 256
[   50.606708][ T4613] FAT-fs (loop6): Directory bread(block 64) failed
[   50.613628][ T4613] FAT-fs (loop6): Directory bread(block 65) failed
[   50.620319][ T4613] FAT-fs (loop6): Directory bread(block 66) failed
[   50.627135][ T4613] FAT-fs (loop6): Directory bread(block 67) failed
[   50.633767][ T4613] FAT-fs (loop6): Directory bread(block 68) failed
[   50.640695][ T4613] FAT-fs (loop6): Directory bread(block 69) failed
[   50.647379][ T4613] FAT-fs (loop6): Directory bread(block 70) failed
[   50.654541][ T4613] FAT-fs (loop6): Directory bread(block 71) failed
[   50.662531][ T4613] FAT-fs (loop6): Directory bread(block 72) failed
[   50.669154][ T4613] FAT-fs (loop6): Directory bread(block 73) failed
[   50.709887][ T4613] syz.6.317: attempt to access beyond end of device
[   50.709887][ T4613] loop6: rw=2049, sector=1224, nr_sectors = 608 limit=256
[   50.725588][ T4613] syz.6.317: attempt to access beyond end of device
[   50.725588][ T4613] loop6: rw=2049, sector=1864, nr_sectors = 1440 limit=256
[   50.753936][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'.
[   50.763257][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'.
[   50.826104][ T4633] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   50.985977][ T4657] syz.3.328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   51.042560][ T4663] loop2: detected capacity change from 0 to 128
[   51.233825][ T4669] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.260393][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'.
[   51.277169][ T4673] loop6: detected capacity change from 0 to 512
[   51.284240][ T4673] EXT4-fs: inline encryption not supported
[   51.292629][ T4673] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   51.304203][ T4673] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[   51.308031][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'.
[   51.314516][ T4673] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.333: Corrupt directory, running e2fsck is recommended
[   51.326706][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   51.337167][ T4673] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[   51.353422][ T4673] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.333: corrupted in-inode xattr: invalid ea_ino
[   51.377294][ T4679] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   51.385378][ T4673] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.333: couldn't read orphan inode 15 (err -117)
[   51.404879][ T4681] syz.1.336[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.413870][ T4673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.442120][ T4673] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   51.453700][ T4673] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[   51.463913][ T4673] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.333: Corrupt directory, running e2fsck is recommended
[   51.499029][ T4673] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   51.510584][ T4673] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[   51.521047][ T4673] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.333: Corrupt directory, running e2fsck is recommended
[   51.548146][ T4204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.613408][ T4683] IPv6: NLM_F_REPLACE set, but no existing node found!
[   51.632832][ T4701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4701 comm=syz.1.344
[   51.663217][ T4697] syzkaller0: entered promiscuous mode
[   51.668766][ T4697] syzkaller0: entered allmulticast mode
[   51.734151][ T4711] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   51.803076][ T4719] loop6: detected capacity change from 0 to 128
[   51.853151][ T4726] loop6: detected capacity change from 0 to 256
[   52.005531][ T4744] bridge_slave_1: left allmulticast mode
[   52.011439][ T4744] bridge_slave_1: left promiscuous mode
[   52.017147][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.028184][ T4744] bridge_slave_0: left allmulticast mode
[   52.033960][ T4744] bridge_slave_0: left promiscuous mode
[   52.039751][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.127367][ T4755] loop6: detected capacity change from 0 to 256
[   52.138771][ T4755] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.158900][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   52.396414][ T4802] netlink: 'syz.2.378': attribute type 39 has an invalid length.
[   52.405413][ T4802] veth1_macvtap: left promiscuous mode
[   52.415910][ T4804] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   52.423833][ T4804] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   52.877829][   T29] kauditd_printk_skb: 306 callbacks suppressed
[   52.877847][   T29] audit: type=1400 audit(1737207133.307:1201): avc:  denied  { write } for  pid=4829 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   52.903530][   T29] audit: type=1326 audit(1737207133.307:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   52.926889][   T29] audit: type=1326 audit(1737207133.307:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   52.950246][   T29] audit: type=1326 audit(1737207133.307:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   52.973668][   T29] audit: type=1326 audit(1737207133.307:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   52.996923][   T29] audit: type=1326 audit(1737207133.307:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   53.021031][   T29] audit: type=1326 audit(1737207133.307:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   53.044417][   T29] audit: type=1326 audit(1737207133.307:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   53.067676][   T29] audit: type=1326 audit(1737207133.307:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   53.091210][   T29] audit: type=1326 audit(1737207133.307:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf7c1f5d29 code=0x7ffc0000
[   53.667730][ T4885] loop2: detected capacity change from 0 to 512
[   53.679077][ T4885] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   53.750012][ T4894] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   53.889168][ T4917] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   54.032338][ T4939] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   54.145034][ T4947] netlink: 'syz.1.441': attribute type 3 has an invalid length.
[   54.183698][ T4954] loop6: detected capacity change from 0 to 256
[   54.299197][ T4970] loop6: detected capacity change from 0 to 512
[   54.370509][ T4970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.388625][ T4970] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.405366][ T4989] bridge_slave_1: left allmulticast mode
[   54.411189][ T4989] bridge_slave_1: left promiscuous mode
[   54.416957][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.442166][ T4989] bridge_slave_0: left allmulticast mode
[   54.448076][ T4989] bridge_slave_0: left promiscuous mode
[   54.453905][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.531442][ T5000] bond_slave_1: entered promiscuous mode
[   54.538167][ T5000] bond_slave_1: left promiscuous mode
[   54.814372][ T4204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.832652][ T5048] __nla_validate_parse: 13 callbacks suppressed
[   54.832670][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'.
[   54.880131][ T5048] bridge_slave_1: left allmulticast mode
[   54.885843][ T5048] bridge_slave_1: left promiscuous mode
[   54.891547][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.942501][ T5059] loop2: detected capacity change from 0 to 1024
[   54.960748][ T5048] bridge_slave_0: left allmulticast mode
[   54.962070][ T5064] netlink: '+}[@': attribute type 10 has an invalid length.
[   54.966417][ T5048] bridge_slave_0: left promiscuous mode
[   54.981027][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.991355][ T5059] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   55.011228][ T5059] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   55.038120][ T5059] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #32: comm syz.2.470: iget: special inode unallocated
[   55.051255][ T5059] EXT4-fs (loop2): no journal found
[   55.051269][ T5059] EXT4-fs (loop2): can't get journal size
[   55.052771][ T5059] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.470: iget: special inode unallocated
[   55.052980][ T5059] EXT4-fs (loop2): failed to initialize system zone (-117)
[   55.053006][ T5059] EXT4-fs (loop2): mount failed
[   55.078938][ T5064] syz_tun: entered promiscuous mode
[   55.099326][ T5064] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   55.137898][ T5075] bpf_get_probe_write_proto: 5 callbacks suppressed
[   55.137915][ T5075] syz.1.474[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.137983][ T5075] syz.1.474[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.138052][ T5075] syz.1.474[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.202402][ T5081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'.
[   55.265349][ T5083] loop2: detected capacity change from 0 to 512
[   55.272279][ T5083] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.280566][ T5083] EXT4-fs: Ignoring removed mblk_io_submit option
[   55.291350][ T5083] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   55.300308][ T5083] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   55.313076][ T5083] EXT4-fs (loop2): 1 truncate cleaned up
[   55.321437][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.335921][ T5083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5083 comm=syz.2.478
[   55.361673][ T5092] tmpfs: Unknown parameter 'mpons'
[   55.381064][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.490016][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'.
[   55.510185][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'.
[   55.552786][ T5122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.563298][ T5122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.637322][ T5132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'.
[   55.792413][ T5147] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002
[   55.801591][ T5148] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 1, id = 0
[   55.910687][ T5160] siw: device registration error -23
[   56.098448][ T5185] loop2: detected capacity change from 0 to 512
[   56.371303][ T5223] ip6gre1: entered allmulticast mode
[   56.416165][ T5223] loop2: detected capacity change from 0 to 512
[   56.424135][ T5223] EXT4-fs: Ignoring removed i_version option
[   56.432396][ T5223] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   56.443138][ T5223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002]
[   56.451400][ T5223] System zones: 1-12
[   56.455554][ T5223] EXT4-fs (loop2): orphan cleanup on readonly fs
[   56.462176][ T5223] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.517: invalid indirect mapped block 12 (level 1)
[   56.476759][ T5223] EXT4-fs (loop2): Remounting filesystem read-only
[   56.483638][ T5223] EXT4-fs (loop2): 1 truncate cleaned up
[   56.496170][ T5223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   56.521570][ T5223] SELinux: (dev loop2, type ext4) getxattr errno 5
[   56.544896][ T5223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   56.569567][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'.
[   56.637002][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.652468][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.854380][ T5260] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[   56.862651][ T5260] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[   56.984679][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.531'.
[   57.003976][ T5271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.531'.
[   57.021544][ T5274] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   57.029855][ T5274] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   57.125386][ T5286] loop6: detected capacity change from 0 to 1024
[   57.151267][ T5291] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   57.159591][ T5291] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   57.170791][ T5286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.379301][ T4204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.481416][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[   57.538024][ T5337] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   57.618807][ T5337] netlink: 24 bytes leftover after parsing attributes in process `+}[@'.
[   57.637679][ T5361] siw: device registration error -23
[   57.813876][ T5377] vlan2: entered promiscuous mode
[   57.842156][ T5377] bond0: entered promiscuous mode
[   57.847297][ T5377] bond_slave_0: entered promiscuous mode
[   57.853098][ T5377] bond_slave_1: entered promiscuous mode
[   57.862799][ T5377] bond0: left promiscuous mode
[   57.867604][ T5377] bond_slave_0: left promiscuous mode
[   57.873165][ T5377] bond_slave_1: left promiscuous mode
[   57.928768][   T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   58.077124][ T5397] siw: device registration error -23
[   58.109661][   T29] kauditd_printk_skb: 455 callbacks suppressed
[   58.109678][   T29] audit: type=1400 audit(1737207138.547:1666): avc:  denied  { getopt } for  pid=5398 comm="syz.5.565" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.277754][ T5406] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 !
[   58.295624][   T29] audit: type=1400 audit(1737207138.727:1667): avc:  denied  { bind } for  pid=5405 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.299491][ T5406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5406 comm=syz.5.568
[   58.401520][   T29] audit: type=1326 audit(1737207138.837:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   58.425821][   T29] audit: type=1326 audit(1737207138.837:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   58.450071][   T29] audit: type=1326 audit(1737207138.837:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   58.473741][   T29] audit: type=1326 audit(1737207138.837:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   58.481769][ T5421] syz.5.571[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.497966][   T29] audit: type=1326 audit(1737207138.837:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa117d75d29 code=0x7ffc0000
[   58.533968][ T5421] syz.5.571[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.534042][ T5421] syz.5.571[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.577526][   T29] audit: type=1326 audit(1737207139.007:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b3c25d29 code=0x7ffc0000
[   58.609640][ T5430] siw: device registration error -23
[   58.612930][   T29] audit: type=1326 audit(1737207139.007:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f84b3c25d29 code=0x7ffc0000
[   58.642585][   T29] audit: type=1326 audit(1737207139.007:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b3c25d29 code=0x7ffc0000
[   58.835185][ T5454] syz.5.586[5454] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.835265][ T5454] syz.5.586[5454] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.838329][ T5445] 9pnet_fd: Insufficient options for proto=fd
[   58.865812][ T5454] syz.5.586[5454] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.896621][ T5445] bond0: entered promiscuous mode
[   58.913051][ T5445] bond_slave_0: entered promiscuous mode
[   58.918816][ T5445] bond_slave_1: entered promiscuous mode
[   58.952355][ T5473] netlink: 'syz.1.593': attribute type 39 has an invalid length.
[   58.969217][ T5474] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.986145][ T5473] veth1_macvtap: left promiscuous mode
[   59.052963][ T5474] syzkaller0: entered promiscuous mode
[   59.058531][ T5474] syzkaller0: entered allmulticast mode
[   59.458338][ T5530] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   59.466563][ T5530] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   59.522392][ T5537] netlink: 'syz.3.619': attribute type 39 has an invalid length.
[   59.531959][ T5537] veth1_macvtap: left promiscuous mode
[   59.595924][ T5543] warn_alloc: 9 callbacks suppressed
[   59.595977][ T5543] syz.3.622: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   59.616086][ T5543] CPU: 1 UID: 0 PID: 5543 Comm: syz.3.622 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   59.626711][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.636832][ T5543] Call Trace:
[   59.637824][ T5544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=5544 comm=syz.2.621
[   59.640149][ T5543]  <TASK>
[   59.640161][ T5543]  dump_stack_lvl+0xf2/0x150
[   59.660125][ T5543]  dump_stack+0x15/0x1a
[   59.664389][ T5543]  warn_alloc+0x145/0x1b0
[   59.668756][ T5543]  ? __vmalloc_node_range_noprof+0x88/0xe80
[   59.674766][ T5543]  ? common_lsm_audit+0x920/0x1010
[   59.679975][ T5543]  __vmalloc_node_range_noprof+0xaa/0xe80
[   59.685773][ T5543]  ? slow_avc_audit+0xf9/0x140
[   59.690573][ T5543]  ? should_fail_ex+0x31/0x230
[   59.695421][ T5543]  ? xskq_create+0x36/0xd0
[   59.699867][ T5543]  ? should_failslab+0x8f/0xb0
[   59.704681][ T5543]  vmalloc_user_noprof+0x59/0x70
[   59.709763][ T5543]  ? xskq_create+0x79/0xd0
[   59.714230][ T5543]  xskq_create+0x79/0xd0
[   59.718524][ T5543]  xsk_init_queue+0x82/0xd0
[   59.723091][ T5543]  xsk_setsockopt+0x388/0x520
[   59.727785][ T5543]  ? __pfx_xsk_setsockopt+0x10/0x10
[   59.733004][ T5543]  __sys_setsockopt+0x187/0x200
[   59.737876][ T5543]  __x64_sys_setsockopt+0x66/0x80
[   59.743045][ T5543]  x64_sys_call+0x282e/0x2dc0
[   59.747784][ T5543]  do_syscall_64+0xc9/0x1c0
[   59.752301][ T5543]  ? clear_bhb_loop+0x55/0xb0
[   59.757085][ T5543]  ? clear_bhb_loop+0x55/0xb0
[   59.761843][ T5543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.767789][ T5543] RIP: 0033:0x7fdf7c1f5d29
[   59.772214][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.791891][ T5543] RSP: 002b:00007fdf7a861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   59.800314][ T5543] RAX: ffffffffffffffda RBX: 00007fdf7c3e5fa0 RCX: 00007fdf7c1f5d29
[   59.808315][ T5543] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   59.816302][ T5543] RBP: 00007fdf7c271b08 R08: 0000000000000004 R09: 0000000000000000
[   59.824286][ T5543] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[   59.832337][ T5543] R13: 0000000000000000 R14: 00007fdf7c3e5fa0 R15: 00007ffcc2536dd8
[   59.840347][ T5543]  </TASK>
[   59.843460][ T5543] Mem-Info:
[   59.846580][ T5543] active_anon:5346 inactive_anon:2 isolated_anon:0
[   59.846580][ T5543]  active_file:4811 inactive_file:12257 isolated_file:0
[   59.846580][ T5543]  unevictable:0 dirty:101 writeback:0
[   59.846580][ T5543]  slab_reclaimable:2898 slab_unreclaimable:14160
[   59.846580][ T5543]  mapped:28992 shmem:341 pagetables:1070
[   59.846580][ T5543]  sec_pagetables:0 bounce:0
[   59.846580][ T5543]  kernel_misc_reclaimable:0
[   59.846580][ T5543]  free:1896658 free_pcp:5971 free_cma:0
[   59.892164][ T5543] Node 0 active_anon:21384kB inactive_anon:8kB active_file:19244kB inactive_file:49028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115968kB dirty:404kB writeback:0kB shmem:1364kB writeback_tmp:0kB kernel_stack:3296kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no
[   59.920265][ T5543] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.947206][ T5543] lowmem_reserve[]: 0 2884 7863 0
[   59.952302][ T5543] Node 0 DMA32 free:2950376kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[   59.962276][ T5553] loop2: detected capacity change from 0 to 512
[   59.980729][ T5543] lowmem_reserve[]: 0 0 4978 0
[   59.980791][ T5543] Node 0 Normal free:4620896kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:21732kB inactive_anon:8kB active_file:19244kB inactive_file:49028kB unevictable:0kB writepending:404kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:19880kB local_pcp:17252kB free_cma:0kB
[   59.980947][ T5543] lowmem_reserve[]: 0 0 0 0
[   59.980976][ T5543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   59.981162][ T5543] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950376kB
[   59.981452][ T5543] Node 0 Normal: 32*4kB (UME) 117*8kB (UM) 36*16kB 
[   60.025029][ T5553] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   60.027466][ T5543] (UME) 49*32kB (UME) 49*64kB (UME) 31*128kB (UME) 62*256kB (UME) 54*512kB (UME) 42*1024kB (UME) 31*2048kB (UM) 1089*4096kB (UM) = 4620872kB
[   60.084000][ T5543] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   60.093327][ T5543] 17443 total pagecache pages
[   60.098048][ T5543] 6 pages in swap cache
[   60.102293][ T5543] Free swap  = 124600kB
[   60.106461][ T5543] Total swap = 124996kB
[   60.110634][ T5543] 2097051 pages RAM
[   60.114451][ T5543] 0 pages HighMem/MovableOnly
[   60.119207][ T5543] 80182 pages reserved
[   60.168484][ T5560] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   60.176726][ T5560] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   60.207352][ T5568] xt_hashlimit: max too large, truncated to 1048576
[   60.215633][ T5568] Cannot find set identified by id 0 to match
[   60.326750][ T5577] loop6: detected capacity change from 0 to 512
[   60.362966][ T5577] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.630: casefold flag without casefold feature
[   60.374507][ T5588] __nla_validate_parse: 9 callbacks suppressed
[   60.374525][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[   60.380772][ T5577] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.630: couldn't read orphan inode 15 (err -117)
[   60.408341][ T5577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.423061][ T5592] siw: device registration error -23
[   60.442690][ T5577] EXT4-fs error (device loop6): ext4_add_entry:2444: inode #2: comm syz.6.630: Directory hole found for htree leaf block 0
[   60.485504][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'.
[   60.496092][ T5588] bridge_slave_1: left allmulticast mode
[   60.501789][ T5588] bridge_slave_1: left promiscuous mode
[   60.507685][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.519204][ T5588] bridge_slave_0: left allmulticast mode
[   60.524978][ T5588] bridge_slave_0: left promiscuous mode
[   60.530680][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.595271][ T4204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.619948][ T5614] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   60.628228][ T5614] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   60.743129][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[   60.800776][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[   60.868348][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.648'.
[   60.953048][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'.
[   60.995243][ T5660] geneve0: entered promiscuous mode
[   61.004222][ T5660] geneve0: left promiscuous mode
[   61.020402][ T5670] hsr_slave_1 (unregistering): left promiscuous mode
[   61.052919][ T5677] netlink: 'syz.3.651': attribute type 1 has an invalid length.
[   61.060806][ T5677] netlink: 'syz.3.651': attribute type 2 has an invalid length.
[   61.097187][ T5686] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   61.105535][ T5686] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   61.207065][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[   61.279306][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'.
[   61.321762][ T5722] Cannot find set identified by id 0 to match
[   61.385003][ T5731] netlink: 'syz.6.661': attribute type 4 has an invalid length.
[   61.393421][ T5731] netlink: 10460 bytes leftover after parsing attributes in process `syz.6.661'.
[   61.411025][ T5734] tmpfs: Unknown parameter 'mp_l'
[   61.431837][ T5731] ebtables: ebtables: counters copy to user failed while replacing table
[   61.507203][ T5742] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   61.515528][ T5742] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   61.586195][ T5750] siw: device registration error -23
[   61.616201][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[   61.718486][ T5766] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   61.726717][ T5766] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   61.747319][ T5768] loop2: detected capacity change from 0 to 1024
[   61.756384][ T5768] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   61.769028][ T5768] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   61.780232][ T5409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   61.783035][ T5768] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   61.801761][ T5768] EXT4-fs (loop2): invalid journal inode
[   61.807510][ T5768] EXT4-fs (loop2): can't get journal size
[   61.813784][ T5768] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.676: blocks 2-2 from inode overlap system zone
[   61.828078][ T5768] EXT4-fs (loop2): failed to initialize system zone (-117)
[   61.835368][ T5768] EXT4-fs (loop2): mount failed
[   62.394937][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.403043][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.483528][ T5812] netlink: 'syz.6.693': attribute type 39 has an invalid length.
[   62.492184][ T5812] veth1_macvtap: left promiscuous mode
[   62.556410][ T5821] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   62.601537][ T5823] siw: device registration error -23
[   62.610848][ T5826] loop6: detected capacity change from 0 to 512
[   62.618498][ T5826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   62.631676][ T5826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   62.644391][ T5826] EXT4-fs (loop6): 1 truncate cleaned up
[   62.652632][ T5826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.754908][ T4204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.852384][ T5854] netlink: 'syz.6.709': attribute type 39 has an invalid length.
[   62.910692][ T5857] siw: device registration error -23
[   62.917294][ T5866] wireguard0: entered promiscuous mode
[   62.922867][ T5866] wireguard0: entered allmulticast mode
[   63.183112][   T29] kauditd_printk_skb: 602 callbacks suppressed
[   63.183129][   T29] audit: type=1400 audit(1737207143.617:2278): avc:  denied  { bind } for  pid=5893 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   63.208761][   T29] audit: type=1400 audit(1737207143.617:2279): avc:  denied  { name_bind } for  pid=5893 comm="syz.1.719" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   63.230484][   T29] audit: type=1400 audit(1737207143.617:2280): avc:  denied  { node_bind } for  pid=5893 comm="syz.1.719" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   63.257342][   T29] audit: type=1400 audit(1737207143.687:2281): avc:  denied  { write } for  pid=5893 comm="syz.1.719" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   63.278725][   T29] audit: type=1400 audit(1737207143.687:2282): avc:  denied  { connect } for  pid=5893 comm="syz.1.719" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   63.300297][   T29] audit: type=1400 audit(1737207143.687:2283): avc:  denied  { name_connect } for  pid=5893 comm="syz.1.719" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   63.367691][   T29] audit: type=1400 audit(1737207143.797:2284): avc:  denied  { ioctl } for  pid=5905 comm="syz.2.723" path="socket:[11192]" dev="sockfs" ino=11192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.424203][ T5910] netlink: 'syz.6.724': attribute type 39 has an invalid length.
[   63.460010][   T29] audit: type=1400 audit(1737207143.897:2285): avc:  denied  { bind } for  pid=5905 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.508246][   T29] audit: type=1400 audit(1737207143.897:2286): avc:  denied  { write } for  pid=5905 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.522518][ T5915] vxcan3: entered promiscuous mode
[   63.532884][ T5915] vxcan3: entered allmulticast mode
[   63.556616][   T29] audit: type=1400 audit(1737207143.947:2287): avc:  denied  { mounton } for  pid=5914 comm="syz.3.726" path="/140/bus" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   63.678430][   T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   64.143119][ T5946] netlink: 'syz.1.738': attribute type 39 has an invalid length.
[   64.348589][ T5967] siw: device registration error -23
[   64.653615][ T5994] siw: device registration error -23
[   64.710193][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118e7b800: rx timeout, send abort
[   64.719529][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118e7b800: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session.
[   64.904164][ T6020] siw: device registration error -23
[   65.204848][ T6047] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   65.213142][ T6047] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   65.390776][ T6065] uprobe: syz.1.787:6065 failed to unregister, leaking uprobe
[   65.488833][ T6064] uprobe: syz.1.787:6064 failed to unregister, leaking uprobe
[   65.750560][ T6115] __nla_validate_parse: 19 callbacks suppressed
[   65.750593][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[   65.785291][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'.
[   65.811333][ T6119] 9pnet_fd: Insufficient options for proto=fd
[   65.854016][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118517600: rx timeout, send abort
[   65.862263][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118c6c600: rx timeout, send abort
[   65.871217][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118517600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   65.885598][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118c6c600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.069104][ T6132] SELinux:  Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped).
[   66.086723][ T6132] bond1: entered promiscuous mode
[   66.091879][ T6132] bond1: entered allmulticast mode
[   66.097222][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.107664][ T6132] bond1 (unregistering): Released all slaves
[   66.174564][ T6141] loop2: detected capacity change from 0 to 128
[   66.196366][ T6143] siw: device registration error -23
[   66.224931][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[   66.255746][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'.
[   66.287537][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'.
[   66.333074][ T6105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.412146][ T6105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.452530][ T6105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.491593][ T6105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.526360][ T6156] chnl_net:caif_netlink_parms(): no params data found
[   66.540066][ T6169] netlink: 'syz.5.813': attribute type 1 has an invalid length.
[   66.797582][ T6197] siw: device registration error -23
[   66.849743][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.859713][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.869934][ T6105] bond0 (unregistering): Released all slaves
[   66.909392][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.912035][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'.
[   66.916506][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.934684][ T6156] bridge_slave_0: entered allmulticast mode
[   66.941813][ T6156] bridge_slave_0: entered promiscuous mode
[   66.948854][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.955945][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.963263][ T6156] bridge_slave_1: entered allmulticast mode
[   66.969766][ T6156] bridge_slave_1: entered promiscuous mode
[   66.983381][ T6105] hsr_slave_0: left promiscuous mode
[   66.989341][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'.
[   66.999298][ T6105] hsr_slave_1: left promiscuous mode
[   67.005128][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.012632][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.022226][ T6105] veth0_macvtap: left promiscuous mode
[   67.027891][ T6105] veth1_vlan: left promiscuous mode
[   67.033145][ T6105] veth0_vlan: left promiscuous mode
[   67.094641][ T6105] team0 (unregistering): Port device team_slave_1 removed
[   67.107997][ T6105] team0 (unregistering): Port device team_slave_0 removed
[   67.161912][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.190138][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.217882][ T6223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=6223 comm=syz.3.827
[   67.237583][ T6156] team0: Port device team_slave_0 added
[   67.246983][ T6156] team0: Port device team_slave_1 added
[   67.263742][ T6220] mmap: syz.5.825 (6220): VmData 29208576 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[   67.282807][ T6235] syz.3.828[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.282909][ T6235] syz.3.828[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.295076][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.306452][ T6235] syz.3.828[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.313335][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.350646][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.443344][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.450508][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.476593][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.519198][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.831'.
[   67.554642][ T6156] hsr_slave_0: entered promiscuous mode
[   67.568637][ T6156] hsr_slave_1: entered promiscuous mode
[   67.576470][ T6156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.589769][ T6156] Cannot create hsr debugfs directory
[   67.616059][ T6105] IPVS: stop unused estimator thread 0...
[   67.702844][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'.
[   67.746135][ T6156] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   67.770704][ T6156] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   67.788916][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.835'.
[   67.790482][ T6156] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   67.814107][ T6156] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   67.913392][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.947443][ T6156] 8021q: adding VLAN 0 to HW filter on device team0
[   67.957036][ T6293] siw: device registration error -23
[   67.973039][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.980222][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.002336][ T6291] .: renamed from bond0 (while UP)
[   68.022474][ T6299] netlink: 'syz.6.842': attribute type 21 has an invalid length.
[   68.035895][ T6299] netlink: 'syz.6.842': attribute type 1 has an invalid length.
[   68.044235][ T6297] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   68.048351][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.052464][ T6297] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   68.059468][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.161650][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.336067][ T6156] veth0_vlan: entered promiscuous mode
[   68.353135][ T6156] veth1_vlan: entered promiscuous mode
[   68.371535][ T6156] veth0_macvtap: entered promiscuous mode
[   68.381662][ T6156] veth1_macvtap: entered promiscuous mode
[   68.399951][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.410527][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.420508][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.431025][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.440962][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.451474][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.462326][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.475390][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.486056][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.495988][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.506495][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.518006][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.529157][ T6156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.538073][ T6156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.546786][ T6156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.555669][ T6156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.582171][   T29] kauditd_printk_skb: 194 callbacks suppressed
[   68.582189][   T29] audit: type=1400 audit(1737207149.017:2482): avc:  denied  { mounton } for  pid=6156 comm="syz-executor" path="/root/syzkaller.Q0vpwp/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   68.640774][   T29] audit: type=1400 audit(1737207149.017:2483): avc:  denied  { mount } for  pid=6156 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   68.662822][   T29] audit: type=1400 audit(1737207149.017:2484): avc:  denied  { mounton } for  pid=6156 comm="syz-executor" path="/root/syzkaller.Q0vpwp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   68.689717][   T29] audit: type=1400 audit(1737207149.017:2485): avc:  denied  { mounton } for  pid=6156 comm="syz-executor" path="/root/syzkaller.Q0vpwp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   68.717440][   T29] audit: type=1400 audit(1737207149.047:2486): avc:  denied  { mounton } for  pid=6156 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   68.740539][   T29] audit: type=1400 audit(1737207149.047:2487): avc:  denied  { mount } for  pid=6156 comm="syz-executor" name="/" dev="gadgetfs" ino=4496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   68.793641][   T29] audit: type=1326 audit(1737207149.217:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.7.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd551895d29 code=0x7ffc0000
[   68.817362][   T29] audit: type=1326 audit(1737207149.217:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.7.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd551895d29 code=0x7ffc0000
[   68.840745][   T29] audit: type=1326 audit(1737207149.217:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.7.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd551895d29 code=0x7ffc0000
[   68.926962][ T6378] FAULT_INJECTION: forcing a failure.
[   68.926962][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   68.940144][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.7.850 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   68.950765][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   68.960876][ T6378] Call Trace:
[   68.964227][ T6378]  <TASK>
[   68.967166][ T6378]  dump_stack_lvl+0xf2/0x150
[   68.971800][ T6378]  dump_stack+0x15/0x1a
[   68.975984][ T6378]  should_fail_ex+0x223/0x230
[   68.980702][ T6378]  should_fail+0xb/0x10
[   68.984867][ T6378]  should_fail_usercopy+0x1a/0x20
[   68.989905][ T6378]  _copy_from_user+0x1e/0xb0
[   68.994519][ T6378]  copy_msghdr_from_user+0x54/0x2a0
[   68.999764][ T6378]  ? __fget_files+0x17c/0x1c0
[   69.004470][ T6378]  __sys_sendmsg+0x13e/0x230
[   69.009090][ T6378]  __x64_sys_sendmsg+0x46/0x50
[   69.013880][ T6378]  x64_sys_call+0x2734/0x2dc0
[   69.018576][ T6378]  do_syscall_64+0xc9/0x1c0
[   69.023093][ T6378]  ? clear_bhb_loop+0x55/0xb0
[   69.027784][ T6378]  ? clear_bhb_loop+0x55/0xb0
[   69.032472][ T6378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.038537][ T6378] RIP: 0033:0x7fd551895d29
[   69.043009][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.062713][ T6378] RSP: 002b:00007fd54ff07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.071248][ T6378] RAX: ffffffffffffffda RBX: 00007fd551a85fa0 RCX: 00007fd551895d29
[   69.079240][ T6378] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000009
[   69.087226][ T6378] RBP: 00007fd54ff07090 R08: 0000000000000000 R09: 0000000000000000
[   69.095292][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.103291][ T6378] R13: 0000000000000000 R14: 00007fd551a85fa0 R15: 00007ffc0c5c0148
[   69.111297][ T6378]  </TASK>
[   69.295614][ T6384] loop6: detected capacity change from 0 to 8192
[   69.370940][ T6398] xt_CT: No such helper "syz0"
[   69.416873][   T29] audit: type=1326 audit(1737207149.847:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4866d5d29 code=0x7ffc0000
[   69.635252][ T6420] IPv6: Can't replace route, no match found
[   69.643821][ T6411] infiniband syz2: set active
[   69.648713][ T6411] infiniband syz2: added veth0_to_bond
[   69.686102][ T6411] RDS/IB: syz2: added
[   69.692255][ T6411] smc: adding ib device syz2 with port count 1
[   69.698859][ T6411] smc:    ib device syz2 port 1 has pnetid 
[   69.706640][ T6428] bond0: entered promiscuous mode
[   69.712082][ T6428] bond0: entered allmulticast mode
[   69.722712][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.738276][ T6428] bond0 (unregistering): Released all slaves
[   69.968865][ T6461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6461 comm=syz.5.869
[   70.000435][ T6464] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   70.008808][ T6464] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   70.433530][ T6492] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   70.441923][ T6492] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   70.557745][    C0] ==================================================================
[   70.565886][    C0] BUG: KCSAN: data-race in can_receive / can_stat_update
[   70.572951][    C0] 
[   70.575282][    C0] read-write to 0xffff88810b917468 of 8 bytes by interrupt on cpu 1:
[   70.583371][    C0]  can_receive+0x62/0x1f0
[   70.587761][    C0]  can_rcv+0xe7/0x180
[   70.591759][    C0]  __netif_receive_skb+0x123/0x280
[   70.596907][    C0]  process_backlog+0x22e/0x440
[   70.601708][    C0]  __napi_poll+0x63/0x3c0
[   70.606158][    C0]  net_rx_action+0x3a1/0x7f0
[   70.610788][    C0]  handle_softirqs+0xbf/0x280
[   70.615503][    C0]  run_ksoftirqd+0x1c/0x30
[   70.619948][    C0]  smpboot_thread_fn+0x31c/0x4c0
[   70.624923][    C0]  kthread+0x1d1/0x210
[   70.629007][    C0]  ret_from_fork+0x4b/0x60
[   70.633446][    C0]  ret_from_fork_asm+0x1a/0x30
[   70.638241][    C0] 
[   70.640574][    C0] read to 0xffff88810b917468 of 8 bytes by interrupt on cpu 0:
[   70.648153][    C0]  can_stat_update+0x444/0x6b0
[   70.652940][    C0]  call_timer_fn+0x3a/0x300
[   70.657471][    C0]  __run_timer_base+0x417/0x640
[   70.662358][    C0]  run_timer_softirq+0x31/0x70
[   70.667149][    C0]  handle_softirqs+0xbf/0x280
[   70.671866][    C0]  __irq_exit_rcu+0x3a/0xc0
[   70.676404][    C0]  sysvec_apic_timer_interrupt+0x73/0x80
[   70.682073][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   70.688083][    C0]  kthread_blkcg+0x36/0x80
[   70.692532][    C0]  blk_cgroup_congested+0x15/0xc0
[   70.697594][    C0]  __folio_throttle_swaprate+0x60/0x160
[   70.703180][    C0]  shmem_add_to_page_cache+0x285/0x4b0
[   70.708676][    C0]  shmem_get_folio_gfp+0x4f6/0xd90
[   70.713812][    C0]  shmem_fault+0xfa/0x250
[   70.718167][    C0]  __do_fault+0xb6/0x200
[   70.722439][    C0]  handle_mm_fault+0xe98/0x2ac0
[   70.727315][    C0]  __get_user_pages+0xf2c/0x2670
[   70.732294][    C0]  __mm_populate+0x25b/0x3b0
[   70.736910][    C0]  vm_mmap_pgoff+0x1d6/0x290
[   70.741538][    C0]  ksys_mmap_pgoff+0xd0/0x330
[   70.746250][    C0]  x64_sys_call+0x1940/0x2dc0
[   70.750951][    C0]  do_syscall_64+0xc9/0x1c0
[   70.755473][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.761395][    C0] 
[   70.763726][    C0] value changed: 0x0000000000000e1b -> 0x0000000000000e1c
[   70.770843][    C0] 
[   70.773194][    C0] Reported by Kernel Concurrency Sanitizer on:
[   70.779359][    C0] CPU: 0 UID: 0 PID: 6496 Comm: syz.6.883 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   70.789971][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   70.800046][    C0] ==================================================================
[   71.581026][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810cb5d200: rx timeout, send abort
[   71.589239][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810cb5ce00: rx timeout, send abort
[   71.597454][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810cb5d200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   71.611772][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810cb5ce00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.