last executing test programs:

7m7.388201756s ago: executing program 1 (id=1995):
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4fe8fd627116ef6b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x514da, 0x101, 0x8000000, 0x3, 0xfffffffe, 0x200001, 0x0, 0x7cce8c743ee810da})
close_range(r0, 0xffffffffffffffff, 0x0)

7m7.330813447s ago: executing program 1 (id=1996):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000280)={0xf, 0x800, 0x200, 0x1, 0x6, 0x4})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000070000009cbd9d0d3d", @ANYRES64=r1, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000f8ffffffb703000008000000b7040000f6000000850000004325e13c86e273f55ad3c3316fe42449000000958f26bae8155a03c5c3fc23854bbd2c3d8d93560b29ecadcc8ea7ffeea1278f77867b208c4e24802a2d020bca4665bbb93f034b3c002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8aa, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
listen(0xffffffffffffffff, 0xf)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000002c0)=0xd38e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0})
unshare(0x44040480)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x401, 0x1, 0x400, 0x21444, r3, 0x2, '\x00', r8, r2, 0x5, 0xa235, 0x1, 0x9, @void, @value, @void, @value}, 0x50)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7m7.181234629s ago: executing program 1 (id=2002):
unshare(0x28020480)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

7m7.160494229s ago: executing program 1 (id=2003):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = accept(0xffffffffffffffff, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000340)=0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001a00010400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000a0214000100ffffe000000000000080ffffffffffff1400030007"], 0x44}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1c6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x4040000)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001300), 0xff, 0x551, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0)
r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

7m7.04056819s ago: executing program 1 (id=2004):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c", 0x32)
close(0xffffffffffffffff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
pause()
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2ed6c06ace3d8bca9b5fe5cd252716d56eb69df2ac363d50b732a6eae479fa0f159b03d9686ac776a6a0c9127d1d227ce9493a8a1189117684eab57289679369a86635a0f0bd183539f862410ded2f80331377f48fd7255b879bb6e8e4cb5a29b7c34679f8daa53bb1c3de2c7cc4f3c6d21123ef5292c494d725725debf12570d750b4a1a9ec3b9c63671599b83725de518a31e69bc85548"])
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

7m6.740160984s ago: executing program 1 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "da"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x800)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/12], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x34, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xec5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c000888}, 0x21)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
unshare(0x64000600)
r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pwrite64(r8, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2)

7m6.739913664s ago: executing program 32 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "da"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x800)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/12], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x34, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xec5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c000888}, 0x21)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
unshare(0x64000600)
r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pwrite64(r8, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2)

24.010001813s ago: executing program 5 (id=10057):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @auto=[0x34, 0x32, 0x63, 0x18, 0x61, 0x35, 0x36, 0x34, 0x66, 0x32, 0x36, 0x31, 0x39, 0x63, 0x66, 0x34]}, &(0x7f0000000240)={0x0, "653b1d58ff2eb091f9c53155feecd59a83dc1383c6aa6a194e0fe70503d2c81e6f6c464d02b6de8aad78887bfa88ffbccea5e0b5e65674e6520f7ea3bcf072e4", 0x2a}, 0x48, 0xffffffffffffffff)
keyctl$clear(0x7, r1)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x4400, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x8, 0xf, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x8, 0x1, 0x401}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x20, &(0x7f0000000a40)={&(0x7f0000000880)=""/225, 0xe1, 0x0, &(0x7f0000000980)=""/144, 0x90}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0})
keyctl$link(0x8, r1, r7)

23.963080424s ago: executing program 5 (id=10062):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000007c0)={<r1=>0x0, 0xb0, &(0x7f0000000700)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8fd}, @in6={0xa, 0x4e21, 0xbc, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc3}]}, &(0x7f0000000800)=0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000008c0)={r1, 0x6c, 0x6, [0x200, 0x8, 0x3, 0x9, 0x1, 0x100c]}, &(0x7f0000000900)=0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x7fff, 0x1, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x880)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
socket$inet6(0xa, 0x1, 0x5)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000b74800000000000000e20000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000e5ff00000000000000000000000000000000ffffffff00000000"]}, 0x108)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x12)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r7, 0x2f, 0x6, 0x1a, 0x4, 0x40, @local, @remote, 0x10, 0x700, 0x1beb, 0xc65}})

23.879529895s ago: executing program 5 (id=10065):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000580), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf25010000000800020002000000080000fffffffff200000100030000000800020000e00000080002000200000008000240020000000800020002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x240088c5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r6}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
time(&(0x7f00000000c0))

22.892835758s ago: executing program 5 (id=10083):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), 0x14)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1310000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
close_range(r1, r1, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
unshare(0x22020400)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r4 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x1)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000)

22.817310959s ago: executing program 5 (id=10085):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0)

22.540851012s ago: executing program 5 (id=10098):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
readlink(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgroups(0x0, 0x0)

22.540253192s ago: executing program 33 (id=10098):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
readlink(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgroups(0x0, 0x0)

5.261840063s ago: executing program 4 (id=10514):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0)

5.161467674s ago: executing program 4 (id=10516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r3, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

5.143900014s ago: executing program 4 (id=10519):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
perf_event_open(0x0, 0x0, 0x40000000000000, r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000)
timer_create(0x1, &(0x7f00000002c0)={0x0, 0x24, 0x0, @thr={&(0x7f0000000240)="69f085cf896d376ebcf5338a5790f5bad5e76800c2d1f950d67fc453893ae68dc58e7e2d48fba16da2b7d75dc601c9ce1e49d8c19c12612c57054c8501cfd0f747983b21", &(0x7f0000000140)="4004b9635eaa8cd25e1c22153c829dccd70f3e1884388a48e977bd58353edda7e29ace13"}}, &(0x7f0000000340))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000017, 0x4031, 0xffffffffffffffff, 0xb9654000)
iopl(0x3)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$null(0xffffffffffffff9c, 0x0, 0x2b00, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@delchain={0x24, 0x5f, 0x7c194f663b6a2fc2, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xd, 0x2}, {0x8, 0x469307260434810a}}}, 0x24}}, 0x40010)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c000000000801020000000000000000050000040900010073797a300000000005000300840000002c00"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
iopl(0x7)
io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

1.58070239s ago: executing program 6 (id=10588):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0)

1.345925273s ago: executing program 6 (id=10593):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000"]}, 0x106)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000007c0)={<r1=>0x0, 0xb0, &(0x7f0000000700)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8fd}, @in6={0xa, 0x4e21, 0xbc, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc3}]}, &(0x7f0000000800)=0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000008c0)={r1, 0x6c, 0x6, [0x200, 0x8, 0x3, 0x9, 0x1, 0x100c]}, &(0x7f0000000900)=0x14)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x7fff, 0x1, 0x1, 0x80, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x880)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
socket$inet6(0xa, 0x1, 0x5)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000b74800000000000000e20000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000e5ff00000000000000000000000000000000ffffffff00000000"]}, 0x108)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x12)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r8, 0x2f, 0x6, 0x1a, 0x4, 0x40, @local, @remote, 0x10, 0x700, 0x1beb, 0xc65}})

1.293478854s ago: executing program 6 (id=10596):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0x8, {0x0, r2, 0x2}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES64, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000010400000002fcdbdf25000000", @ANYRES32=0x0, @ANYRESOCT], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x48000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
ustat(0x3, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
shmctl$SHM_LOCK(0x0, 0xb)
mlockall(0x3)

1.100874906s ago: executing program 3 (id=10602):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205)
ioctl$SG_IO(r1, 0x2285, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c2600001db3b8ece67c48685fd69704a69cfc0f9ca583ec7594cd6589c5fae1512f31cee79c2fb23bc6f43f499fe0333b0dc17af952ab4a6150cd49bf9cf78547b29524b35c8ecb0d6ac285828904747599e7bc1f2b6b9df6dd2e391ea155b3d025ed41f4dbb606bfab736c613e4eb359aced194568b70852a35c540710c75d2d53ab82d5861ac634183b815d741adaec94dad886d763222158fb41b2556d58d140c467e399417a0f14980ba66744a4cb9f62c7d80884be6155de5f5fd09d1441c1c4", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000080004000000000008000500000000000800060000000000"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
unshare(0x22000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="000000000000af000000000000000000000024c27a4f74050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/../file0\x00', &(0x7f00000005c0)=""/168, 0xa8)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffd91}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}}, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1e880, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})

854.839559ms ago: executing program 3 (id=10606):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/4111, 0x100f}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}, 0x40d60b70}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006)

622.498102ms ago: executing program 6 (id=10613):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x8040480)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@debug}, {}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@debug}, {@minixdf}, {@init_itable}, {@dioread_lock}, {@init_itable}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r0)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
lstat(&(0x7f0000000580)='./file0\x00', 0x0)

515.220224ms ago: executing program 0 (id=10616):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x0, 0x1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@multicast2}}, 0xe8)
unshare(0x20000000)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0)
pipe(&(0x7f0000000480))
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0xff00, 0x0, {0xffed, 0xc}, {0x0, 0x6}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer'])
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='btrfs_cow_block\x00', r0, 0x0, 0x7ff}, 0x18)
sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffffff90, 0xffff}, &(0x7f0000000080)=0x5, 0x0, 0x7f, 0x1, 0x9250, 0x1, 0x7e, 0x4}}], 0x58, 0x8004}, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea)

467.108554ms ago: executing program 3 (id=10617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0)

437.321334ms ago: executing program 4 (id=10618):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0xfffe, @remote}, 0x10, 0x0}, 0x0)

418.677274ms ago: executing program 6 (id=10619):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0)

407.529885ms ago: executing program 3 (id=10620):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x51031, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
connect$qrtr(r0, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc)
bind$qrtr(r0, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)

371.979345ms ago: executing program 4 (id=10621):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x8040480)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@debug}, {}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@debug}, {@minixdf}, {@init_itable}, {@dioread_lock}, {@init_itable}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r0)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
lstat(&(0x7f0000000580)='./file0\x00', 0x0)

360.988865ms ago: executing program 0 (id=10622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0x20000001)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsa(0x0, 0x16e293f7, 0x41)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x48c0}, 0x0)

312.004526ms ago: executing program 6 (id=10623):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0x8, {0x0, r2, 0x2}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES64, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000010400000002fcdbdf25000000", @ANYRES32=0x0, @ANYRESOCT], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x48000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
ustat(0x3, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
shmctl$SHM_LOCK(0x0, 0xb)
mlockall(0x3)

308.281176ms ago: executing program 2 (id=10624):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000)

307.917456ms ago: executing program 3 (id=10625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)

301.227576ms ago: executing program 0 (id=10626):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
openat$ppp(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10)
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
getresuid(0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socket$rds(0x15, 0x5, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)

268.501096ms ago: executing program 0 (id=10627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab0000000060a09040000000000000000020000038400048010000180090001006c617374000000007000018011000100666c6f775f6f66666c6f616400000000580002800900010073797a30000000000900010073797a31000000000900010073797a30000000000900010073797a30000000000900010073797a31000000000900010073797a31000000000900010073797a32000000000900010073797a30000000000900020073797a32"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

246.591107ms ago: executing program 2 (id=10628):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
keyctl$reject(0x13, 0x0, 0x10, 0x960c, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
fchdir(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x0, 0x0, 0x4}]}, 0x10)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10)

235.405537ms ago: executing program 3 (id=10629):
r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
unshare(0x20040600)
prctl$PR_SET_NAME(0xf, &(0x7f0000000100)=':-\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x5943, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xf}, {}, {}, {0x0, 0xa2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xb9ff}, {}, {0x0, 0x2}, {}, {0x0, 0x3, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xcf6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {0x4}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x7}, {}, {0x1}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r1, 0x0, 0xef}, 0x18)
syz_io_uring_setup(0x5f25, &(0x7f00000006c0)={0x0, 0xf333, 0x4, 0x0, 0x265}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000540))
r5 = epoll_create1(0x80000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r2, 0x2, 0x0, 0x1, {0x0, r6}})
r7 = fcntl$dupfd(r3, 0x406, r3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0xd8, 0xfffffffffffffffe}, 0x10)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000083c0)=@newtaction={0xc0, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0xac, 0x1, [@m_police={0xa8, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x79, 0x6, "80bd511c7c6de024a60775a46474049b715c065b89eab96251d1c70effbbbf4306ac2ee3b9338d9ef3fa9cbbc4812681371af5e20d6055f8860b645989a90eb418ebebcd16e7feb5fa25e07fc107ea0727f4b81a77f622757bd6554d00e47b0b15b26360b8ccaf98a06155bde148fd49060f35c157"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0xe0, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xd, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x800}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf5a}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d330}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

234.071637ms ago: executing program 0 (id=10630):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x8040480)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@debug}, {}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@debug}, {@minixdf}, {@init_itable}, {@dioread_lock}, {@init_itable}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r0)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
lstat(&(0x7f0000000580)='./file0\x00', 0x0)

199.330408ms ago: executing program 2 (id=10632):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0xfffe, @remote}, 0x10, 0x0}, 0x0)

118.844429ms ago: executing program 2 (id=10633):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

113.645999ms ago: executing program 0 (id=10634):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x0, 0x1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@multicast2}}, 0xe8)
unshare(0x20000000)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0)
pipe(&(0x7f0000000480))
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0xff00, 0x0, {0xffed, 0xc}, {0x0, 0x6}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer'])
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='btrfs_cow_block\x00', r0, 0x0, 0x7ff}, 0x18)
sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffffff90, 0xffff}, &(0x7f0000000080)=0x5, 0x0, 0x7f, 0x1, 0x9250, 0x1, 0x7e, 0x4}}], 0x58, 0x8004}, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea)

53.401659ms ago: executing program 2 (id=10635):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0)

6.83129ms ago: executing program 2 (id=10636):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7fffffff}, {0x0}, 0x0, 0x0, 0x1, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0xb6c}, 0x0, 0x0, 0x2, 0x0, 0x4, 0x8001, 0x10, 0x5}}], 0xe8}, 0x0)

0s ago: executing program 4 (id=10637):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0x20000001)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsa(0x0, 0x16e293f7, 0x41)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x48c0}, 0x0)

kernel console output (not intermixed with test programs):

ID: 0 PID: 29153 Comm: syz.5.9587 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  536.479564][T29153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  536.479580][T29153] Call Trace:
[  536.479589][T29153]  <TASK>
[  536.479596][T29153]  __dump_stack+0x1d/0x30
[  536.479616][T29153]  dump_stack_lvl+0xe8/0x140
[  536.479652][T29153]  dump_stack+0x15/0x1b
[  536.479674][T29153]  should_fail_ex+0x265/0x280
[  536.479714][T29153]  should_fail+0xb/0x20
[  536.479783][T29153]  should_fail_usercopy+0x1a/0x20
[  536.479887][T29153]  _copy_from_user+0x1c/0xb0
[  536.479906][T29153]  ___sys_sendmsg+0xc1/0x1d0
[  536.479996][T29153]  __x64_sys_sendmsg+0xd4/0x160
[  536.480105][T29153]  x64_sys_call+0x2999/0x2fb0
[  536.480123][T29153]  do_syscall_64+0xd0/0x1a0
[  536.480142][T29153]  ? clear_bhb_loop+0x25/0x80
[  536.480160][T29153]  ? clear_bhb_loop+0x25/0x80
[  536.480178][T29153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.480262][T29153] RIP: 0033:0x7f913e25e969
[  536.480276][T29153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  536.480362][T29153] RSP: 002b:00007f913c8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.480379][T29153] RAX: ffffffffffffffda RBX: 00007f913e485fa0 RCX: 00007f913e25e969
[  536.480391][T29153] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  536.480403][T29153] RBP: 00007f913c8c7090 R08: 0000000000000000 R09: 0000000000000000
[  536.480414][T29153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.480429][T29153] R13: 0000000000000000 R14: 00007f913e485fa0 R15: 00007ffd84050ad8
[  536.480447][T29153]  </TASK>
[  536.889887][T29175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=29175 comm=syz.4.9597
[  536.904346][T29175] tmpfs: Bad value for 'mpol'
[  536.912010][T29175] atomic_op ffff8881030de128 conn xmit_atomic 0000000000000000
[  537.038723][T29176] lo speed is unknown, defaulting to 1000
[  537.093821][T29176] chnl_net:caif_netlink_parms(): no params data found
[  537.110173][ T1694] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.142267][T29176] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.149360][T29176] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.156844][T29176] bridge_slave_0: entered allmulticast mode
[  537.163574][T29176] bridge_slave_0: entered promiscuous mode
[  537.171429][ T1694] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.182303][T29176] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.189364][T29176] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.196695][T29176] bridge_slave_1: entered allmulticast mode
[  537.203699][T29176] bridge_slave_1: entered promiscuous mode
[  537.221171][ T1694] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.233711][T29176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.244396][T29176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.266927][ T1694] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.323888][T29176] team0: Port device team_slave_0 added
[  537.341169][T29176] team0: Port device team_slave_1 added
[  537.377985][T29176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.385152][T29176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.411227][T29176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.437487][T29176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.444628][T29176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.470608][T29176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.498279][T29176] hsr_slave_0: entered promiscuous mode
[  537.504725][T29176] hsr_slave_1: entered promiscuous mode
[  537.510687][T29176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.518263][T29176] Cannot create hsr debugfs directory
[  537.546320][ T1694] bridge_slave_1: left allmulticast mode
[  537.552047][ T1694] bridge_slave_1: left promiscuous mode
[  537.557930][ T1694] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.565839][ T1694] bridge_slave_0: left allmulticast mode
[  537.571838][ T1694] bridge_slave_0: left promiscuous mode
[  537.577641][ T1694] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.662679][ T1694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.672814][ T1694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.683756][ T1694] bond0 (unregistering): Released all slaves
[  537.746715][ T1694] hsr_slave_0: left promiscuous mode
[  537.754729][ T1694] hsr_slave_1: left promiscuous mode
[  537.760921][ T1694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.768454][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.776339][ T1694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.784025][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.795443][ T1694] veth1_macvtap: left promiscuous mode
[  537.803281][ T1694] veth0_macvtap: left promiscuous mode
[  537.808810][ T1694] veth1_vlan: left promiscuous mode
[  537.814185][ T1694] veth0_vlan: left promiscuous mode
[  537.910777][T29211] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  538.046561][T29224] netlink: 'syz.5.9611': attribute type 1 has an invalid length.
[  538.118614][T29176] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  538.132416][T29176] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  538.154605][T29176] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  538.170958][T29176] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  538.207132][T29228] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  538.273557][T29176] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.300363][ T1694] IPVS: stop unused estimator thread 0...
[  538.313094][T29176] 8021q: adding VLAN 0 to HW filter on device team0
[  538.328801][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.335946][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.355428][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.362704][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.434369][T29176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.490297][T29176] veth0_vlan: entered promiscuous mode
[  538.506520][T29176] veth1_vlan: entered promiscuous mode
[  538.540157][T29176] veth0_macvtap: entered promiscuous mode
[  538.547969][T29176] veth1_macvtap: entered promiscuous mode
[  538.558732][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.569529][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.579452][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.590014][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.600003][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.610570][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.620539][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.631074][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.641025][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.651704][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.661548][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.672007][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.681947][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.692579][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.703158][T29176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.711618][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.722218][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.732163][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.742744][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.752635][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.763191][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.773039][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.783673][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.793508][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.803969][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.813825][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.824610][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.834473][T29176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.844965][T29176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.855976][T29176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.870018][T29176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.878860][T29176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.887677][T29176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.896481][T29176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.991008][T29252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.261826][T29265] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  539.625307][T29275] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  540.591870][T29314] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  540.907494][   T29] kauditd_printk_skb: 10383 callbacks suppressed
[  540.907512][   T29] audit: type=1326 audit(1745629264.438:200966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  540.939784][   T29] audit: type=1326 audit(1745629264.448:200967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  540.963603][   T29] audit: type=1326 audit(1745629264.448:200968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  540.987482][   T29] audit: type=1326 audit(1745629264.448:200969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.011493][   T29] audit: type=1326 audit(1745629264.448:200970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.035407][   T29] audit: type=1326 audit(1745629264.448:200971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.059463][   T29] audit: type=1326 audit(1745629264.448:200972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.083538][   T29] audit: type=1326 audit(1745629264.448:200973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.107481][   T29] audit: type=1326 audit(1745629264.448:200974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.131301][   T29] audit: type=1326 audit(1745629264.448:200975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29319 comm="syz.5.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  541.159977][T29252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.335171][T29341] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  541.357236][T29341] lo speed is unknown, defaulting to 1000
[  541.416686][T29342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  542.385542][T29372] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  542.408229][T29372] lo speed is unknown, defaulting to 1000
[  542.504254][T29375] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  543.043940][T29252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.131062][T29252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.185814][T29399] lo speed is unknown, defaulting to 1000
[  543.219922][T29252] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.239040][T29405] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  543.255087][T29252] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.268945][T29252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.281088][T29252] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.896215][T29433] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.952542][T29433] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.987444][T29437] lo speed is unknown, defaulting to 1000
[  544.003409][T29433] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.046157][T29433] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.144955][T29433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.154696][T29446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9702'.
[  544.158312][T29433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.178083][T29433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.193844][T29433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.227711][T29452] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  544.651499][T29473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9714'.
[  544.699906][T29475] lo speed is unknown, defaulting to 1000
[  544.879360][T29483] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.954056][T29483] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.034350][T29483] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.072498][T29483] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.120609][T29483] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.135160][T29483] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.147263][T29483] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.160868][T29483] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.485694][T29500] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  545.533280][T29498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9725'.
[  545.633123][T29510] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  545.654406][T29510] lo speed is unknown, defaulting to 1000
[  545.802081][T29514] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.873317][T29514] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.912741][   T29] kauditd_printk_skb: 21649 callbacks suppressed
[  545.912754][   T29] audit: type=1326 audit(1745629269.448:222625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc45975927 code=0x7ffc0000
[  545.943013][   T29] audit: type=1326 audit(1745629269.448:222626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc4591ab39 code=0x7ffc0000
[  545.966771][   T29] audit: type=1326 audit(1745629269.448:222627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efc4597e969 code=0x7ffc0000
[  545.990606][   T29] audit: type=1326 audit(1745629269.478:222628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc45975927 code=0x7ffc0000
[  545.994071][T29514] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.014228][   T29] audit: type=1326 audit(1745629269.478:222629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc4591ab39 code=0x7ffc0000
[  546.047759][   T29] audit: type=1326 audit(1745629269.478:222630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efc4597e969 code=0x7ffc0000
[  546.071633][   T29] audit: type=1326 audit(1745629269.478:222631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc45975927 code=0x7ffc0000
[  546.095441][   T29] audit: type=1326 audit(1745629269.478:222632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc4591ab39 code=0x7ffc0000
[  546.119087][   T29] audit: type=1326 audit(1745629269.478:222633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efc4597e969 code=0x7ffc0000
[  546.143003][   T29] audit: type=1326 audit(1745629269.478:222634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29511 comm="syz.4.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc45975927 code=0x7ffc0000
[  546.212446][T29514] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.277594][T29514] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.289390][T29514] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.301553][T29514] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.313472][T29514] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.430472][T29528] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9738'.
[  546.547812][T29542] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  546.613683][T29542] lo speed is unknown, defaulting to 1000
[  546.644431][T29544] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  546.834275][T29553] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.862589][T29553] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.922560][T29553] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.962622][T29553] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.066326][T29555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9749'.
[  548.155526][T29575] lo speed is unknown, defaulting to 1000
[  548.167022][T29579] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  548.324193][T29583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9761'.
[  548.790340][T29614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9774'.
[  548.830242][T29616] lo speed is unknown, defaulting to 1000
[  548.987851][T29553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.999990][T29553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.012244][T29553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.028204][T29553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.127533][T29631] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  549.510370][T29639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9785'.
[  549.562936][T29645] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.605635][T29647] lo speed is unknown, defaulting to 1000
[  549.654112][T29645] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.733200][T29645] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.832202][T29645] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.882608][T29668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9798'.
[  550.018405][T29679] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  550.029391][   T23] IPVS: starting estimator thread 0...
[  550.120701][T29681] IPVS: using max 2496 ests per chain, 124800 per kthread
[  550.340951][T29692] lo speed is unknown, defaulting to 1000
[  550.580436][T29698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9810'.
[  550.653048][T29714] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  550.769633][T29726] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  550.789347][T29726] lo speed is unknown, defaulting to 1000
[  550.938409][   T29] kauditd_printk_skb: 8452 callbacks suppressed
[  550.938433][   T29] audit: type=1326 audit(1745629274.468:231087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  550.977826][   T29] audit: type=1326 audit(1745629274.498:231088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  551.001564][   T29] audit: type=1326 audit(1745629274.498:231089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  551.025286][   T29] audit: type=1326 audit(1745629274.498:231090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  551.049015][   T29] audit: type=1326 audit(1745629274.498:231091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  551.072855][   T29] audit: type=1326 audit(1745629274.498:231092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  551.096690][   T29] audit: type=1326 audit(1745629274.498:231093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  551.120374][   T29] audit: type=1326 audit(1745629274.498:231094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  551.143997][   T29] audit: type=1326 audit(1745629274.498:231095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  551.168026][   T29] audit: type=1326 audit(1745629274.498:231096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29719 comm="syz.0.9820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  551.245248][T29728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9825'.
[  551.531819][T29753] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  551.797749][T29757] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  551.817446][T29757] lo speed is unknown, defaulting to 1000
[  551.900603][T29759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9838'.
[  552.101938][T29781] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  552.188303][T29783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9849'.
[  552.537154][T29791] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  552.554647][T29791] lo speed is unknown, defaulting to 1000
[  552.730501][T29645] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.742538][T29645] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.753875][T29645] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.765964][T29645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.916577][T29812] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  552.948072][T29809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9860'.
[  553.010000][T29816] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  553.029794][T29816] lo speed is unknown, defaulting to 1000
[  553.204719][T29828] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.282738][T29828] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.316951][T29838] pimreg: entered allmulticast mode
[  553.324533][T29838] pimreg: left allmulticast mode
[  553.335705][T29828] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.435177][T29828] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.465126][T29846] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  553.481555][T29840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9872'.
[  553.484503][T29846] lo speed is unknown, defaulting to 1000
[  553.505593][T29828] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.535592][T29828] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.553966][T29828] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.593666][T29828] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.681753][T29857] netlink: 'syz.3.9878': attribute type 1 has an invalid length.
[  553.698403][T29853] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9876'.
[  553.789564][T29873] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  553.837619][T29876] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.914961][T29876] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.944773][T29880] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  553.973076][T29880] lo speed is unknown, defaulting to 1000
[  553.982493][T29876] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.058906][T29876] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.219139][T29891] netlink: 'syz.5.9893': attribute type 1 has an invalid length.
[  554.245731][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9894'.
[  554.255661][T29893] veth0_macvtap: left promiscuous mode
[  554.584976][T29922] netlink: 'syz.3.9905': attribute type 1 has an invalid length.
[  554.608953][T29924] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  554.714031][T29926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9907'.
[  554.842032][T29936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=29936 comm=syz.2.9911
[  554.856525][T29936] tmpfs: Bad value for 'mpol'
[  554.862281][T29936] atomic_op ffff8881171c5d28 conn xmit_atomic 0000000000000000
[  555.027682][T29948] netlink: 'syz.0.9917': attribute type 1 has an invalid length.
[  555.128959][T29950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9918'.
[  555.148217][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9919'.
[  555.206153][T29963] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  555.249816][T29969] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  555.267872][T29969] lo speed is unknown, defaulting to 1000
[  555.402791][T29976] netlink: 'syz.0.9928': attribute type 1 has an invalid length.
[  555.942989][   T29] kauditd_printk_skb: 3070 callbacks suppressed
[  555.943006][   T29] audit: type=1326 audit(1745629279.478:234167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f913e255927 code=0x7ffc0000
[  556.139204][   T29] audit: type=1326 audit(1745629279.508:234168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f913e1fab39 code=0x7ffc0000
[  556.162922][   T29] audit: type=1326 audit(1745629279.508:234169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f913e255927 code=0x7ffc0000
[  556.186770][   T29] audit: type=1326 audit(1745629279.508:234170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f913e1fab39 code=0x7ffc0000
[  556.210501][   T29] audit: type=1326 audit(1745629279.508:234171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  556.234374][   T29] audit: type=1326 audit(1745629279.518:234172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f913e255927 code=0x7ffc0000
[  556.258057][   T29] audit: type=1326 audit(1745629279.518:234173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f913e1fab39 code=0x7ffc0000
[  556.281641][   T29] audit: type=1326 audit(1745629279.518:234174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f913e25e969 code=0x7ffc0000
[  556.307853][   T29] audit: type=1326 audit(1745629279.538:234175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f913e255927 code=0x7ffc0000
[  556.331593][   T29] audit: type=1326 audit(1745629279.538:234176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.5.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f913e1fab39 code=0x7ffc0000
[  556.676790][T30000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30000 comm=syz.0.9937
[  556.690170][T29998] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  556.726825][T29998] lo speed is unknown, defaulting to 1000
[  556.750824][T30000] tmpfs: Bad value for 'mpol'
[  556.756371][T30000] atomic_op ffff88810104c128 conn xmit_atomic 0000000000000000
[  556.830523][T30006] netlink: 'syz.3.9940': attribute type 1 has an invalid length.
[  556.946796][T30012] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  557.504488][T30029] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  557.547739][T30029] lo speed is unknown, defaulting to 1000
[  557.647603][T30034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30034 comm=syz.2.9954
[  557.661753][T30034] tmpfs: Bad value for 'mpol'
[  557.667327][T30034] atomic_op ffff8881171c4128 conn xmit_atomic 0000000000000000
[  557.798884][T30052] FAULT_INJECTION: forcing a failure.
[  557.798884][T30052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.812156][T30052] CPU: 0 UID: 0 PID: 30052 Comm: syz.0.9963 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  557.812200][T30052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  557.812216][T30052] Call Trace:
[  557.812224][T30052]  <TASK>
[  557.812233][T30052]  __dump_stack+0x1d/0x30
[  557.812314][T30052]  dump_stack_lvl+0xe8/0x140
[  557.812375][T30052]  dump_stack+0x15/0x1b
[  557.812397][T30052]  should_fail_ex+0x265/0x280
[  557.812489][T30052]  should_fail+0xb/0x20
[  557.812525][T30052]  should_fail_usercopy+0x1a/0x20
[  557.812656][T30052]  strncpy_from_user+0x25/0x230
[  557.812759][T30052]  ? __kmalloc_cache_noprof+0x189/0x320
[  557.812788][T30052]  __se_sys_memfd_create+0x1ff/0x590
[  557.812820][T30052]  __x64_sys_memfd_create+0x31/0x40
[  557.812847][T30052]  x64_sys_call+0x122f/0x2fb0
[  557.812881][T30052]  do_syscall_64+0xd0/0x1a0
[  557.812908][T30052]  ? clear_bhb_loop+0x25/0x80
[  557.812937][T30052]  ? clear_bhb_loop+0x25/0x80
[  557.812964][T30052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.812996][T30052] RIP: 0033:0x7f387a6de969
[  557.813052][T30052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.813075][T30052] RSP: 002b:00007f3878d46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  557.813095][T30052] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007f387a6de969
[  557.813111][T30052] RDX: 00007f3878d46ef0 RSI: 0000000000000000 RDI: 00007f387a761444
[  557.813127][T30052] RBP: 0000200000000640 R08: 00007f3878d46bb7 R09: 00007f3878d46e40
[  557.813193][T30052] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140
[  557.813209][T30052] R13: 00007f3878d46ef0 R14: 00007f3878d46eb0 R15: 00002000000003c0
[  557.813234][T30052]  </TASK>
[  558.022435][T30058] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  558.239810][T30068] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  558.258160][T30068] lo speed is unknown, defaulting to 1000
[  558.332439][T30075] Invalid ELF header magic: != ELF
[  558.355542][T30075] sd 0:0:1:0: device reset
[  559.097415][T30104] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  559.145433][T30104] lo speed is unknown, defaulting to 1000
[  559.493263][T29876] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.522445][T29876] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.552206][T29876] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.575907][T29876] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.625247][T30124] netlink: 'syz.5.9994': attribute type 1 has an invalid length.
[  559.671842][T30128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30128 comm=syz.4.9998
[  559.688560][T30128] tmpfs: Bad value for 'mpol'
[  559.695803][T30128] atomic_op ffff888127768528 conn xmit_atomic 0000000000000000
[  559.727212][T30130] unsupported nla_type 52263
[  559.755133][T30118] FAULT_INJECTION: forcing a failure.
[  559.755133][T30118] name failslab, interval 1, probability 0, space 0, times 0
[  559.772798][T30118] CPU: 0 UID: 0 PID: 30118 Comm: syz.2.9991 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  559.772833][T30118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  559.772849][T30118] Call Trace:
[  559.772857][T30118]  <TASK>
[  559.772934][T30118]  __dump_stack+0x1d/0x30
[  559.772961][T30118]  dump_stack_lvl+0xe8/0x140
[  559.773054][T30118]  dump_stack+0x15/0x1b
[  559.773074][T30118]  should_fail_ex+0x265/0x280
[  559.773145][T30118]  ? alloc_pipe_info+0xae/0x350
[  559.773177][T30118]  should_failslab+0x8c/0xb0
[  559.773228][T30118]  __kmalloc_cache_noprof+0x4c/0x320
[  559.773256][T30118]  alloc_pipe_info+0xae/0x350
[  559.773348][T30118]  splice_direct_to_actor+0x592/0x680
[  559.773387][T30118]  ? __pfx_direct_splice_actor+0x10/0x10
[  559.773463][T30118]  ? selinux_file_permission+0x80/0x360
[  559.773498][T30118]  ? avc_policy_seqno+0x15/0x30
[  559.773546][T30118]  do_splice_direct+0xda/0x150
[  559.773572][T30118]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  559.773632][T30118]  do_sendfile+0x380/0x640
[  559.773676][T30118]  __x64_sys_sendfile64+0x105/0x150
[  559.773778][T30118]  x64_sys_call+0xb39/0x2fb0
[  559.773805][T30118]  do_syscall_64+0xd0/0x1a0
[  559.773908][T30118]  ? clear_bhb_loop+0x25/0x80
[  559.773934][T30118]  ? clear_bhb_loop+0x25/0x80
[  559.774036][T30118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.774062][T30118] RIP: 0033:0x7fb3b8c2e969
[  559.774080][T30118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.774103][T30118] RSP: 002b:00007fb3b7297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  559.774166][T30118] RAX: ffffffffffffffda RBX: 00007fb3b8e55fa0 RCX: 00007fb3b8c2e969
[  559.774182][T30118] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a
[  559.774197][T30118] RBP: 00007fb3b7297090 R08: 0000000000000000 R09: 0000000000000000
[  559.774212][T30118] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[  559.774297][T30118] R13: 0000000000000000 R14: 00007fb3b8e55fa0 R15: 00007ffc7cf98d78
[  559.774321][T30118]  </TASK>
[  560.148501][T30148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.192378][T30148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.232367][T30148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.253052][T30157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30157 comm=syz.2.10009
[  560.267237][T30157] tmpfs: Bad value for 'mpol'
[  560.272325][T30157] atomic_op ffff8881174ebd28 conn xmit_atomic 0000000000000000
[  560.312416][T30148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.389674][T30148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.389892][T30169] netlink: 'syz.2.10015': attribute type 1 has an invalid length.
[  560.404381][T30148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.432157][T30165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10013'.
[  560.434325][T30148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.458468][T30148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.541039][T30179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30179 comm=syz.5.10020
[  560.591766][T30179] tmpfs: Bad value for 'mpol'
[  560.607211][T30179] atomic_op ffff8881171c5128 conn xmit_atomic 0000000000000000
[  560.689121][T30197] netlink: 'syz.0.10026': attribute type 1 has an invalid length.
[  560.745295][T30203] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  560.769133][T30203] lo speed is unknown, defaulting to 1000
[  560.826804][T30200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10027'.
[  560.863464][T30216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30216 comm=syz.2.10034
[  560.886446][T30216] tmpfs: Bad value for 'mpol'
[  560.892866][T30216] atomic_op ffff888116ec8128 conn xmit_atomic 0000000000000000
[  560.937212][T30218] FAULT_INJECTION: forcing a failure.
[  560.937212][T30218] name failslab, interval 1, probability 0, space 0, times 0
[  560.949946][T30218] CPU: 1 UID: 0 PID: 30218 Comm: syz.3.10035 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  560.949979][T30218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  560.949994][T30218] Call Trace:
[  560.950003][T30218]  <TASK>
[  560.950013][T30218]  __dump_stack+0x1d/0x30
[  560.950092][T30218]  dump_stack_lvl+0xe8/0x140
[  560.950111][T30218]  dump_stack+0x15/0x1b
[  560.950127][T30218]  should_fail_ex+0x265/0x280
[  560.950209][T30218]  should_failslab+0x8c/0xb0
[  560.950245][T30218]  kmem_cache_alloc_node_noprof+0x57/0x320
[  560.950322][T30218]  ? __alloc_skb+0x101/0x320
[  560.950421][T30218]  ? __rtnl_unlock+0x95/0xb0
[  560.950450][T30218]  __alloc_skb+0x101/0x320
[  560.950477][T30218]  netlink_ack+0xfd/0x500
[  560.950515][T30218]  netlink_rcv_skb+0x192/0x220
[  560.950646][T30218]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  560.950681][T30218]  rtnetlink_rcv+0x1c/0x30
[  560.950701][T30218]  netlink_unicast+0x59e/0x670
[  560.950728][T30218]  netlink_sendmsg+0x58b/0x6b0
[  560.950814][T30218]  ? __pfx_netlink_sendmsg+0x10/0x10
[  560.950844][T30218]  __sock_sendmsg+0x142/0x180
[  560.950869][T30218]  ____sys_sendmsg+0x31e/0x4e0
[  560.950979][T30218]  ___sys_sendmsg+0x17b/0x1d0
[  560.951036][T30218]  __x64_sys_sendmsg+0xd4/0x160
[  560.951134][T30218]  x64_sys_call+0x2999/0x2fb0
[  560.951211][T30218]  do_syscall_64+0xd0/0x1a0
[  560.951237][T30218]  ? clear_bhb_loop+0x25/0x80
[  560.951264][T30218]  ? clear_bhb_loop+0x25/0x80
[  560.951295][T30218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.951315][T30218] RIP: 0033:0x7fbfe072e969
[  560.951330][T30218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  560.951367][T30218] RSP: 002b:00007fbfded97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  560.951390][T30218] RAX: ffffffffffffffda RBX: 00007fbfe0955fa0 RCX: 00007fbfe072e969
[  560.951417][T30218] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[  560.951428][T30218] RBP: 00007fbfded97090 R08: 0000000000000000 R09: 0000000000000000
[  560.951516][T30218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  560.951530][T30218] R13: 0000000000000000 R14: 00007fbfe0955fa0 R15: 00007ffd8ea64d08
[  560.951555][T30218]  </TASK>
[  561.209744][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10036'.
[  561.210659][   T29] kauditd_printk_skb: 3714 callbacks suppressed
[  561.210678][   T29] audit: type=1400 audit(1745629284.738:237891): avc:  denied  { watch } for  pid=30220 comm="syz.4.10036" path="/264" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  561.258420][   T29] audit: type=1326 audit(1745629284.788:237892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  561.282252][   T29] audit: type=1326 audit(1745629284.788:237893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  561.306285][   T29] audit: type=1326 audit(1745629284.788:237894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  561.330062][   T29] audit: type=1326 audit(1745629284.788:237895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  561.354015][   T29] audit: type=1326 audit(1745629284.788:237896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  561.377790][   T29] audit: type=1326 audit(1745629284.788:237897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  561.402004][   T29] audit: type=1326 audit(1745629284.788:237898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  561.425749][   T29] audit: type=1326 audit(1745629284.788:237899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  561.449588][   T29] audit: type=1326 audit(1745629284.788:237900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30211 comm="syz.0.10032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  561.544582][T30229] lo speed is unknown, defaulting to 1000
[  561.648232][T30246] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  561.666789][T30246] lo speed is unknown, defaulting to 1000
[  561.760501][T30258] FAULT_INJECTION: forcing a failure.
[  561.760501][T30258] name failslab, interval 1, probability 0, space 0, times 0
[  561.773526][T30258] CPU: 1 UID: 0 PID: 30258 Comm: syz.2.10050 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  561.773627][T30258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  561.773639][T30258] Call Trace:
[  561.773645][T30258]  <TASK>
[  561.773654][T30258]  __dump_stack+0x1d/0x30
[  561.773746][T30258]  dump_stack_lvl+0xe8/0x140
[  561.773770][T30258]  dump_stack+0x15/0x1b
[  561.773786][T30258]  should_fail_ex+0x265/0x280
[  561.773876][T30258]  ? io_ring_ctx_alloc+0x38/0x650
[  561.773908][T30258]  should_failslab+0x8c/0xb0
[  561.773945][T30258]  __kmalloc_cache_noprof+0x4c/0x320
[  561.773970][T30258]  ? avc_has_perm_noaudit+0x1b1/0x200
[  561.774041][T30258]  io_ring_ctx_alloc+0x38/0x650
[  561.774072][T30258]  ? avc_has_perm+0xd3/0x150
[  561.774158][T30258]  ? io_uring_fill_params+0x270/0x300
[  561.774245][T30258]  io_uring_create+0x10f/0x610
[  561.774279][T30258]  __se_sys_io_uring_setup+0x1f7/0x210
[  561.774323][T30258]  __x64_sys_io_uring_setup+0x31/0x40
[  561.774417][T30258]  x64_sys_call+0x184b/0x2fb0
[  561.774444][T30258]  do_syscall_64+0xd0/0x1a0
[  561.774542][T30258]  ? clear_bhb_loop+0x25/0x80
[  561.774569][T30258]  ? clear_bhb_loop+0x25/0x80
[  561.774596][T30258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.774622][T30258] RIP: 0033:0x7fb3b8c2e969
[  561.774641][T30258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.774688][T30258] RSP: 002b:00007fb3b7296fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  561.774710][T30258] RAX: ffffffffffffffda RBX: 00007fb3b8e55fa0 RCX: 00007fb3b8c2e969
[  561.774725][T30258] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00000000000039ce
[  561.774740][T30258] RBP: 00002000000003c0 R08: 0000000000000000 R09: 0000200000000180
[  561.774791][T30258] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  561.774807][T30258] R13: 0000200000000040 R14: 00000000000039ce R15: 0000200000000180
[  561.774836][T30258]  </TASK>
[  569.539821][T30278] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  569.576502][T30278] lo speed is unknown, defaulting to 1000
[  569.623165][T30298] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  569.640268][   T29] kauditd_printk_skb: 1448 callbacks suppressed
[  569.640303][   T29] audit: type=1326 audit(1745629293.168:239349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.683282][   T29] audit: type=1326 audit(1745629293.208:239350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.707115][   T29] audit: type=1326 audit(1745629293.208:239351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.731014][   T29] audit: type=1326 audit(1745629293.208:239352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.754800][   T29] audit: type=1326 audit(1745629293.208:239353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.758171][T30282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10063'.
[  569.778548][   T29] audit: type=1326 audit(1745629293.208:239354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.778664][   T29] audit: type=1326 audit(1745629293.208:239355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.778699][   T29] audit: type=1326 audit(1745629293.208:239356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.778741][   T29] audit: type=1326 audit(1745629293.208:239357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  569.778846][   T29] audit: type=1326 audit(1745629293.208:239358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  570.101988][T30320] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  570.606564][T30334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10082'.
[  570.654325][T30342] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  570.673075][T30342] lo speed is unknown, defaulting to 1000
[  570.748776][T30350] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  570.770244][T30350] lo speed is unknown, defaulting to 1000
[  570.956993][   T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.979634][T30367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10097'.
[  571.012274][   T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.032760][T30381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  571.053681][T30381] lo speed is unknown, defaulting to 1000
[  571.063203][T30373] lo speed is unknown, defaulting to 1000
[  571.069755][   T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.180033][   T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.204330][T30373] chnl_net:caif_netlink_parms(): no params data found
[  571.245323][T30373] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.252620][T30373] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.259884][T30373] bridge_slave_0: entered allmulticast mode
[  571.266921][T30373] bridge_slave_0: entered promiscuous mode
[  571.274167][T30373] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.281750][T30373] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.289339][T30373] bridge_slave_1: entered allmulticast mode
[  571.296524][T30373] bridge_slave_1: entered promiscuous mode
[  571.318921][T30373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.337052][T30373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.363740][T30373] team0: Port device team_slave_0 added
[  571.369700][   T31] bridge_slave_1: left allmulticast mode
[  571.375503][   T31] bridge_slave_1: left promiscuous mode
[  571.381221][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.389082][   T31] bridge_slave_0: left allmulticast mode
[  571.394934][   T31] bridge_slave_0: left promiscuous mode
[  571.400654][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.493257][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.503358][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.512933][   T31] bond0 (unregistering): Released all slaves
[  571.523472][T30373] team0: Port device team_slave_1 added
[  571.546998][T30400] lo speed is unknown, defaulting to 1000
[  571.554447][T30373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.561464][T30373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.587546][T30373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.601000][   T31] hsr_slave_0: left promiscuous mode
[  571.606734][   T31] hsr_slave_1: left promiscuous mode
[  571.612862][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.620340][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.630974][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.638510][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.654390][   T31] veth1_macvtap: left promiscuous mode
[  571.660148][   T31] veth1_vlan: left promiscuous mode
[  571.668424][   T31] veth0_vlan: left promiscuous mode
[  571.777373][T30411] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  571.788929][   T31] team0 (unregistering): Port device team_slave_1 removed
[  571.800190][   T31] team0 (unregistering): Port device team_slave_0 removed
[  571.844281][T30373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.851340][T30373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.877454][T30373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.981347][T30373] hsr_slave_0: entered promiscuous mode
[  571.987458][T30373] hsr_slave_1: entered promiscuous mode
[  572.001182][T30373] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  572.019121][T30373] Cannot create hsr debugfs directory
[  572.181612][T30373] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  572.202015][T30373] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  572.236731][T30418] SELinux: failed to load policy
[  572.245003][   T31] IPVS: stop unused estimator thread 0...
[  572.253313][T30373] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  572.262895][T30373] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  572.289646][T30418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  572.379111][T30373] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.417019][T30373] 8021q: adding VLAN 0 to HW filter on device team0
[  572.461574][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.468681][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.509583][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.516714][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.542070][T30426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10119'.
[  572.615800][T30373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.727186][T30373] veth0_vlan: entered promiscuous mode
[  572.735808][T30373] veth1_vlan: entered promiscuous mode
[  572.754888][T30373] veth0_macvtap: entered promiscuous mode
[  572.764189][T30373] veth1_macvtap: entered promiscuous mode
[  572.776042][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.786650][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.796494][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.807074][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.817037][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.827499][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.837405][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.847872][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.857821][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.868404][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.878282][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.888801][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.899068][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.909568][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.921065][T30373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.929884][T30451] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.971796][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.982355][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.992226][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.002718][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.012561][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.023225][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.033095][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.043973][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.053897][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.064668][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.074573][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.085141][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.091475][T30457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30457 comm=syz.4.10124
[  573.095003][T30373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.118244][T30373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.129862][T30373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.139246][T30373] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.148076][T30373] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.156793][T30373] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.165695][T30373] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.176592][T30457] tmpfs: Bad value for 'mpol'
[  573.181835][T30456] atomic_op ffff888118d9e128 conn xmit_atomic 0000000000000000
[  573.197143][T30451] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.242460][T30451] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.321641][T30476] netlink: 'syz.6.10131': attribute type 1 has an invalid length.
[  573.330960][T30451] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.421202][T30451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.436574][T30451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.453838][T30451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.474882][T30493] netlink: 'syz.4.10138': attribute type 1 has an invalid length.
[  573.476102][T30451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.693334][T30521] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  573.754162][T30527] netlink: 'syz.6.10152': attribute type 1 has an invalid length.
[  573.836404][T30533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10154'.
[  573.950370][T30547] netlink: 'syz.6.10162': attribute type 1 has an invalid length.
[  574.247505][ T3485] IPVS: starting estimator thread 0...
[  574.253349][T30565] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  574.273989][T30565] lo speed is unknown, defaulting to 1000
[  574.335603][T30574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10172'.
[  574.345215][T30566] IPVS: using max 2448 ests per chain, 122400 per kthread
[  574.476204][T30587] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  574.501406][T30589] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  574.517358][T30584] ip6tnl1: entered promiscuous mode
[  574.525649][T30584] ip6tnl1: entered allmulticast mode
[  574.645815][   T29] kauditd_printk_skb: 5331 callbacks suppressed
[  574.645831][   T29] audit: type=1326 audit(1745629298.178:244690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  574.675916][   T29] audit: type=1326 audit(1745629298.178:244691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  574.700056][   T29] audit: type=1326 audit(1745629298.178:244692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  574.780973][   T29] audit: type=1326 audit(1745629298.188:244693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  574.804808][   T29] audit: type=1326 audit(1745629298.188:244694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  574.828761][   T29] audit: type=1326 audit(1745629298.188:244695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  574.855212][   T29] audit: type=1326 audit(1745629298.198:244696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  574.878980][   T29] audit: type=1326 audit(1745629298.198:244697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f387a67ab39 code=0x7ffc0000
[  574.902908][   T29] audit: type=1326 audit(1745629298.198:244698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  574.926702][   T29] audit: type=1326 audit(1745629298.208:244699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30548 comm="syz.0.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f387a6d5927 code=0x7ffc0000
[  575.061607][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10180'.
[  575.174019][ T1694] bridge_slave_1: left allmulticast mode
[  575.179792][ T1694] bridge_slave_1: left promiscuous mode
[  575.185678][ T1694] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.199398][ T1694] bridge_slave_0: left allmulticast mode
[  575.205263][ T1694] bridge_slave_0: left promiscuous mode
[  575.211368][ T1694] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.393864][ T1694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.406470][ T1694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.423667][ T1694] bond0 (unregistering): Released all slaves
[  575.437171][T30624] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.452587][T30620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10191'.
[  575.468587][ T1694] IPVS: stopping master sync thread 3603 ...
[  575.478151][ T1694] hsr_slave_0: left promiscuous mode
[  575.484534][ T1694] hsr_slave_1: left promiscuous mode
[  575.490477][ T1694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.498061][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.518554][ T1694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.526095][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.538669][ T1694] veth1_macvtap: left promiscuous mode
[  575.546664][ T1694] veth0_macvtap: left promiscuous mode
[  575.552549][ T1694] veth1_vlan: left promiscuous mode
[  575.558460][ T1694] veth0_vlan: left promiscuous mode
[  575.682138][ T1694] team0 (unregistering): Port device team_slave_1 removed
[  575.707201][ T1694] team0 (unregistering): Port device team_slave_0 removed
[  575.764342][T28744] lo speed is unknown, defaulting to 1000
[  575.770121][T28744] infiniband syz0: ib_query_port failed (-19)
[  575.776592][T30653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10207'.
[  575.808086][T30657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10209'.
[  575.838679][T30661] FAULT_INJECTION: forcing a failure.
[  575.838679][T30661] name failslab, interval 1, probability 0, space 0, times 0
[  575.851389][T30661] CPU: 1 UID: 0 PID: 30661 Comm: syz.0.10211 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  575.851417][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  575.851464][T30661] Call Trace:
[  575.851473][T30661]  <TASK>
[  575.851482][T30661]  __dump_stack+0x1d/0x30
[  575.851510][T30661]  dump_stack_lvl+0xe8/0x140
[  575.851534][T30661]  dump_stack+0x15/0x1b
[  575.851553][T30661]  should_fail_ex+0x265/0x280
[  575.851665][T30661]  should_failslab+0x8c/0xb0
[  575.851701][T30661]  __kvmalloc_node_noprof+0x126/0x4d0
[  575.851734][T30661]  ? map_get_next_key+0x197/0x330
[  575.851822][T30661]  map_get_next_key+0x197/0x330
[  575.851859][T30661]  ? __sys_bpf+0x6fd/0x790
[  575.851919][T30661]  __sys_bpf+0x707/0x790
[  575.851962][T30661]  __x64_sys_bpf+0x41/0x50
[  575.851993][T30661]  x64_sys_call+0x2478/0x2fb0
[  575.852019][T30661]  do_syscall_64+0xd0/0x1a0
[  575.852052][T30661]  ? clear_bhb_loop+0x25/0x80
[  575.852093][T30661]  ? clear_bhb_loop+0x25/0x80
[  575.852120][T30661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.852146][T30661] RIP: 0033:0x7f387a6de969
[  575.852164][T30661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  575.852186][T30661] RSP: 002b:00007f3878d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  575.852264][T30661] RAX: ffffffffffffffda RBX: 00007f387a905fa0 RCX: 00007f387a6de969
[  575.852279][T30661] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004
[  575.852295][T30661] RBP: 00007f3878d47090 R08: 0000000000000000 R09: 0000000000000000
[  575.852310][T30661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.852325][T30661] R13: 0000000000000000 R14: 00007f387a905fa0 R15: 00007ffc3e27aff8
[  575.852350][T30661]  </TASK>
[  575.861987][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10212'.
[  575.905555][T30666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30666 comm=syz.0.10213
[  575.991690][T30671] tmpfs: Bad value for 'mpol'
[  576.114619][T30666] atomic_op ffff888117c76d28 conn xmit_atomic 0000000000000000
[  576.407141][ T1694] IPVS: stop unused estimator thread 0...
[  576.780406][T30694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10225'.
[  576.844080][T30698] netlink: 'syz.0.10227': attribute type 1 has an invalid length.
[  577.094992][ T4717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.153955][ T4717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.193333][ T4717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.273083][ T4717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.308372][T30723] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10239'.
[  577.364651][ T4717] bridge_slave_1: left allmulticast mode
[  577.370369][ T4717] bridge_slave_1: left promiscuous mode
[  577.376056][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.394612][ T4717] bridge_slave_0: left allmulticast mode
[  577.400317][ T4717] bridge_slave_0: left promiscuous mode
[  577.406144][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.424943][T30727] netlink: 'syz.0.10241': attribute type 1 has an invalid length.
[  577.523889][ T4717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.536596][ T4717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.546923][ T4717] bond0 (unregistering): Released all slaves
[  577.578593][T30735] netlink: 'syz.0.10245': attribute type 1 has an invalid length.
[  577.603754][ T4717] IPVS: stopping master sync thread 3444 ...
[  577.618196][ T4717] hsr_slave_0: left promiscuous mode
[  577.634666][ T4717] hsr_slave_1: left promiscuous mode
[  577.652167][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.659691][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.703299][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.710939][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.747672][ T4717] veth1_macvtap: left promiscuous mode
[  577.767326][ T4717] veth0_macvtap: left promiscuous mode
[  577.787668][ T4717] veth1_vlan: left promiscuous mode
[  577.813883][ T4717] veth0_vlan: left promiscuous mode
[  577.983410][T30747] FAULT_INJECTION: forcing a failure.
[  577.983410][T30747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  577.996622][T30747] CPU: 0 UID: 0 PID: 30747 Comm: syz.4.10250 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  577.996656][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  577.996670][T30747] Call Trace:
[  577.996679][T30747]  <TASK>
[  577.996688][T30747]  __dump_stack+0x1d/0x30
[  577.996720][T30747]  dump_stack_lvl+0xe8/0x140
[  577.996785][T30747]  dump_stack+0x15/0x1b
[  577.996869][T30747]  should_fail_ex+0x265/0x280
[  577.996905][T30747]  should_fail+0xb/0x20
[  577.996936][T30747]  should_fail_usercopy+0x1a/0x20
[  577.996973][T30747]  _copy_from_user+0x1c/0xb0
[  577.997069][T30747]  sctp_getsockopt_connectx3+0xda/0x300
[  577.997108][T30747]  sctp_getsockopt+0x910/0xaa0
[  577.997181][T30747]  sock_common_getsockopt+0x5d/0x70
[  577.997211][T30747]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  577.997241][T30747]  do_sock_getsockopt+0x1fd/0x240
[  577.997399][T30747]  __x64_sys_getsockopt+0x11e/0x1a0
[  577.997455][T30747]  x64_sys_call+0x12aa/0x2fb0
[  577.997479][T30747]  do_syscall_64+0xd0/0x1a0
[  577.997503][T30747]  ? clear_bhb_loop+0x25/0x80
[  577.997527][T30747]  ? clear_bhb_loop+0x25/0x80
[  577.997597][T30747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.997681][T30747] RIP: 0033:0x7efc4597e969
[  577.997698][T30747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.997719][T30747] RSP: 002b:00007efc43fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  577.997742][T30747] RAX: ffffffffffffffda RBX: 00007efc45ba5fa0 RCX: 00007efc4597e969
[  577.997766][T30747] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006
[  577.997781][T30747] RBP: 00007efc43fe7090 R08: 0000200000000100 R09: 0000000000000000
[  577.997796][T30747] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  577.997810][T30747] R13: 0000000000000000 R14: 00007efc45ba5fa0 R15: 00007fffb9a0ac68
[  577.997832][T30747]  </TASK>
[  578.198534][ T4717] pim6reg (unregistering): left allmulticast mode
[  578.240214][ T4717] team0 (unregistering): Port device team_slave_1 removed
[  578.258887][ T4717] team0 (unregistering): Port device team_slave_0 removed
[  578.310015][T30745] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.433888][T30764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30764 comm=syz.4.10257
[  578.460204][T30745] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.490615][T30764] tmpfs: Bad value for 'mpol'
[  578.495864][T30764] atomic_op ffff8881182d5128 conn xmit_atomic 0000000000000000
[  578.532586][T30745] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.544032][T30772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30772 comm=syz.0.10261
[  578.559048][T30772] tmpfs: Bad value for 'mpol'
[  578.565010][T30772] atomic_op ffff8881182d7528 conn xmit_atomic 0000000000000000
[  578.603529][T30745] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.654459][T30758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10254'.
[  578.687292][T30745] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.704178][T30745] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.715542][T30624] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.738881][T30745] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.763426][T30745] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.775314][T30624] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.787110][T30787] netlink: 'syz.0.10265': attribute type 1 has an invalid length.
[  578.823797][T30624] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.860424][T30790] sch_fq: defrate 0 ignored.
[  578.891951][T30624] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.916380][T30624] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.976320][T30624] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.010012][T30624] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.039421][T30800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30800 comm=syz.2.10272
[  579.088383][T30800] tmpfs: Bad value for 'mpol'
[  579.112108][T30800] atomic_op ffff88810248fd28 conn xmit_atomic 0000000000000000
[  579.218726][T30809] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.234981][T30810] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  579.262368][T30809] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.282011][T30812] netlink: 'syz.3.10278': attribute type 1 has an invalid length.
[  579.322291][T30809] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.366529][T30820] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10281'.
[  579.376941][T30809] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.434989][T30809] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.453333][T30809] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.466607][T30809] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.481477][T30809] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.539327][T30834] FAULT_INJECTION: forcing a failure.
[  579.539327][T30834] name failslab, interval 1, probability 0, space 0, times 0
[  579.539511][T30832] netlink: 'syz.2.10285': attribute type 1 has an invalid length.
[  579.552100][T30834] CPU: 1 UID: 0 PID: 30834 Comm: syz.6.10286 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  579.552148][T30834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  579.552165][T30834] Call Trace:
[  579.552175][T30834]  <TASK>
[  579.552186][T30834]  __dump_stack+0x1d/0x30
[  579.552214][T30834]  dump_stack_lvl+0xe8/0x140
[  579.552241][T30834]  dump_stack+0x15/0x1b
[  579.552281][T30834]  should_fail_ex+0x265/0x280
[  579.552323][T30834]  should_failslab+0x8c/0xb0
[  579.552361][T30834]  kmem_cache_alloc_node_noprof+0x57/0x320
[  579.552406][T30834]  ? __alloc_skb+0x101/0x320
[  579.552515][T30834]  __alloc_skb+0x101/0x320
[  579.552548][T30834]  ? audit_log_start+0x365/0x6c0
[  579.552583][T30834]  audit_log_start+0x380/0x6c0
[  579.552693][T30834]  audit_seccomp+0x48/0x100
[  579.552725][T30834]  ? __seccomp_filter+0x68c/0x10d0
[  579.552752][T30834]  __seccomp_filter+0x69d/0x10d0
[  579.552780][T30834]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  579.552814][T30834]  ? vfs_write+0x75e/0x8d0
[  579.552895][T30834]  ? __rcu_read_unlock+0x4f/0x70
[  579.552948][T30834]  ? __fget_files+0x184/0x1c0
[  579.552987][T30834]  __secure_computing+0x82/0x150
[  579.553013][T30834]  syscall_trace_enter+0xcf/0x1e0
[  579.553076][T30834]  do_syscall_64+0xaa/0x1a0
[  579.553104][T30834]  ? clear_bhb_loop+0x25/0x80
[  579.553132][T30834]  ? clear_bhb_loop+0x25/0x80
[  579.553159][T30834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.553187][T30834] RIP: 0033:0x7fbf8953e969
[  579.553243][T30834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.553266][T30834] RSP: 002b:00007fbf87ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  579.553351][T30834] RAX: ffffffffffffffda RBX: 00007fbf89765fa0 RCX: 00007fbf8953e969
[  579.553368][T30834] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c
[  579.553384][T30834] RBP: 00007fbf87ba7090 R08: 0000000000000004 R09: 0000000000000000
[  579.553400][T30834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.553416][T30834] R13: 0000000000000000 R14: 00007fbf89765fa0 R15: 00007ffda94b9a88
[  579.553441][T30834]  </TASK>
[  579.657339][   T29] kauditd_printk_skb: 1356 callbacks suppressed
[  579.657371][   T29] audit: type=1326 audit(1745629303.188:246051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe0725927 code=0x7ffc0000
[  579.731917][T30843] netlink: 'syz.4.10290': attribute type 1 has an invalid length.
[  579.734245][   T29] audit: type=1326 audit(1745629303.188:246052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe06cab39 code=0x7ffc0000
[  579.839601][   T29] audit: type=1326 audit(1745629303.188:246053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbfe072e969 code=0x7ffc0000
[  579.863692][   T29] audit: type=1326 audit(1745629303.228:246054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30807 comm="syz.0.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  579.887496][   T29] audit: type=1326 audit(1745629303.228:246055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30807 comm="syz.0.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387a6de969 code=0x7ffc0000
[  579.911386][   T29] audit: type=1326 audit(1745629303.298:246056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe0725927 code=0x7ffc0000
[  579.935140][   T29] audit: type=1326 audit(1745629303.298:246057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe06cab39 code=0x7ffc0000
[  579.959218][   T29] audit: type=1326 audit(1745629303.298:246058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbfe072e969 code=0x7ffc0000
[  579.983249][   T29] audit: type=1326 audit(1745629303.298:246059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe0725927 code=0x7ffc0000
[  580.007231][   T29] audit: type=1326 audit(1745629303.298:246060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.3.10280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe06cab39 code=0x7ffc0000
[  580.052778][T30849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10293'.
[  580.133055][T30858] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.232780][T30858] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.252519][T30866] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  580.309959][T30858] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.353239][T30858] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.355513][T30883] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  580.372051][T30881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30881 comm=syz.6.10307
[  580.386925][T30881] tmpfs: Bad value for 'mpol'
[  580.392559][T30881] atomic_op ffff88811b024528 conn xmit_atomic 0000000000000000
[  580.428844][T30858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.444196][T30858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.456019][T30858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.467886][T30858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.822050][T30909] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  580.883550][T30915] netlink: 'syz.3.10323': attribute type 1 has an invalid length.
[  580.939184][T30917] netlink: 'syz.2.10324': attribute type 1 has an invalid length.
[  581.110765][T30926] netlink: 'syz.2.10328': attribute type 1 has an invalid length.
[  581.321753][T30939] __nla_validate_parse: 1 callbacks suppressed
[  581.321792][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10334'.
[  581.381202][T30944] syz.2.10337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  581.396064][T30944] CPU: 0 UID: 0 PID: 30944 Comm: syz.2.10337 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  581.396107][T30944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  581.396121][T30944] Call Trace:
[  581.396131][T30944]  <TASK>
[  581.396172][T30944]  __dump_stack+0x1d/0x30
[  581.396196][T30944]  dump_stack_lvl+0xe8/0x140
[  581.396218][T30944]  dump_stack+0x15/0x1b
[  581.396236][T30944]  warn_alloc+0x12b/0x1a0
[  581.396259][T30944]  ? kmem_cache_free+0xdd/0x2f0
[  581.396291][T30944]  __vmalloc_node_range_noprof+0x9c/0xdf0
[  581.396334][T30944]  ? slow_avc_audit+0x104/0x140
[  581.396374][T30944]  ? should_fail_ex+0x30/0x280
[  581.396417][T30944]  ? xskq_create+0x36/0xe0
[  581.396449][T30944]  ? should_failslab+0x8c/0xb0
[  581.396509][T30944]  vmalloc_user_noprof+0x59/0x70
[  581.396546][T30944]  ? xskq_create+0x80/0xe0
[  581.396597][T30944]  xskq_create+0x80/0xe0
[  581.396633][T30944]  xsk_init_queue+0x95/0xf0
[  581.396668][T30944]  xsk_setsockopt+0x35c/0x510
[  581.396703][T30944]  ? __pfx_xsk_setsockopt+0x10/0x10
[  581.396753][T30944]  __sys_setsockopt+0x181/0x200
[  581.396793][T30944]  ? fpregs_restore_userregs+0xbb/0x190
[  581.396836][T30944]  __x64_sys_setsockopt+0x64/0x80
[  581.396878][T30944]  x64_sys_call+0x2bd5/0x2fb0
[  581.396929][T30944]  do_syscall_64+0xd0/0x1a0
[  581.396965][T30944]  ? clear_bhb_loop+0x25/0x80
[  581.397038][T30944]  ? clear_bhb_loop+0x25/0x80
[  581.397068][T30944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.397153][T30944] RIP: 0033:0x7fb3b8c2e969
[  581.397169][T30944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.397252][T30944] RSP: 002b:00007fb3b7297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  581.397273][T30944] RAX: ffffffffffffffda RBX: 00007fb3b8e55fa0 RCX: 00007fb3b8c2e969
[  581.397289][T30944] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  581.397347][T30944] RBP: 00007fb3b8cb0ab1 R08: 0000000000000004 R09: 0000000000000000
[  581.397365][T30944] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.397381][T30944] R13: 0000000000000000 R14: 00007fb3b8e55fa0 R15: 00007ffc7cf98d78
[  581.397407][T30944]  </TASK>
[  581.397426][T30944] Mem-Info:
[  581.481941][T30948] netlink: 'syz.3.10335': attribute type 1 has an invalid length.
[  581.482977][T30944] active_anon:11312 inactive_anon:8 isolated_anon:0
[  581.482977][T30944]  active_file:4365 inactive_file:25395 isolated_file:0
[  581.482977][T30944]  unevictable:47 dirty:276 writeback:0
[  581.482977][T30944]  slab_reclaimable:2887 slab_unreclaimable:17236
[  581.482977][T30944]  mapped:29305 shmem:390 pagetables:813
[  581.482977][T30944]  sec_pagetables:0 bounce:0
[  581.482977][T30944]  kernel_misc_reclaimable:0
[  581.482977][T30944]  free:1822245 free_pcp:55790 free_cma:0
[  581.674142][T30944] Node 0 active_anon:45188kB inactive_anon:32kB active_file:17460kB inactive_file:101652kB unevictable:112kB isolated(anon):0kB isolated(file):0kB mapped:117108kB dirty:1208kB writeback:0kB shmem:1524kB writeback_tmp:0kB kernel_stack:2880kB pagetables:3424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  581.703795][T30944] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  581.730827][T30944] lowmem_reserve[]: 0 2884 7863 7863
[  581.736185][T30944] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  581.759500][T30952] netlink: 'syz.4.10340': attribute type 1 has an invalid length.
[  581.764842][T30944] lowmem_reserve[]: 0 0 4978 4978
[  581.777906][T30944] Node 0 Normal free:4323352kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:45188kB inactive_anon:32kB active_file:17460kB inactive_file:101652kB unevictable:112kB writepending:1208kB present:5242880kB managed:5098244kB mlocked:100kB bounce:0kB free_pcp:219492kB local_pcp:178636kB free_cma:0kB
[  581.809037][T30944] lowmem_reserve[]: 0 0 0 0
[  581.813619][T30944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  581.826559][T30944] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB
[  581.843025][T30944] Node 0 Normal: 255*4kB (UE) 198*8kB (UE) 71*16kB (UME) 322*32kB (UME) 664*64kB (UME) 500*128kB (UME) 401*256kB (UM) 136*512kB (UME) 40*1024kB (UME) 6*2048kB (UME) 971*4096kB (UM) = 4323292kB
[  581.862388][T30944] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  581.871754][T30944] 30075 total pagecache pages
[  581.876445][T30944] 13 pages in swap cache
[  581.876443][T30956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30956 comm=syz.4.10342
[  581.880708][T30944] Free swap  = 124944kB
[  581.880720][T30944] Total swap = 124996kB
[  581.880730][T30944] 2097051 pages RAM
[  581.880745][T30944] 0 pages HighMem/MovableOnly
[  581.880753][T30944] 80258 pages reserved
[  581.922464][T30956] tmpfs: Bad value for 'mpol'
[  581.929059][T30956] atomic_op ffff888118cd2528 conn xmit_atomic 0000000000000000
[  581.937252][T30958] FAULT_INJECTION: forcing a failure.
[  581.937252][T30958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.950372][T30958] CPU: 0 UID: 0 PID: 30958 Comm: syz.2.10343 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  581.950445][T30958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  581.950468][T30958] Call Trace:
[  581.950475][T30958]  <TASK>
[  581.950485][T30958]  __dump_stack+0x1d/0x30
[  581.950586][T30958]  dump_stack_lvl+0xe8/0x140
[  581.950612][T30958]  dump_stack+0x15/0x1b
[  581.950695][T30958]  should_fail_ex+0x265/0x280
[  581.950729][T30958]  should_fail+0xb/0x20
[  581.950756][T30958]  should_fail_usercopy+0x1a/0x20
[  581.950848][T30958]  _copy_from_user+0x1c/0xb0
[  581.950902][T30958]  xsk_setsockopt+0x229/0x510
[  581.950935][T30958]  ? __pfx_xsk_setsockopt+0x10/0x10
[  581.950965][T30958]  __sys_setsockopt+0x181/0x200
[  581.951077][T30958]  __x64_sys_setsockopt+0x64/0x80
[  581.951130][T30958]  x64_sys_call+0x2bd5/0x2fb0
[  581.951157][T30958]  do_syscall_64+0xd0/0x1a0
[  581.951181][T30958]  ? clear_bhb_loop+0x25/0x80
[  581.951206][T30958]  ? clear_bhb_loop+0x25/0x80
[  581.951284][T30958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.951311][T30958] RIP: 0033:0x7fb3b8c2e969
[  581.951329][T30958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.951377][T30958] RSP: 002b:00007fb3b7297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  581.951399][T30958] RAX: ffffffffffffffda RBX: 00007fb3b8e55fa0 RCX: 00007fb3b8c2e969
[  581.951415][T30958] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  581.951478][T30958] RBP: 00007fb3b7297090 R08: 0000000000000004 R09: 0000000000000000
[  581.951493][T30958] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.951509][T30958] R13: 0000000000000000 R14: 00007fb3b8e55fa0 R15: 00007ffc7cf98d78
[  581.951533][T30958]  </TASK>
[  582.219266][T30972] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  582.228242][T30974] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  582.340929][T30983] netlink: 'syz.2.10352': attribute type 1 has an invalid length.
[  582.414774][T30985] FAULT_INJECTION: forcing a failure.
[  582.414774][T30985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.429833][T30985] CPU: 0 UID: 0 PID: 30985 Comm: syz.6.10354 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  582.429873][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  582.429888][T30985] Call Trace:
[  582.429896][T30985]  <TASK>
[  582.429904][T30985]  __dump_stack+0x1d/0x30
[  582.429926][T30985]  dump_stack_lvl+0xe8/0x140
[  582.430000][T30985]  dump_stack+0x15/0x1b
[  582.430021][T30985]  should_fail_ex+0x265/0x280
[  582.430060][T30985]  should_fail+0xb/0x20
[  582.430122][T30985]  should_fail_usercopy+0x1a/0x20
[  582.430152][T30985]  _copy_from_user+0x1c/0xb0
[  582.430173][T30985]  ___sys_sendmsg+0xc1/0x1d0
[  582.430276][T30985]  __x64_sys_sendmsg+0xd4/0x160
[  582.430343][T30985]  x64_sys_call+0x2999/0x2fb0
[  582.430379][T30985]  do_syscall_64+0xd0/0x1a0
[  582.430408][T30985]  ? clear_bhb_loop+0x25/0x80
[  582.430430][T30985]  ? clear_bhb_loop+0x25/0x80
[  582.430451][T30985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.430470][T30985] RIP: 0033:0x7fbf8953e969
[  582.430545][T30985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  582.430566][T30985] RSP: 002b:00007fbf87ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.430588][T30985] RAX: ffffffffffffffda RBX: 00007fbf89765fa0 RCX: 00007fbf8953e969
[  582.430602][T30985] RDX: 0000000000000804 RSI: 00002000000003c0 RDI: 0000000000000003
[  582.430617][T30985] RBP: 00007fbf87ba7090 R08: 0000000000000000 R09: 0000000000000000
[  582.430632][T30985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.430668][T30985] R13: 0000000000000000 R14: 00007fbf89765fa0 R15: 00007ffda94b9a88
[  582.430710][T30985]  </TASK>
[  582.473912][T30992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30992 comm=syz.4.10356
[  582.616143][T30994] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[  582.635553][T30989] tmpfs: Bad value for 'mpol'
[  582.641093][T30989] atomic_op ffff88811b751128 conn xmit_atomic 0000000000000000
[  582.707065][T31005] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  583.108759][T31036] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.242173][T31036] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.302619][T31036] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.362672][T31036] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.665602][T31065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10387'.
[  583.708502][T31036] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.720360][T31036] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.732805][T31036] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.746358][T31036] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.813275][T31077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31077 comm=syz.6.10393
[  583.827508][T31077] tmpfs: Bad value for 'mpol'
[  583.832939][T31077] atomic_op ffff88811b750128 conn xmit_atomic 0000000000000000
[  583.866062][T31080] siw: device registration error -23
[  584.397410][T31111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31111 comm=syz.4.10405
[  584.412142][T31111] tmpfs: Bad value for 'mpol'
[  584.417302][T31111] atomic_op ffff88811b753128 conn xmit_atomic 0000000000000000
[  584.442052][T31113] siw: device registration error -23
[  584.668233][   T29] kauditd_printk_skb: 4032 callbacks suppressed
[  584.668249][   T29] audit: type=1400 audit(1745629308.198:250093): avc:  denied  { create } for  pid=31123 comm="syz.2.10410" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  584.712509][   T29] audit: type=1400 audit(1745629308.248:250094): avc:  denied  { write } for  pid=31123 comm="syz.2.10410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  584.732977][   T29] audit: type=1400 audit(1745629308.248:250095): avc:  denied  { mounton } for  pid=31123 comm="syz.2.10410" path="/384/file0" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  584.756719][   T29] audit: type=1400 audit(1745629308.248:250096): avc:  denied  { mount } for  pid=31123 comm="syz.2.10410" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  584.780116][   T29] audit: type=1400 audit(1745629308.318:250097): avc:  denied  { unmount } for  pid=26532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  584.808476][   T29] audit: type=1326 audit(1745629308.338:250098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31092 comm="syz.6.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8953e969 code=0x7ffc0000
[  584.832560][   T29] audit: type=1326 audit(1745629308.338:250099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31092 comm="syz.6.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8953e969 code=0x7ffc0000
[  584.878278][T31126] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  584.912856][T26532] block device autoloading is deprecated and will be removed.
[  584.921801][   T29] audit: type=1400 audit(1745629308.448:250100): avc:  denied  { unlink } for  pid=26532 comm="syz-executor" name="file0" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  584.991553][T31134] validate_nla: 3 callbacks suppressed
[  584.991570][T31134] netlink: 'syz.3.10414': attribute type 1 has an invalid length.
[  585.007807][   T29] audit: type=1400 audit(1745629308.538:250101): avc:  denied  { ioctl } for  pid=31129 comm="syz.2.10411" path="socket:[136441]" dev="sockfs" ino=136441 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  585.035874][   T29] audit: type=1400 audit(1745629308.538:250102): avc:  denied  { write } for  pid=31129 comm="syz.2.10411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  585.082463][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10411'.
[  585.082756][T31141] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  585.092831][T31137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  585.099953][T31141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.115957][T31137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31137 comm=syz.2.10411
[  585.116887][T31141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.137649][T31141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.145318][T31141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.178291][T31145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31145 comm=syz.3.10420
[  585.192617][T31145] tmpfs: Bad value for 'mpol'
[  585.197702][T31145] atomic_op ffff8881182e4d28 conn xmit_atomic 0000000000000000
[  585.259204][T31151] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.342189][T31151] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.390153][T31160] siw: device registration error -23
[  585.436111][T31151] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.511415][T31179] netlink: 'syz.4.10436': attribute type 1 has an invalid length.
[  585.520457][T31151] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.539061][T31181] netlink: 'syz.4.10437': attribute type 1 has an invalid length.
[  585.563594][T31185] siw: device registration error -23
[  585.625375][T31151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.645759][T31151] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.662063][T31151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.693483][T31151] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.782213][T31207] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  585.878902][T31212] siw: device registration error -23
[  585.912069][T31212] loop4: detected capacity change from 0 to 256
[  585.920071][T31212] msdos: Unknown parameter 'no'
[  586.029297][T31220] siw: device registration error -23
[  586.297325][T31234] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  586.375110][T31240] netlink: 'syz.0.10464': attribute type 1 has an invalid length.
[  586.452822][T31242] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  586.452822][T31242]    program syz.0.10465 not setting count and/or reply_len properly
[  586.511391][T31242] netlink: 'syz.0.10465': attribute type 3 has an invalid length.
[  586.519270][T31242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10465'.
[  586.574264][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10471'.
[  586.623154][T31254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.630463][T31265] netlink: 'syz.0.10476': attribute type 1 has an invalid length.
[  586.630699][T31254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.651196][T31254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.658658][T31254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.704142][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10479'.
[  586.714934][T31270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.722474][T31270] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.725774][T31266] loop4: detected capacity change from 0 to 8192
[  586.736777][T31270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.744422][T31270] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.826057][T31281] FAULT_INJECTION: forcing a failure.
[  586.826057][T31281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  586.839231][T31281] CPU: 0 UID: 0 PID: 31281 Comm: syz.3.10485 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  586.839321][T31281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  586.839336][T31281] Call Trace:
[  586.839343][T31281]  <TASK>
[  586.839352][T31281]  __dump_stack+0x1d/0x30
[  586.839378][T31281]  dump_stack_lvl+0xe8/0x140
[  586.839402][T31281]  dump_stack+0x15/0x1b
[  586.839501][T31281]  should_fail_ex+0x265/0x280
[  586.839539][T31281]  should_fail+0xb/0x20
[  586.839629][T31281]  should_fail_usercopy+0x1a/0x20
[  586.839660][T31281]  _copy_from_user+0x1c/0xb0
[  586.839680][T31281]  ___sys_sendmsg+0xc1/0x1d0
[  586.839774][T31281]  __x64_sys_sendmsg+0xd4/0x160
[  586.839811][T31281]  x64_sys_call+0x2999/0x2fb0
[  586.839831][T31281]  do_syscall_64+0xd0/0x1a0
[  586.839852][T31281]  ? clear_bhb_loop+0x25/0x80
[  586.839915][T31281]  ? clear_bhb_loop+0x25/0x80
[  586.839939][T31281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.839959][T31281] RIP: 0033:0x7fbfe072e969
[  586.839973][T31281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.839991][T31281] RSP: 002b:00007fbfded97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.840082][T31281] RAX: ffffffffffffffda RBX: 00007fbfe0955fa0 RCX: 00007fbfe072e969
[  586.840096][T31281] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  586.840111][T31281] RBP: 00007fbfded97090 R08: 0000000000000000 R09: 0000000000000000
[  586.840176][T31281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.840187][T31281] R13: 0000000000000000 R14: 00007fbfe0955fa0 R15: 00007ffd8ea64d08
[  586.840208][T31281]  </TASK>
[  587.055891][T31286] loop4: detected capacity change from 0 to 2048
[  587.085314][T31286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  587.101766][T31294] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.182573][T31294] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.195970][T31286] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28
[  587.196473][T31300] netlink: 'syz.3.10492': attribute type 1 has an invalid length.
[  587.208282][T31286] EXT4-fs (loop4): This should not happen!! Data will be lost
[  587.208282][T31286] 
[  587.208304][T31286] EXT4-fs (loop4): Total free blocks count 0
[  587.208320][T31286] EXT4-fs (loop4): Free/Dirty block details
[  587.208331][T31286] EXT4-fs (loop4): free_blocks=0
[  587.208346][T31286] EXT4-fs (loop4): dirty_blocks=0
[  587.208387][T31286] EXT4-fs (loop4): Block reservation details
[  587.254144][T31286] EXT4-fs (loop4): i_reserved_data_blocks=0
[  587.292872][T31294] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.318463][T27276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.352186][T31294] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.382914][T31311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'.
[  587.392347][T31311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  587.417734][T31294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.429008][T31294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.440239][T31294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.452278][T31294] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.532905][T31319] FAULT_INJECTION: forcing a failure.
[  587.532905][T31319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.546074][T31319] CPU: 0 UID: 0 PID: 31319 Comm: syz.2.10501 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  587.546108][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  587.546158][T31319] Call Trace:
[  587.546166][T31319]  <TASK>
[  587.546175][T31319]  __dump_stack+0x1d/0x30
[  587.546202][T31319]  dump_stack_lvl+0xe8/0x140
[  587.546219][T31319]  dump_stack+0x15/0x1b
[  587.546233][T31319]  should_fail_ex+0x265/0x280
[  587.546344][T31319]  should_fail+0xb/0x20
[  587.546370][T31319]  should_fail_usercopy+0x1a/0x20
[  587.546436][T31319]  _copy_from_user+0x1c/0xb0
[  587.546522][T31319]  ___sys_sendmsg+0xc1/0x1d0
[  587.546563][T31319]  __x64_sys_sendmsg+0xd4/0x160
[  587.546598][T31319]  x64_sys_call+0x2999/0x2fb0
[  587.546617][T31319]  do_syscall_64+0xd0/0x1a0
[  587.546716][T31319]  ? clear_bhb_loop+0x25/0x80
[  587.546734][T31319]  ? clear_bhb_loop+0x25/0x80
[  587.546753][T31319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.546771][T31319] RIP: 0033:0x7fb3b8c2e969
[  587.546783][T31319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.546861][T31319] RSP: 002b:00007fb3b7297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.546890][T31319] RAX: ffffffffffffffda RBX: 00007fb3b8e55fa0 RCX: 00007fb3b8c2e969
[  587.546901][T31319] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  587.546911][T31319] RBP: 00007fb3b7297090 R08: 0000000000000000 R09: 0000000000000000
[  587.546922][T31319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.546933][T31319] R13: 0000000000000000 R14: 00007fb3b8e55fa0 R15: 00007ffc7cf98d78
[  587.546950][T31319]  </TASK>
[  587.765712][T31326] netlink: 'syz.2.10503': attribute type 1 has an invalid length.
[  587.895012][T31344] siw: device registration error -23
[  588.314570][T31366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31366 comm=syz.6.10518
[  588.329711][T31366] tmpfs: Bad value for 'mpol'
[  588.335018][T31366] atomic_op ffff888115918d28 conn xmit_atomic 0000000000000000
[  588.379302][T31371] block device autoloading is deprecated and will be removed.
[  588.450113][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10524'.
[  588.460968][T31378] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  588.508384][T31383] netlink: 'syz.6.10525': attribute type 1 has an invalid length.
[  588.558390][T31391] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  588.679142][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10519'.
[  588.701272][T31400] FAULT_INJECTION: forcing a failure.
[  588.701272][T31400] name failslab, interval 1, probability 0, space 0, times 0
[  588.713986][T31400] CPU: 0 UID: 0 PID: 31400 Comm: syz.3.10532 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  588.714022][T31400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  588.714094][T31400] Call Trace:
[  588.714103][T31400]  <TASK>
[  588.714113][T31400]  __dump_stack+0x1d/0x30
[  588.714165][T31400]  dump_stack_lvl+0xe8/0x140
[  588.714189][T31400]  dump_stack+0x15/0x1b
[  588.714210][T31400]  should_fail_ex+0x265/0x280
[  588.714249][T31400]  should_failslab+0x8c/0xb0
[  588.714286][T31400]  kmem_cache_alloc_node_noprof+0x57/0x320
[  588.714391][T31400]  ? __alloc_skb+0x101/0x320
[  588.714427][T31400]  __alloc_skb+0x101/0x320
[  588.714577][T31400]  netlink_alloc_large_skb+0xba/0xf0
[  588.714612][T31400]  netlink_sendmsg+0x3cf/0x6b0
[  588.714654][T31400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.714761][T31400]  __sock_sendmsg+0x142/0x180
[  588.714790][T31400]  ____sys_sendmsg+0x31e/0x4e0
[  588.714873][T31400]  ___sys_sendmsg+0x17b/0x1d0
[  588.714959][T31400]  __x64_sys_sendmsg+0xd4/0x160
[  588.715003][T31400]  x64_sys_call+0x2999/0x2fb0
[  588.715107][T31400]  do_syscall_64+0xd0/0x1a0
[  588.715132][T31400]  ? clear_bhb_loop+0x25/0x80
[  588.715159][T31400]  ? clear_bhb_loop+0x25/0x80
[  588.715182][T31400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.715247][T31400] RIP: 0033:0x7fbfe072e969
[  588.715268][T31400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.715372][T31400] RSP: 002b:00007fbfded97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.715432][T31400] RAX: ffffffffffffffda RBX: 00007fbfe0955fa0 RCX: 00007fbfe072e969
[  588.715445][T31400] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  588.715458][T31400] RBP: 00007fbfded97090 R08: 0000000000000000 R09: 0000000000000000
[  588.715475][T31400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.715491][T31400] R13: 0000000000000000 R14: 00007fbfe0955fa0 R15: 00007ffd8ea64d08
[  588.715516][T31400]  </TASK>
[  589.081484][T31415] No such timeout policy "syz0"
[  589.089198][T31416] netlink: 'syz.6.10539': attribute type 1 has an invalid length.
[  589.150960][T31425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31425 comm=syz.3.10545
[  589.167792][T31425] tmpfs: Bad value for 'mpol'
[  589.172912][T31425] atomic_op ffff888101e9e528 conn xmit_atomic 0000000000000000
[  589.183668][T31424] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  589.194733][T31426] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  589.314444][T31432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10548'.
[  589.402375][T31445] hsr0: entered promiscuous mode
[  589.533840][T31458] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  589.609080][T31465] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  589.807033][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10569'.
[  589.823167][T31484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  589.882327][T31484] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  589.888969][T31484] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  589.898271][T31484] vhci_hcd vhci_hcd.0: Device attached
[  589.925339][T31484] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(74)
[  589.931978][T31484] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  589.940094][T31484] vhci_hcd vhci_hcd.0: Device attached
[  589.956485][T31494] vhci_hcd: connection closed
[  589.956749][ T4717] vhci_hcd: stop threads
[  589.957798][T31492] vhci_hcd: connection closed
[  589.961621][ T4717] vhci_hcd: release socket
[  589.975033][ T4717] vhci_hcd: disconnect device
[  590.000194][ T4717] vhci_hcd: stop threads
[  590.004779][ T4717] vhci_hcd: release socket
[  590.009267][ T4717] vhci_hcd: disconnect device
[  590.045479][T31502] block device autoloading is deprecated and will be removed.
[  590.082643][   T29] kauditd_printk_skb: 765 callbacks suppressed
[  590.082663][   T29] audit: type=1326 audit(1745629313.608:250868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b8c25927 code=0x7ffc0000
[  590.112805][   T29] audit: type=1326 audit(1745629313.608:250869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b8bcab39 code=0x7ffc0000
[  590.136512][   T29] audit: type=1326 audit(1745629313.608:250870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b8c25927 code=0x7ffc0000
[  590.160245][   T29] audit: type=1326 audit(1745629313.608:250871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b8bcab39 code=0x7ffc0000
[  590.183983][   T29] audit: type=1326 audit(1745629313.608:250872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b8c25927 code=0x7ffc0000
[  590.207750][   T29] audit: type=1326 audit(1745629313.608:250873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b8bcab39 code=0x7ffc0000
[  590.231445][   T29] audit: type=1326 audit(1745629313.608:250874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b8c25927 code=0x7ffc0000
[  590.255278][   T29] audit: type=1326 audit(1745629313.608:250875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b8bcab39 code=0x7ffc0000
[  590.279057][   T29] audit: type=1326 audit(1745629313.608:250876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b8c25927 code=0x7ffc0000
[  590.302751][   T29] audit: type=1326 audit(1745629313.608:250877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.2.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b8bcab39 code=0x7ffc0000
[  591.216459][T31508] FAULT_INJECTION: forcing a failure.
[  591.216459][T31508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  591.229608][T31508] CPU: 0 UID: 0 PID: 31508 Comm: syz.3.10577 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  591.229656][T31508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  591.229672][T31508] Call Trace:
[  591.229680][T31508]  <TASK>
[  591.229689][T31508]  __dump_stack+0x1d/0x30
[  591.229715][T31508]  dump_stack_lvl+0xe8/0x140
[  591.229739][T31508]  dump_stack+0x15/0x1b
[  591.229812][T31508]  should_fail_ex+0x265/0x280
[  591.229852][T31508]  should_fail+0xb/0x20
[  591.229900][T31508]  should_fail_usercopy+0x1a/0x20
[  591.229933][T31508]  _copy_from_user+0x1c/0xb0
[  591.230021][T31508]  ___sys_sendmsg+0xc1/0x1d0
[  591.230068][T31508]  __x64_sys_sendmsg+0xd4/0x160
[  591.230110][T31508]  x64_sys_call+0x2999/0x2fb0
[  591.230135][T31508]  do_syscall_64+0xd0/0x1a0
[  591.230230][T31508]  ? clear_bhb_loop+0x25/0x80
[  591.230256][T31508]  ? clear_bhb_loop+0x25/0x80
[  591.230284][T31508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.230308][T31508] RIP: 0033:0x7fbfe072e969
[  591.230327][T31508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.230417][T31508] RSP: 002b:00007fbfded97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  591.230442][T31508] RAX: ffffffffffffffda RBX: 00007fbfe0955fa0 RCX: 00007fbfe072e969
[  591.230458][T31508] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  591.230474][T31508] RBP: 00007fbfded97090 R08: 0000000000000000 R09: 0000000000000000
[  591.230489][T31508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.230504][T31508] R13: 0000000000000000 R14: 00007fbfe0955fa0 R15: 00007ffd8ea64d08
[  591.230532][T31508]  </TASK>
[  591.549361][T31522] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  592.172174][T31556] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  592.182957][T31558] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  592.370272][T31570] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  592.370272][T31570]    program syz.3.10602 not setting count and/or reply_len properly
[  592.371149][T31572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31572 comm=syz.0.10603
[  592.421771][T31573] validate_nla: 3 callbacks suppressed
[  592.421787][T31573] netlink: 'syz.3.10602': attribute type 3 has an invalid length.
[  592.435273][T31573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10602'.
[  592.451385][T31572] tmpfs: Bad value for 'mpol'
[  592.458628][T31572] atomic_op ffff888118020d28 conn xmit_atomic 0000000000000000
[  592.576309][T31578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31578 comm=syz.0.10605
[  592.614936][T31578] tmpfs: Bad value for 'mpol'
[  592.664886][T31578] atomic_op ffff888118023528 conn xmit_atomic 0000000000000000
[  592.780398][T31589] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  592.780398][T31589]    program syz.0.10610 not setting count and/or reply_len properly
[  592.788485][T31589] netlink: 'syz.0.10610': attribute type 3 has an invalid length.
[  592.788502][T31589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10610'.
[  592.849013][T31595] loop6: detected capacity change from 0 to 1024
[  592.849411][T31595] EXT4-fs: Ignoring removed oldalloc option
[  592.851190][T31597] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10614'.
[  592.853276][T31595] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  592.909441][T31597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  592.944691][T31595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c098, mo2=0003]
[  592.953443][T31597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  592.968388][T31595] System zones: 0-1, 3-12
[  592.974088][T31597] bond0 (unregistering): Released all slaves
[  592.983673][T31595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.998178][T31606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31606 comm=syz.0.10616
[  593.030433][T30373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.045254][T31602] tmpfs: Bad value for 'mpol'
[  593.050318][T31602] atomic_op ffff88811951f128 conn xmit_atomic 0000000000000000
[  593.105393][T31622] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  593.148061][T31619] loop4: detected capacity change from 0 to 1024
[  593.155223][T31626] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10624'.
[  593.195222][T31619] EXT4-fs: Ignoring removed oldalloc option
[  593.218875][T31619] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  593.251442][T31619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c098, mo2=0003]
[  593.263232][T31634] block device autoloading is deprecated and will be removed.
[  593.283986][T31619] System zones: 0-1, 3-12
[  593.293503][T31638] netlink: 4 bytes leftover after parsing attributes in process `:-'.
[  593.302051][T31638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.309733][T31638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.336025][T31619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.355054][T31638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.362791][T31638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.375290][T31644] netlink: 'syz.2.10633': attribute type 1 has an invalid length.
[  593.412128][T31646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31646 comm=syz.0.10634
[  593.426390][T31646] tmpfs: Bad value for 'mpol'
[  593.438348][T27276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.449261][T31646] atomic_op ffff8881174f0d28 conn xmit_atomic 0000000000000000
[  593.458369][T27276] ==================================================================
[  593.466476][T27276] BUG: KCSAN: data-race in munlock_folio / need_mlock_drain
[  593.473765][T27276] 
[  593.476094][T27276] read-write to 0xffff888237c26610 of 1 bytes by task 31621 on cpu 0:
[  593.484253][T27276]  munlock_folio+0x44/0x120
[  593.488765][T27276]  folio_remove_rmap_ptes+0x197/0x1a0
[  593.494152][T27276]  unmap_page_range+0xe28/0x27b0
[  593.499096][T27276]  unmap_single_vma+0x138/0x1d0
[  593.503963][T27276]  unmap_vmas+0x18a/0x2b0
[  593.508300][T27276]  exit_mmap+0x1b0/0x6c0
[  593.512552][T27276]  __mmput+0x28/0x1c0
[  593.516540][T27276]  mmput+0x40/0x50
[  593.520266][T27276]  exit_mm+0xe4/0x190
[  593.524260][T27276]  do_exit+0x55f/0x17c0
[  593.528427][T27276]  do_group_exit+0x139/0x140
[  593.533030][T27276]  __x64_sys_exit_group+0x1f/0x20
[  593.538073][T27276]  x64_sys_call+0x2fa4/0x2fb0
[  593.542849][T27276]  do_syscall_64+0xd0/0x1a0
[  593.547386][T27276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.553289][T27276] 
[  593.555615][T27276] read to 0xffff888237c26610 of 1 bytes by task 27276 on cpu 1:
[  593.563247][T27276]  need_mlock_drain+0x30/0x50
[  593.567947][T27276]  __lru_add_drain_all+0x220/0x3f0
[  593.573072][T27276]  lru_add_drain_all+0x10/0x20
[  593.577845][T27276]  invalidate_bdev+0x47/0x70
[  593.582442][T27276]  ext4_put_super+0x624/0x7d0
[  593.587134][T27276]  generic_shutdown_super+0xe3/0x210
[  593.592477][T27276]  kill_block_super+0x2a/0x70
[  593.597162][T27276]  ext4_kill_sb+0x42/0x80
[  593.601502][T27276]  deactivate_locked_super+0x72/0x1c0
[  593.606880][T27276]  deactivate_super+0x97/0xa0
[  593.611559][T27276]  cleanup_mnt+0x269/0x2e0
[  593.615992][T27276]  __cleanup_mnt+0x19/0x20
[  593.620420][T27276]  task_work_run+0x12e/0x1a0
[  593.625018][T27276]  resume_user_mode_work+0x6a/0x70
[  593.630149][T27276]  syscall_exit_to_user_mode+0x77/0xb0
[  593.635624][T27276]  do_syscall_64+0xdd/0x1a0
[  593.640138][T27276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.646038][T27276] 
[  593.648358][T27276] value changed: 0x18 -> 0x1f
[  593.653030][T27276] 
[  593.655369][T27276] Reported by Kernel Concurrency Sanitizer on:
[  593.661521][T27276] CPU: 1 UID: 0 PID: 27276 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[  593.674633][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  593.684725][T27276] ==================================================================
[  593.707895][T27276] block device autoloading is deprecated and will be removed.