last executing test programs:

19.90334187s ago: executing program 4 (id=121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
lsm_get_self_attr(0x67, 0x0, &(0x7f0000000180), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6}, 0x10)
creat(0x0, 0xecf86c37d53049cc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r7, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8, 0x12a}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000828bd7000fbdbdf250a0000001800508409000100c6df2090dc00000005000900020000000900070030891d609200000005000800030000000800090001ac0f000800090001ac0f0062a0b6374455ae045af74d46b9f666d81dd09bf3df3f7b689488bbc6dccbc05172e7a25d65e46e081383e4c3df3e6193fe9881686176909785fb2109"], 0x50}, 0x1, 0x0, 0x0, 0x4884}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = semget$private(0x0, 0x2, 0x406)
semop(r10, &(0x7f0000000280)=[{0x3, 0x5, 0x1800}], 0x1)

19.781062709s ago: executing program 4 (id=123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan0\x00'})
r2 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x40, 0x0, 0x302})
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000440)=0xffffffffffff0001, 0x80, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = dup3(r1, r2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r3], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7})

19.759055269s ago: executing program 4 (id=126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

19.720951969s ago: executing program 4 (id=128):
r0 = socket(0x28, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18)
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

19.669374169s ago: executing program 4 (id=131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000280)=@sg0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0x44}, 0x1, 0xd, 0x0, 0x4040001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2ba640)
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42)
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r4 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1}, 0x1c)
listen(r5, 0x8957)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r5, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

18.614750047s ago: executing program 4 (id=149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000026a00000b0000000000007385ca9d0a0087a900"], 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async)
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) (async)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) (async)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
inotify_init1(0x0) (async)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) (async)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000026a00000b0000000000007385ca9d0a0087a900"], 0x0) (async)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) (async)

3.575355059s ago: executing program 32 (id=149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000026a00000b0000000000007385ca9d0a0087a900"], 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async)
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) (async)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) (async)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
inotify_init1(0x0) (async)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) (async)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000026a00000b0000000000007385ca9d0a0087a900"], 0x0) (async)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) (async)

2.107332046s ago: executing program 3 (id=378):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0)

2.034268996s ago: executing program 3 (id=380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.660828715s ago: executing program 2 (id=385):
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0})

1.612649074s ago: executing program 2 (id=387):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket(0x10, 0x3, 0x6)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000180)='./bus/file0\x00', 0x2041c3, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB="7f89788aa6aeed4380045dfd981401487441e95942697f07d43f26c6939fd0c05d1c0191c8c886c8eec946698d86462be47c85def89e902882cfb71d2443ad37af11b83006d68399a270b1fa8b7288fc31a93d8b4314e5"], 0x1, 0x1207, &(0x7f0000002dc0)="$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")
r4 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3)

1.554654204s ago: executing program 5 (id=343):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x404c080)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80c6)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r9=>0x0)
timer_delete(r9)
r10 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r10)
write$binfmt_script(r1, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb)
write$cgroup_int(r1, &(0x7f0000000080)=0xfe, 0x12)
ftruncate(r1, 0x1d)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10)

1.314720483s ago: executing program 5 (id=393):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000800000000000000000000085000000750009009500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

1.219865483s ago: executing program 2 (id=396):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)

1.165025413s ago: executing program 3 (id=397):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1})

1.147800063s ago: executing program 3 (id=398):
r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (fail_nth: 1)

878.361972ms ago: executing program 3 (id=401):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0)

877.931843ms ago: executing program 5 (id=402):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

874.373203ms ago: executing program 2 (id=403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x7}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x3}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001000000080003"], 0x28}}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a48672"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket(0x1e, 0x1, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0xce)
sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
timer_create(0x3, 0x0, &(0x7f00000002c0)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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")
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000200))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c000240000000000000ffff0b00014000000000000000000900030073797a320000000028000480080002400000000014000300"], 0xd4}}, 0x0)
r9 = fcntl$getown(0xffffffffffffffff, 0x9)
wait4(r9, 0x0, 0x1, &(0x7f00000009c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000500000002000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001003a463e4faf2cc4751f000000000000000000000000000000000000000000009cfc1cc74cb7d9be646f453c1691d6be429a0c0be8fbdcc4825823c678d7778da5e37c4cf109243bbe0aaa8c7aae40392063a0f466425e79ec3cbc9ca6a71017f464217fd1b5bdd1c6d6ecf21901e0313a5c755dcf89"], 0x48)

844.125372ms ago: executing program 5 (id=404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, <r4=>0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES8=r3], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x40001f00, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
close(r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008d2a86fd9ad8eba5144c96c7e4e89c6840acb5c525864708f0f2d3920e3c8fa771112a78c9b540fb48f2d2926d31b59cd139bfce8d13c07877662ee378296af2ed4feefa8b7bf629581882f844bcdeee85cbd671a71d6612b4d1534e6d1322926d52a08a8d0c67deea48067972ee021146f6e4aefc06970dc6a89d42468a3debec074494b2757136e9f012bf", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x802, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@debug}, {@bsdgroups}, {@oldalloc}, {@nombcache}]}, 0x0, 0x448, &(0x7f0000000400)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)

795.350222ms ago: executing program 3 (id=407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

761.648742ms ago: executing program 0 (id=408):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1})

746.803182ms ago: executing program 0 (id=410):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x8, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r2, 0x1, 0x1}, 0x14}}, 0x24014040)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000080df2b96f508f03449ab676315cbc6a43f924f63842bbee3837aacd1b12b13a4f08bd1bfff9e8d48f1f2017ceaa198b9f215fe9425113d5c09b7c880ba345809299deb8dcd349c10d2d52096d7055f3f537e6477c487865f7318a234a80b5500f71fe45ee0d75678f3ac174f359cbe85f0f9fbcd7b561414793d7ae8cbdafdca5d491338c73c44e4afb5f6fd5c87132ef686461629fc1e151aa53534465d07a9b9e61a47c9c98ca3aa1b97433bef64b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8", 0x13}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000048009125745c7388641f9c0e0a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000008, 0x10032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
syz_read_part_table(0x5df, &(0x7f0000000000)="$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")

720.515322ms ago: executing program 1 (id=411):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = socket(0x40000000015, 0x805, 0x0)
r2 = syz_io_uring_setup(0x231, &(0x7f0000001240)={0x0, 0x8cc8, 0x10100, 0x2, 0x3a9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'geneve1\x00', &(0x7f00000003c0)=@ethtool_modinfo={0x42, 0x0, 0x3}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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")
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

613.600412ms ago: executing program 0 (id=412):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18)
r2 = socket(0xb, 0xb, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
r7 = socket$inet6(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00e3ff00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket(0x1d, 0x2, 0x6)
r8 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r8, 0x567, 0x60, 0x0, 0x0, 0x0)
sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000540))
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1a00000400000000000000000000000018110000324e4bfe3224830400081490f1cc208f1fcbbb85dde2da2d245be4dfbd813ebd6f9e23877e98848e98b778130e3fd91299a1ed2ac1b40995d96b056af25955b937d7e0ac4ca284010072010ade8fc2e5c46dd350866881d816c90c4b261b23ab35f2926467056a2727431865ea9b70d726f46849066aca2eabe6513800278f101028f191d2cec4ea5851621c7a12a27ff7a2688fef1d7007328f5fc4a6d7539ea20b0e66eb5d3fceb4f8e50cc5a901b6a3846c42d71e9750001130f0015d8b76b1d7ad0c52f5bd924f5c6ddcccb35af6b4d5bedcf98ab14dc73557e8f1188ebe82c0eb1b84", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18)
mount$9p_tcp(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=t'])
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00', <r14=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x5}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)
connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r14, 0x2, {0x0, 0x1, 0x1}, 0x2}, 0x18)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10)

461.482291ms ago: executing program 1 (id=413):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

351.583951ms ago: executing program 2 (id=414):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)

296.906211ms ago: executing program 0 (id=415):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

104.894311ms ago: executing program 0 (id=416):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
pivot_root(0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0xc5)
close_range(r0, r0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0)
write$cgroup_int(r11, &(0x7f0000000080)=0x5, 0x12)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0xa0}, 0x1, 0x0, 0x0, 0x24008090}, 0x0)
io_setup(0x28ad, &(0x7f0000004200))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2188c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)

101.36415ms ago: executing program 1 (id=417):
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = dup(r1)
setsockopt$inet6_opts(r3, 0x29, 0x2, &(0x7f0000000dc0)=ANY=[@ANYRES16=r1, @ANYBLOB="d7a3b97ac3642c9b4de3dc4bb24b0810b3bd7537d2b853d3b14e4f7b18147b9702e672cf0b3f7c4fba2550127d706a57427cba338b517d60292461a48436dee2551d1aa0a16defdfe5bfde1ccdd1d75ff4cb931a6ae305327fa5e84a4f3b63e8f7465d34d04b71ed901cfa409017dbce6ad3a0af9c", @ANYRES32=r0, @ANYRES16=r2], 0x1d8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)="f555c0b71c97fb4c8945403e52cb912b72407dab1660d67a701d6a04e468ee24aa1243c64b717a5bc352947100977916c1ccac28a125b8bc3357ea0df10be4a4a1fdbbc2aa12c99b", &(0x7f0000000380)="4022a7fb6e33dd2fbf63bc6855fc21358562c581e36ff9bff376fffc7fb2e82d1b2f1bee9b1fa3127fe0d09adf4606f3e4db496a9c5e2d1729b8c1073716a0f85c5806efa1ad8a2c82dbe2e971e6a89cf83ef7d33b44cc0172d8da21500795d3d8d1a894ce9a67c47212550371dbf2d4ab1d4fa4c78d907a231a3ad927", 0x3, r2}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x1)
fchdir(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r8, 0x3, 0x0)
getdents64(r8, 0x0, 0x22)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1b7101, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x3)
ioctl$FIONREAD(r10, 0x541b, &(0x7f0000002300))
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b1, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@ldst={0x3, 0x0, 0x2, 0x1, 0x0, 0x100, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x6, 0x6c, &(0x7f00000004c0)=""/108, 0x0, 0x79, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xd, 0xfff, 0x71b}, 0x10, 0x0, r4, 0xa, &(0x7f00000005c0)=[r8, r2, 0xffffffffffffffff, r7, r7, r2, r2, r7, r2], &(0x7f0000000600)=[{0x2, 0x3, 0xd, 0x4}, {0x5, 0x5, 0x0, 0x6}, {0x5, 0x1, 0xf, 0x4}, {0x3, 0x2, 0xf, 0x6}, {0x3, 0x3, 0xd, 0x4}, {0x4, 0x2, 0x8, 0x6}, {0x2, 0x4, 0xb, 0x7}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x5, 0xd, 0x2}, {0x4, 0x5, 0x3, 0x6}], 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd2}, @generic={0xa, 0x5, 0x4, 0x9, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000008c0)='GPL\x00', 0x7840, 0xa9, &(0x7f0000000900)=""/169, 0x41000, 0x6, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0xd, 0x35d2aeb3, 0xa1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r8, r2, r8, r7, r8, r7, r7, r8, r8, r2], &(0x7f0000000a80)=[{0x2, 0x1, 0x8, 0xb}, {0x5, 0x2, 0x7, 0x5}], 0x10, 0x100, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@ifindex, 0x32, 0x1, 0x3ff, &(0x7f0000000b80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRESHEX=r8, @ANYRES32=r11, @ANYBLOB="1500000004200000", @ANYRES32=r12, @ANYRES32=r7, @ANYRES16=r10, @ANYBLOB="e2efd77edd8cf008eec886bb768cc061e812d659009a1582f9de46d1"], 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r8)

41.06048ms ago: executing program 1 (id=418):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0)

40.58378ms ago: executing program 0 (id=419):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain)
r1 = creat(0x0, 0x0)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=0x0], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xb7400000000})
fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa71})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
add_key$user(&(0x7f00000006c0), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000580)="ae2ccefc7c025e27755f8168b203872f5d", 0x11, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000280)=0x4)
r8 = socket$inet(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="27008e2a", @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9, @ANYBLOB], 0x2c}}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x34, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}}, 0x8020)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r4}, 0x18)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001c00010000040000f9dbdf250a000000", @ANYRESHEX=r9, @ANYBLOB="10f9595ba2a119522e3747da88a0d68c"], 0x28}}, 0x400408c)

39.9393ms ago: executing program 1 (id=420):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1})

6.37624ms ago: executing program 1 (id=421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

0s ago: executing program 2 (id=422):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000280)=@sg0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x44}, 0x1, 0xd, 0x0, 0x4040001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2ba640)
r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42)
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r3 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1}, 0x1c)
listen(r4, 0x8957)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r4, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[   20.900669][   T29] audit: type=1400 audit(1741073670.180:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts.
[   27.874300][   T29] audit: type=1400 audit(1741073677.150:82): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.875311][ T3287] cgroup: Unknown subsys name 'net'
[   27.897081][   T29] audit: type=1400 audit(1741073677.150:83): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.924461][   T29] audit: type=1400 audit(1741073677.180:84): avc:  denied  { unmount } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.076599][ T3287] cgroup: Unknown subsys name 'cpuset'
[   28.082745][ T3287] cgroup: Unknown subsys name 'rlimit'
[   28.203483][   T29] audit: type=1400 audit(1741073677.480:85): avc:  denied  { setattr } for  pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.226911][   T29] audit: type=1400 audit(1741073677.480:86): avc:  denied  { create } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.247525][   T29] audit: type=1400 audit(1741073677.480:87): avc:  denied  { write } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.248265][ T3291] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.267917][   T29] audit: type=1400 audit(1741073677.480:88): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.267942][   T29] audit: type=1400 audit(1741073677.500:89): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.322004][   T29] audit: type=1400 audit(1741073677.500:90): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.326222][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.345237][   T29] audit: type=1400 audit(1741073677.560:91): avc:  denied  { relabelto } for  pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.490312][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   29.499049][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   29.541933][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   29.613029][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.620169][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.627406][ T3305] bridge_slave_0: entered allmulticast mode
[   29.634005][ T3305] bridge_slave_0: entered promiscuous mode
[   29.645159][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   29.664921][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.672028][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.679315][ T3305] bridge_slave_1: entered allmulticast mode
[   29.685685][ T3305] bridge_slave_1: entered promiscuous mode
[   29.699133][ T3297] chnl_net:caif_netlink_parms(): no params data found
[   29.710613][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.717713][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.724913][ T3300] bridge_slave_0: entered allmulticast mode
[   29.731511][ T3300] bridge_slave_0: entered promiscuous mode
[   29.742295][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.749452][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.756674][ T3298] bridge_slave_0: entered allmulticast mode
[   29.763112][ T3298] bridge_slave_0: entered promiscuous mode
[   29.789303][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.796413][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.803596][ T3300] bridge_slave_1: entered allmulticast mode
[   29.810035][ T3300] bridge_slave_1: entered promiscuous mode
[   29.821283][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.828430][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.835655][ T3298] bridge_slave_1: entered allmulticast mode
[   29.842159][ T3298] bridge_slave_1: entered promiscuous mode
[   29.863359][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.889643][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.904325][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.914801][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.929878][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.957016][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.970831][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.977969][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.985982][ T3304] bridge_slave_0: entered allmulticast mode
[   29.992557][ T3304] bridge_slave_0: entered promiscuous mode
[   30.013683][ T3305] team0: Port device team_slave_0 added
[   30.020380][ T3305] team0: Port device team_slave_1 added
[   30.031635][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.038802][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.046216][ T3304] bridge_slave_1: entered allmulticast mode
[   30.052581][ T3304] bridge_slave_1: entered promiscuous mode
[   30.059620][ T3300] team0: Port device team_slave_0 added
[   30.084876][ T3300] team0: Port device team_slave_1 added
[   30.100225][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.107338][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.114543][ T3297] bridge_slave_0: entered allmulticast mode
[   30.120977][ T3297] bridge_slave_0: entered promiscuous mode
[   30.128059][ T3298] team0: Port device team_slave_0 added
[   30.133856][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.140989][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.148286][ T3297] bridge_slave_1: entered allmulticast mode
[   30.155009][ T3297] bridge_slave_1: entered promiscuous mode
[   30.161597][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.168600][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.194556][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.211119][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.220490][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.227584][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.253571][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.264982][ T3298] team0: Port device team_slave_1 added
[   30.280290][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.287292][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.313278][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.325150][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.338998][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.346032][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.372052][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.401984][ T3304] team0: Port device team_slave_0 added
[   30.407910][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.414888][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.440929][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.452868][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.462315][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.469293][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.495281][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.508352][ T3304] team0: Port device team_slave_1 added
[   30.521132][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.574337][ T3300] hsr_slave_0: entered promiscuous mode
[   30.580410][ T3300] hsr_slave_1: entered promiscuous mode
[   30.587285][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.594315][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.620287][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.632131][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.639175][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.665192][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.676764][ T3297] team0: Port device team_slave_0 added
[   30.684510][ T3305] hsr_slave_0: entered promiscuous mode
[   30.690578][ T3305] hsr_slave_1: entered promiscuous mode
[   30.696618][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.704229][ T3305] Cannot create hsr debugfs directory
[   30.728674][ T3297] team0: Port device team_slave_1 added
[   30.746085][ T3298] hsr_slave_0: entered promiscuous mode
[   30.752064][ T3298] hsr_slave_1: entered promiscuous mode
[   30.758224][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.765846][ T3298] Cannot create hsr debugfs directory
[   30.787288][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.794290][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.820264][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.843636][ T3304] hsr_slave_0: entered promiscuous mode
[   30.849922][ T3304] hsr_slave_1: entered promiscuous mode
[   30.855868][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.863432][ T3304] Cannot create hsr debugfs directory
[   30.871326][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.878460][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.904376][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.986352][ T3297] hsr_slave_0: entered promiscuous mode
[   30.992388][ T3297] hsr_slave_1: entered promiscuous mode
[   30.998396][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.006034][ T3297] Cannot create hsr debugfs directory
[   31.115534][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.131894][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.145118][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.161188][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.179066][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.188023][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.200191][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.210991][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.228787][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.241184][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.251094][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.260517][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.300321][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.312036][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.321402][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.335199][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.362831][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.372360][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.381692][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.390546][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.456986][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.467922][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.478978][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.498750][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.516974][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   31.528538][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.535593][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.545173][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.555540][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   31.568800][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.575937][ T1722] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.586795][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.593897][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.602452][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   31.617400][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.624662][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.634046][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.641176][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.650081][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.657214][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.670675][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.677882][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.686763][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.693806][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.724750][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.735176][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.752302][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.789211][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.812105][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.838759][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   31.846254][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.883803][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.892103][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.899243][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.908690][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.915870][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.956634][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.964405][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.985210][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.999965][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.084836][ T3300] veth0_vlan: entered promiscuous mode
[   32.119331][ T3300] veth1_vlan: entered promiscuous mode
[   32.143689][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.156770][ T3304] veth0_vlan: entered promiscuous mode
[   32.181583][ T3300] veth0_macvtap: entered promiscuous mode
[   32.188716][ T3304] veth1_vlan: entered promiscuous mode
[   32.201240][ T3300] veth1_macvtap: entered promiscuous mode
[   32.214111][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.223217][ T3305] veth0_vlan: entered promiscuous mode
[   32.234946][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.245190][ T3305] veth1_vlan: entered promiscuous mode
[   32.262294][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.271131][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.279921][ T3300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.288744][ T3300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.308799][ T3298] veth0_vlan: entered promiscuous mode
[   32.328878][ T3304] veth0_macvtap: entered promiscuous mode
[   32.336212][ T3298] veth1_vlan: entered promiscuous mode
[   32.342738][ T3304] veth1_macvtap: entered promiscuous mode
[   32.359697][ T3305] veth0_macvtap: entered promiscuous mode
[   32.374959][ T3297] veth0_vlan: entered promiscuous mode
[   32.392816][ T3305] veth1_macvtap: entered promiscuous mode
[   32.400985][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.411557][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.422543][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.432653][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.433498][ T3298] veth0_macvtap: entered promiscuous mode
[   32.454817][ T3297] veth1_vlan: entered promiscuous mode
[   32.466516][ T3298] veth1_macvtap: entered promiscuous mode
[   32.476064][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.486583][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.496516][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.506977][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.519739][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.534614][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.545137][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.559400][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.568786][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.577650][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.586432][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.595260][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.611739][ T3297] veth0_macvtap: entered promiscuous mode
[   32.619498][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.629995][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.639847][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.650271][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.664634][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.678424][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.688924][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.698855][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.709363][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.719187][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.729627][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.740141][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.751779][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.760691][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.769614][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.778357][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.789177][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.799822][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.809762][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.820229][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.830074][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.840510][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.851051][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.860672][ T3297] veth1_macvtap: entered promiscuous mode
[   32.874530][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.883462][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.892265][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.901020][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.933424][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.944038][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.953985][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.964563][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.974810][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.985592][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.995634][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.006610][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.019732][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.028532][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.039033][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.049045][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.059580][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.069475][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.079917][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.089808][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.100274][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.111293][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.124158][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.133007][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.141802][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.150625][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.175399][ T3451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.208575][   T29] kauditd_printk_skb: 80 callbacks suppressed
[   33.208593][   T29] audit: type=1400 audit(1741073682.490:172): avc:  denied  { write } for  pid=3455 comm="syz.0.8" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   33.248335][ T3454] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   33.255892][ T3454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   33.275785][ T3458] loop3: detected capacity change from 0 to 512
[   33.282327][ T3458] =======================================================
[   33.282327][ T3458] WARNING: The mand mount option has been deprecated and
[   33.282327][ T3458]          and is ignored by this kernel. Remove the mand
[   33.282327][ T3458]          option from the mount to silence this warning.
[   33.282327][ T3458] =======================================================
[   33.321509][ T3458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   33.396999][ T3458] EXT4-fs (loop3): orphan cleanup on readonly fs
[   33.404413][ T3458] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   33.413914][ T3458] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   33.423350][ T3458] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.7: Failed to acquire dquot type 1
[   33.438963][ T3458] EXT4-fs (loop3): 1 truncate cleaned up
[   33.471909][ T3456] loop0: detected capacity change from 0 to 128
[   33.588516][   T29] audit: type=1400 audit(1741073682.870:173): avc:  denied  { open } for  pid=3460 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.607580][   T29] audit: type=1400 audit(1741073682.870:174): avc:  denied  { kernel } for  pid=3460 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.799269][ T3463] IPv6: NLM_F_CREATE should be specified when creating new route
[   33.917854][ T3456] syz.0.8: attempt to access beyond end of device
[   33.917854][ T3456] loop0: rw=2049, sector=193, nr_sectors = 48 limit=128
[   33.959430][ T3472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'.
[   34.022010][   T29] audit: type=1400 audit(1741073682.960:175): avc:  denied  { mount } for  pid=3455 comm="syz.0.8" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   34.043868][   T29] audit: type=1400 audit(1741073683.220:176): avc:  denied  { write } for  pid=3460 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.062958][   T29] audit: type=1326 audit(1741073683.220:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   34.086263][   T29] audit: type=1326 audit(1741073683.220:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   34.109412][   T29] audit: type=1326 audit(1741073683.220:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   34.197110][ T3458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   34.210334][ T3456] syz.0.8: attempt to access beyond end of device
[   34.210334][ T3456] loop0: rw=2049, sector=241, nr_sectors = 1 limit=128
[   34.214881][ T3458] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.223524][ T3456] Buffer I/O error on dev loop0, logical block 241, lost async page write
[   34.682603][ T3456] syz.0.8: attempt to access beyond end of device
[   34.682603][ T3456] loop0: rw=2049, sector=241, nr_sectors = 136 limit=128
[   34.841418][ T3481] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET)
[   35.033772][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.059907][ T3419] kworker/u8:8: attempt to access beyond end of device
[   35.059907][ T3419] loop0: rw=1, sector=377, nr_sectors = 664 limit=128
[   35.264751][ T3493] loop3: detected capacity change from 0 to 4096
[   35.294696][ T3506] lo: entered promiscuous mode
[   35.299636][ T3506] lo: entered allmulticast mode
[   35.318405][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.338575][ T3483] loop1: detected capacity change from 0 to 8192
[   35.351860][ T3483] syz.1.14: attempt to access beyond end of device
[   35.351860][ T3483] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   35.365630][ T3483] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   35.373550][ T3483] FAT-fs (loop1): Filesystem has been set read-only
[   35.382135][ T3502] loop0: detected capacity change from 0 to 512
[   35.391137][ T3483] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   35.400583][ T3483] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   35.448912][ T3502] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   35.530850][ T3502] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6
[   35.581629][ T3517] FAULT_INJECTION: forcing a failure.
[   35.581629][ T3517] name failslab, interval 1, probability 0, space 0, times 1
[   35.594537][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: syz.4.25 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   35.594572][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   35.594587][ T3517] Call Trace:
[   35.594647][ T3517]  <TASK>
[   35.594656][ T3517]  dump_stack_lvl+0xf2/0x150
[   35.594688][ T3517]  dump_stack+0x15/0x1a
[   35.594709][ T3517]  should_fail_ex+0x24a/0x260
[   35.594741][ T3517]  ? __pfx_cgroup_show_path+0x10/0x10
[   35.594793][ T3517]  ? cgroup_show_path+0x6b/0x2a0
[   35.594831][ T3517]  should_failslab+0x8f/0xb0
[   35.594867][ T3517]  __kmalloc_cache_noprof+0x4e/0x320
[   35.594942][ T3517]  ? __pfx_cgroup_show_path+0x10/0x10
[   35.594979][ T3517]  cgroup_show_path+0x6b/0x2a0
[   35.595016][ T3517]  ? __pfx_cgroup_show_path+0x10/0x10
[   35.595069][ T3517]  kernfs_sop_show_path+0xa8/0xe0
[   35.595097][ T3517]  ? __pfx_kernfs_sop_show_path+0x10/0x10
[   35.595126][ T3517]  show_path+0x57/0x80
[   35.595173][ T3517]  show_mountinfo+0xd9/0x610
[   35.595230][ T3517]  m_show+0x3b/0x50
[   35.595315][ T3517]  traverse+0x155/0x3c0
[   35.595402][ T3517]  seq_lseek+0xa8/0x160
[   35.595451][ T3517]  __x64_sys_lseek+0xe7/0x160
[   35.595534][ T3517]  x64_sys_call+0x2a7c/0x2dc0
[   35.595573][ T3517]  do_syscall_64+0xc9/0x1c0
[   35.595611][ T3517]  ? clear_bhb_loop+0x55/0xb0
[   35.595643][ T3517]  ? clear_bhb_loop+0x55/0xb0
[   35.595680][ T3517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.595794][ T3517] RIP: 0033:0x7f9f8919d169
[   35.595818][ T3517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.595901][ T3517] RSP: 002b:00007f9f87807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[   35.595919][ T3517] RAX: ffffffffffffffda RBX: 00007f9f893b5fa0 RCX: 00007f9f8919d169
[   35.595930][ T3517] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000005
[   35.595943][ T3517] RBP: 00007f9f87807090 R08: 0000000000000000 R09: 0000000000000000
[   35.595956][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.595970][ T3517] R13: 0000000000000000 R14: 00007f9f893b5fa0 R15: 00007ffee61d0578
[   35.595990][ T3517]  </TASK>
[   35.822346][ T3519] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.26'.
[   35.889289][ T3525] lo: entered promiscuous mode
[   35.894151][ T3525] lo: entered allmulticast mode
[   35.906257][ T3502] loop0: detected capacity change from 0 to 8192
[   35.948667][ T3510] syz.3.18 (3510) used greatest stack depth: 10920 bytes left
[   35.973393][ T3530] loop2: detected capacity change from 0 to 512
[   35.997395][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.009158][ T3530] EXT4-fs: Ignoring removed orlov option
[   36.029811][ T3530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   36.155410][ T3530] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.29: casefold flag without casefold feature
[   36.195856][ T3530] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.29: couldn't read orphan inode 15 (err -117)
[   36.213926][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.255469][ T3543] lo: entered promiscuous mode
[   36.260326][ T3543] lo: entered allmulticast mode
[   36.269504][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.432262][ T3552] tipc: Started in network mode
[   36.437250][ T3552] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   36.446179][ T3552] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   36.522399][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'.
[   36.564177][ T3559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5148 sclass=netlink_route_socket pid=3559 comm=syz.2.36
[   36.721461][ T3576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.50'.
[   36.738914][ T3545] loop0: detected capacity change from 0 to 8192
[   36.820835][ T3545] syz.0.35: attempt to access beyond end of device
[   36.820835][ T3545] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   36.889320][ T3583] netlink: 'syz.3.51': attribute type 1 has an invalid length.
[   36.900804][ T3583] loop3: detected capacity change from 0 to 512
[   36.907429][ T3583] EXT4-fs: Ignoring removed oldalloc option
[   36.934447][ T3583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   36.959512][ T3545] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   36.967435][ T3545] FAT-fs (loop0): Filesystem has been set read-only
[   36.982794][ T3585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'.
[   37.007221][ T3583] EXT4-fs (loop3): orphan cleanup on readonly fs
[   37.014628][ T3583] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.51: Failed to acquire dquot type 1
[   37.027223][ T3583] EXT4-fs (loop3): 1 truncate cleaned up
[   37.034151][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.184009][ T3545] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   37.438937][ T3545] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   37.485211][ T3596] xt_socket: unknown flags 0x58
[   37.751058][ T3602] batman_adv: batadv0: Adding interface: gretap1
[   37.757495][ T3602] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.782896][ T3602] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   37.962073][ T3610] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   37.970343][ T3610] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   38.088899][ T3615] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   38.097177][ T3615] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   38.214260][ T3624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'.
[   38.241629][ T3626] tipc: Started in network mode
[   38.246649][ T3626] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   38.255554][ T3626] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   38.304914][ T3628] lo: entered promiscuous mode
[   38.309797][ T3628] lo: entered allmulticast mode
[   38.360399][   T29] kauditd_printk_skb: 221 callbacks suppressed
[   38.360413][   T29] audit: type=1326 audit(1741073687.640:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.490913][   T29] audit: type=1326 audit(1741073687.670:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.514266][   T29] audit: type=1326 audit(1741073687.670:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.537545][   T29] audit: type=1326 audit(1741073687.670:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.560826][   T29] audit: type=1326 audit(1741073687.670:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.584199][   T29] audit: type=1326 audit(1741073687.670:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.607429][   T29] audit: type=1326 audit(1741073687.670:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.630880][   T29] audit: type=1326 audit(1741073687.680:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.631067][ T3635] loop4: detected capacity change from 0 to 8192
[   38.654082][   T29] audit: type=1326 audit(1741073687.680:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.683705][   T29] audit: type=1326 audit(1741073687.680:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   38.709390][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.727236][ T3638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.871295][ T3647] loop3: detected capacity change from 0 to 512
[   38.951802][ T3647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   38.967129][ T3647] EXT4-fs (loop3): orphan cleanup on readonly fs
[   38.974487][ T3647] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.72: Failed to acquire dquot type 1
[   38.987065][ T3647] EXT4-fs (loop3): 1 truncate cleaned up
[   39.759779][ T3647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.134240][ T3659] tipc: Started in network mode
[   40.139271][ T3659] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   40.169542][ T3659] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   40.527702][ T3666] netlink: 'syz.4.82': attribute type 1 has an invalid length.
[   40.538311][ T3666] loop4: detected capacity change from 0 to 512
[   40.544829][ T3666] EXT4-fs: Ignoring removed oldalloc option
[   40.578863][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.592210][ T3666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.615044][ T3666] EXT4-fs (loop4): orphan cleanup on readonly fs
[   40.623285][ T3666] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.82: Failed to acquire dquot type 1
[   40.635184][ T3666] EXT4-fs (loop4): 1 truncate cleaned up
[   40.641862][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.824883][ T3673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'.
[   41.171136][ T2999] udevd[2999]: worker [3290] terminated by signal 33 (Unknown signal 33)
[   41.184022][ T2999] udevd[2999]: worker [3290] failed while handling '/devices/virtual/block/loop1'
[   41.623976][ T3706] loop0: detected capacity change from 0 to 8192
[   42.101163][ T3711] loop3: detected capacity change from 0 to 512
[   42.128808][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.140841][ T3711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.150347][ T3711] EXT4-fs (loop3): orphan cleanup on readonly fs
[   42.157690][ T3711] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.97: Failed to acquire dquot type 1
[   42.181479][ T3711] EXT4-fs (loop3): 1 truncate cleaned up
[   42.189797][ T3711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.597600][ T3722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'.
[   42.701334][ T3729] loop4: detected capacity change from 0 to 256
[   42.764291][ T3733] SELinux:  unknown common 
[   42.773517][ T3733] SELinux: failed to load policy
[   42.786467][ T3733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'.
[   42.801916][ T3729] syz.4.104 (3729) used greatest stack depth: 10888 bytes left
[   43.185083][ T3738] mmap: syz.4.106 (3738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   43.529162][ T3735] loop2: detected capacity change from 0 to 512
[   43.543915][ T3735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   43.553617][ T3735] EXT4-fs (loop2): orphan cleanup on readonly fs
[   43.570723][ T3735] __quota_error: 62 callbacks suppressed
[   43.570740][ T3735] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[   43.585864][ T3735] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   43.595322][ T3735] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.105: Failed to acquire dquot type 1
[   43.624150][ T3735] EXT4-fs (loop2): 1 truncate cleaned up
[   43.631171][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.769549][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.114812][   T29] audit: type=1400 audit(1741073693.390:465): avc:  denied  { create } for  pid=3743 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   44.138504][ T3744] vlan2: entered allmulticast mode
[   44.239390][   T29] audit: type=1400 audit(1741073693.410:466): avc:  denied  { ioctl } for  pid=3743 comm="syz.0.109" path="socket:[5489]" dev="sockfs" ino=5489 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   44.534938][ T3761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'.
[   44.588054][ T3757] loop3: detected capacity change from 0 to 8192
[   44.629950][ T3765] netlink: 312 bytes leftover after parsing attributes in process `syz.0.116'.
[   44.677814][ T3765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[   44.741711][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[   44.784024][ T3767] loop1: detected capacity change from 0 to 128
[   44.876934][   T29] audit: type=1326 audit(1741073694.140:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   44.900375][   T29] audit: type=1326 audit(1741073694.140:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   44.923710][   T29] audit: type=1326 audit(1741073694.140:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   44.947102][   T29] audit: type=1326 audit(1741073694.140:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   44.970361][   T29] audit: type=1326 audit(1741073694.140:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   44.993621][   T29] audit: type=1326 audit(1741073694.140:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ab5b2d169 code=0x7ffc0000
[   45.072111][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.085817][ T3774] netlink: 'syz.4.121': attribute type 298 has an invalid length.
[   45.159967][ T3769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'.
[   45.285466][ T3800] loop1: detected capacity change from 0 to 512
[   45.308656][ T3800] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[   45.318930][ T3800] EXT4-fs (loop1): group descriptors corrupted!
[   45.340273][ T3806] bridge_slave_0: left allmulticast mode
[   45.346236][ T3806] bridge_slave_0: left promiscuous mode
[   45.352014][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.368246][ T3812] FAULT_INJECTION: forcing a failure.
[   45.368246][ T3812] name failslab, interval 1, probability 0, space 0, times 0
[   45.370644][ T3806] bridge_slave_1: left allmulticast mode
[   45.381103][ T3812] CPU: 1 UID: 0 PID: 3812 Comm: syz.1.134 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   45.381131][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   45.381147][ T3812] Call Trace:
[   45.381155][ T3812]  <TASK>
[   45.381166][ T3812]  dump_stack_lvl+0xf2/0x150
[   45.381203][ T3812]  dump_stack+0x15/0x1a
[   45.381230][ T3812]  should_fail_ex+0x24a/0x260
[   45.381270][ T3812]  should_failslab+0x8f/0xb0
[   45.381308][ T3812]  kmem_cache_alloc_noprof+0x52/0x320
[   45.381335][ T3812]  ? vm_area_alloc+0xac/0x130
[   45.381365][ T3812]  vm_area_alloc+0xac/0x130
[   45.381393][ T3812]  mmap_region+0x819/0x1620
[   45.381443][ T3812]  do_mmap+0x98a/0xc30
[   45.381490][ T3812]  vm_mmap_pgoff+0x16d/0x2d0
[   45.381532][ T3812]  ksys_mmap_pgoff+0xd0/0x330
[   45.381570][ T3812]  ? fpregs_assert_state_consistent+0x83/0xa0
[   45.381598][ T3812]  x64_sys_call+0x1940/0x2dc0
[   45.381631][ T3812]  do_syscall_64+0xc9/0x1c0
[   45.381671][ T3812]  ? clear_bhb_loop+0x55/0xb0
[   45.381704][ T3812]  ? clear_bhb_loop+0x55/0xb0
[   45.381738][ T3812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.381771][ T3812] RIP: 0033:0x7f807b73d1a3
[   45.381789][ T3812] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[   45.381811][ T3812] RSP: 002b:00007f8079da6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   45.381834][ T3812] RAX: ffffffffffffffda RBX: 0000000000000558 RCX: 00007f807b73d1a3
[   45.381849][ T3812] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[   45.381864][ T3812] RBP: 0000400000000482 R08: 00000000ffffffff R09: 0000000000000000
[   45.381878][ T3812] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[   45.381893][ T3812] R13: 00007f8079da6ef0 R14: 00007f8079da6eb0 R15: 0000400000000a00
[   45.381915][ T3812]  </TASK>
[   45.431869][ T3814] loop1: detected capacity change from 0 to 4096
[   45.432434][ T3806] bridge_slave_1: left promiscuous mode
[   45.583742][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.602120][ T3806] bond0: (slave bond_slave_0): Releasing backup interface
[   45.611122][ T3814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.627499][ T3806] bond0: (slave bond_slave_1): Releasing backup interface
[   45.641839][ T3806] team0: Port device team_slave_0 removed
[   45.651535][ T3806] team0: Port device team_slave_1 removed
[   45.659863][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.667542][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.678424][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.685993][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.738166][ T3814] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.135: corrupted inode contents
[   45.756494][ T3814] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #15: comm syz.1.135: mark_inode_dirty error
[   45.769834][ T3814] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.135: corrupted inode contents
[   45.782163][ T3814] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.135: mark_inode_dirty error
[   45.794895][ T3814] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.135: corrupted inode contents
[   45.808289][ T3814] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.135: mark_inode_dirty error
[   45.826079][ T3822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55312 sclass=netlink_route_socket pid=3822 comm=syz.3.137
[   45.828393][ T3814] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.135: corrupted inode contents
[   45.860425][ T3814] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm syz.1.135: mark_inode_dirty error
[   45.871715][ T3814] EXT4-fs error (device loop1) in ext4_setattr:5569: Corrupt filesystem
[   45.881061][ T3820] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.135: corrupted inode contents
[   45.912703][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.966056][ T3832] geneve2: entered promiscuous mode
[   45.966084][ T3832] geneve2: entered allmulticast mode
[   46.003318][ T3830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[   46.020095][ T3830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[   46.070969][ T3844] vhci_hcd: invalid port number 236
[   46.078686][ T3830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[   46.080313][ T3844] netlink: 68 bytes leftover after parsing attributes in process `gtp'.
[   46.092247][ T3830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[   46.148307][ T3848] loop2: detected capacity change from 0 to 512
[   46.228328][ T3848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   46.296377][ T3848] EXT4-fs (loop2): orphan cleanup on readonly fs
[   46.303281][ T3848] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.143: Failed to acquire dquot type 1
[   46.319265][ T3848] EXT4-fs (loop2): 1 truncate cleaned up
[   46.396704][ T3858] loop4: detected capacity change from 0 to 128
[   46.470843][ T3858] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   46.587783][ T3862] FAULT_INJECTION: forcing a failure.
[   46.587783][ T3862] name failslab, interval 1, probability 0, space 0, times 0
[   46.602518][ T3862] CPU: 1 UID: 0 PID: 3862 Comm: gtp Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   46.602547][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   46.602559][ T3862] Call Trace:
[   46.602566][ T3862]  <TASK>
[   46.602574][ T3862]  dump_stack_lvl+0xf2/0x150
[   46.602602][ T3862]  dump_stack+0x15/0x1a
[   46.602682][ T3862]  should_fail_ex+0x24a/0x260
[   46.602713][ T3862]  should_failslab+0x8f/0xb0
[   46.602804][ T3862]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   46.602886][ T3862]  ? sidtab_sid2str_get+0xb8/0x140
[   46.602924][ T3862]  kmemdup_noprof+0x2b/0x70
[   46.603024][ T3862]  sidtab_sid2str_get+0xb8/0x140
[   46.603109][ T3862]  security_sid_to_context_core+0x1eb/0x2f0
[   46.603223][ T3862]  security_sid_to_context+0x27/0x30
[   46.603258][ T3862]  selinux_lsmprop_to_secctx+0x68/0xf0
[   46.603303][ T3862]  security_lsmprop_to_secctx+0x40/0x80
[   46.603397][ T3862]  audit_log_task_context+0x76/0x180
[   46.603434][ T3862]  audit_log_task+0xf9/0x250
[   46.603464][ T3862]  audit_seccomp+0x68/0x130
[   46.603506][ T3862]  __seccomp_filter+0x6fa/0x1180
[   46.603530][ T3862]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   46.603560][ T3862]  ? vfs_write+0x644/0x920
[   46.603590][ T3862]  __secure_computing+0x9f/0x1c0
[   46.603672][ T3862]  syscall_trace_enter+0xd1/0x1f0
[   46.603702][ T3862]  do_syscall_64+0xaa/0x1c0
[   46.603787][ T3862]  ? clear_bhb_loop+0x55/0xb0
[   46.604002][ T3862]  ? clear_bhb_loop+0x55/0xb0
[   46.604034][ T3862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.604065][ T3862] RIP: 0033:0x7f807b73d169
[   46.604079][ T3862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.604110][ T3862] RSP: 002b:00007f8079da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[   46.604130][ T3862] RAX: ffffffffffffffda RBX: 00007f807b955fa0 RCX: 00007f807b73d169
[   46.604144][ T3862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[   46.604157][ T3862] RBP: 00007f8079da7090 R08: 0000000000000000 R09: 0000000000000000
[   46.604171][ T3862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.604185][ T3862] R13: 0000000000000000 R14: 00007f807b955fa0 R15: 00007ffd06ef1b58
[   46.604249][ T3862]  </TASK>
[   46.830018][ T3858] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.847986][ T3858] ext2 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   47.062631][ T3872] xt_hashlimit: size too large, truncated to 1048576
[   47.101530][ T3848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.733335][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.877593][ T3900] loop2: detected capacity change from 0 to 4096
[   47.905639][ T3900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.961308][ T3906] loop1: detected capacity change from 0 to 256
[   48.200237][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.689635][ T3931] loop0: detected capacity change from 0 to 512
[   48.707653][ T3931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.797988][ T3931] EXT4-fs (loop0): orphan cleanup on readonly fs
[   48.805274][ T3931] __quota_error: 215 callbacks suppressed
[   48.805291][ T3931] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   48.820700][ T3931] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   48.830158][ T3931] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.175: Failed to acquire dquot type 1
[   48.846551][ T3931] EXT4-fs (loop0): 1 truncate cleaned up
[   48.981881][   T29] audit: type=1326 audit(1741073698.260:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x0
[   49.445494][   T29] audit: type=1326 audit(1741073698.720:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.507583][ T3947] loop3: detected capacity change from 0 to 1024
[   49.548976][ T3947] EXT4-fs: Ignoring removed bh option
[   49.579425][ T3931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.678321][ T3947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.717476][   T29] audit: type=1326 audit(1741073698.750:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.740801][   T29] audit: type=1326 audit(1741073698.750:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.764064][   T29] audit: type=1326 audit(1741073698.750:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.787597][   T29] audit: type=1326 audit(1741073698.750:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.811114][   T29] audit: type=1326 audit(1741073698.750:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.834538][   T29] audit: type=1326 audit(1741073698.760:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   49.981110][ T3947] bridge0: port 1(gretap0) entered blocking state
[   49.987780][ T3947] bridge0: port 1(gretap0) entered disabled state
[   49.996584][ T3947] gretap0: entered allmulticast mode
[   50.002623][ T3947] gretap0: entered promiscuous mode
[   50.018644][ T3947] bridge0: port 1(gretap0) entered blocking state
[   50.025162][ T3947] bridge0: port 1(gretap0) entered forwarding state
[   50.034451][ T3960] loop2: detected capacity change from 0 to 256
[   50.147397][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.207155][ T3973] __nla_validate_parse: 6 callbacks suppressed
[   50.207172][ T3973] netlink: 296 bytes leftover after parsing attributes in process `syz.1.192'.
[   50.256591][ T3976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'.
[   50.267425][ T3975] netlink: 312 bytes leftover after parsing attributes in process `syz.1.193'.
[   50.594375][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.135920][ T4006] netlink: 312 bytes leftover after parsing attributes in process `syz.2.204'.
[   51.205657][ T4008] x_tables: duplicate underflow at hook 2
[   51.212838][ T4008] syz.3.205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   51.229082][ T4008] SELinux: syz.3.205 (4008) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.245609][ T4008] netlink: 'syz.3.205': attribute type 3 has an invalid length.
[   51.273793][ T4018] loop1: detected capacity change from 0 to 512
[   51.289483][ T4019] loop2: detected capacity change from 0 to 512
[   51.299693][ T4019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.313111][ T4019] EXT4-fs (loop2): orphan cleanup on readonly fs
[   51.320112][ T4019] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.207: Failed to acquire dquot type 1
[   51.332996][ T4019] EXT4-fs (loop2): 1 truncate cleaned up
[   51.348633][ T4018] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   51.413150][ T4023] 9pnet_fd: Insufficient options for proto=fd
[   51.421416][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'.
[   51.440664][ T4018] EXT4-fs (loop1): 1 orphan inode deleted
[   51.507900][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.627018][ T4018] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.932904][ T4034] usb usb1: usbfs: process 4034 (syz.0.215) did not claim interface 0 before use
[   51.953041][ T4035] loop3: detected capacity change from 0 to 256
[   51.961933][ T4035] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ'
[   52.178486][ T4019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.258253][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.314341][ T4043] netlink: 312 bytes leftover after parsing attributes in process `syz.0.217'.
[   52.563815][ T4045] loop1: detected capacity change from 0 to 8192
[   52.573818][ T4051] loop3: detected capacity change from 0 to 256
[   52.754808][ T4055] lo: entered promiscuous mode
[   52.759724][ T4055] lo: entered allmulticast mode
[   52.854835][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.875142][ T4060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'.
[   53.028777][ T4072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'.
[   53.112159][ T4076] loop2: detected capacity change from 0 to 8192
[   53.184331][ T4079] loop2: detected capacity change from 0 to 8192
[   53.440459][ T4089] loop0: detected capacity change from 0 to 512
[   53.497306][ T4051] syz.3.219 (4051) used greatest stack depth: 10280 bytes left
[   53.532288][ T4089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.597065][ T4089] EXT4-fs (loop0): orphan cleanup on readonly fs
[   53.605113][ T4089] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.234: Failed to acquire dquot type 1
[   53.618214][ T4089] EXT4-fs (loop0): 1 truncate cleaned up
[   53.625456][ T4089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.825952][ T4093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.235'.
[   53.837659][   T29] kauditd_printk_skb: 366 callbacks suppressed
[   53.837678][   T29] audit: type=1326 audit(1741073703.110:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.118094][   T29] audit: type=1326 audit(1741073703.150:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.141572][   T29] audit: type=1326 audit(1741073703.150:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.164938][   T29] audit: type=1326 audit(1741073703.150:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.188380][   T29] audit: type=1326 audit(1741073703.150:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.211832][   T29] audit: type=1326 audit(1741073703.150:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.235205][   T29] audit: type=1326 audit(1741073703.150:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.258660][   T29] audit: type=1326 audit(1741073703.150:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.282062][   T29] audit: type=1326 audit(1741073703.150:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.305408][   T29] audit: type=1326 audit(1741073703.150:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   54.495844][ T4114] loop3: detected capacity change from 0 to 512
[   54.519202][ T4114] EXT4-fs (loop3): 1 orphan inode deleted
[   54.525333][ T4114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.538224][  T372] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1
[   54.551447][ T4114] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.610740][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.783734][ T4122] loop1: detected capacity change from 0 to 8192
[   54.798099][ T4127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'.
[   54.964887][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.044718][ T4141] loop2: detected capacity change from 0 to 512
[   55.051709][ T4141] EXT4-fs: Ignoring removed oldalloc option
[   55.065040][ T4141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.075505][ T4141] EXT4-fs (loop2): orphan cleanup on readonly fs
[   55.083462][ T4141] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.250: Failed to acquire dquot type 1
[   55.095611][ T4141] EXT4-fs (loop2): 1 truncate cleaned up
[   55.102450][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.730065][ T4161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'.
[   55.745633][ T4159] loop0: detected capacity change from 0 to 512
[   55.961376][ T4159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   55.992141][ T4149] loop1: detected capacity change from 0 to 8192
[   56.021317][ T4159] EXT4-fs (loop0): 1 truncate cleaned up
[   56.044301][ T4159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.122013][ T4159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.200086][ T4159] netlink: 372 bytes leftover after parsing attributes in process `syz.0.258'.
[   56.248924][ T4167] loop3: detected capacity change from 0 to 8192
[   56.328128][ T4167] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   56.336037][ T4167] FAT-fs (loop3): Filesystem has been set read-only
[   56.377477][ T4167] syz.3.261 (4167) used greatest stack depth: 9448 bytes left
[   56.413451][ T4178] netlink: 312 bytes leftover after parsing attributes in process `syz.0.265'.
[   56.716531][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.727892][ T4178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'.
[   56.754228][ T4180] loop1: detected capacity change from 0 to 512
[   56.818270][ T4180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.886667][ T4180] EXT4-fs (loop1): orphan cleanup on readonly fs
[   56.893909][ T4180] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.264: Failed to acquire dquot type 1
[   56.906991][ T4180] EXT4-fs (loop1): 1 truncate cleaned up
[   56.913757][ T4180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.005231][ T4187] netlink: 312 bytes leftover after parsing attributes in process `syz.3.269'.
[   57.017923][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'.
[   57.072177][ T4189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'.
[   57.428813][ T4200] loop3: detected capacity change from 0 to 8192
[   57.503422][ T4207] loop0: detected capacity change from 0 to 2048
[   57.556512][ T4207] Alternate GPT is invalid, using primary GPT.
[   57.563117][ T4207]  loop0: p1 p2 p3
[   57.649400][ T4211] loop3: detected capacity change from 0 to 512
[   57.661712][ T4211] EXT4-fs: Ignoring removed nobh option
[   57.698382][ T4211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.760667][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   57.776240][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   57.786255][ T4211] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.798079][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   57.882205][ T4226] loop0: detected capacity change from 0 to 164
[   57.920033][ T4226] Unsupported NM flag settings (8)
[   57.947802][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.992633][ T4229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'.
[   58.083526][ T4234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.156674][ T4242] +
: renamed from syzkaller0
[   58.179382][ T4242] tipc: Disabling bearer <eth:syzkaller0>
[   58.209443][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.517572][ T4274] loop3: detected capacity change from 0 to 512
[   58.542903][ T4274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.585275][ T4274] EXT4-fs (loop3): orphan cleanup on readonly fs
[   58.597452][ T4274] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.299: Failed to acquire dquot type 1
[   58.609623][ T4274] EXT4-fs (loop3): 1 truncate cleaned up
[   59.080156][ T4289] loop2: detected capacity change from 0 to 2048
[   59.127392][ T4289] Alternate GPT is invalid, using primary GPT.
[   59.133833][ T4289]  loop2: p1 p2 p3
[   59.274006][   T29] kauditd_printk_skb: 227 callbacks suppressed
[   59.274024][   T29] audit: type=1326 audit(1741073708.550:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x0
[   59.378841][   T29] audit: type=1326 audit(1741073708.630:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.402295][   T29] audit: type=1326 audit(1741073708.630:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.425839][   T29] audit: type=1326 audit(1741073708.630:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.449091][   T29] audit: type=1326 audit(1741073708.630:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.472430][   T29] audit: type=1326 audit(1741073708.630:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.496548][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   59.708316][   T29] audit: type=1326 audit(1741073708.990:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.779112][   T29] audit: type=1326 audit(1741073709.010:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.802601][   T29] audit: type=1326 audit(1741073709.010:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.826545][   T29] audit: type=1326 audit(1741073709.010:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3468dcd169 code=0x7ffc0000
[   59.895499][ T4306] netlink: 312 bytes leftover after parsing attributes in process `syz.0.313'.
[   59.907209][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'.
[   60.139931][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.157463][ T4318] loop1: detected capacity change from 0 to 8192
[   60.238119][ T4330] loop3: detected capacity change from 0 to 8192
[   60.309170][ T4339] FAULT_INJECTION: forcing a failure.
[   60.309170][ T4339] name failslab, interval 1, probability 0, space 0, times 0
[   60.322019][ T4339] CPU: 0 UID: 0 PID: 4339 Comm: syz.0.326 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   60.322049][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   60.322063][ T4339] Call Trace:
[   60.322129][ T4339]  <TASK>
[   60.322138][ T4339]  dump_stack_lvl+0xf2/0x150
[   60.322172][ T4339]  dump_stack+0x15/0x1a
[   60.322198][ T4339]  should_fail_ex+0x24a/0x260
[   60.322281][ T4339]  should_failslab+0x8f/0xb0
[   60.322318][ T4339]  kmem_cache_alloc_noprof+0x52/0x320
[   60.322344][ T4339]  ? skb_clone+0x154/0x1f0
[   60.322398][ T4339]  skb_clone+0x154/0x1f0
[   60.322427][ T4339]  __netlink_deliver_tap+0x2bd/0x4f0
[   60.322492][ T4339]  netlink_unicast+0x64a/0x670
[   60.322562][ T4339]  netlink_sendmsg+0x5cc/0x6e0
[   60.322604][ T4339]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.322642][ T4339]  __sock_sendmsg+0x140/0x180
[   60.322688][ T4339]  ____sys_sendmsg+0x326/0x4b0
[   60.322750][ T4339]  __sys_sendmsg+0x19d/0x230
[   60.322797][ T4339]  __x64_sys_sendmsg+0x46/0x50
[   60.322826][ T4339]  x64_sys_call+0x2734/0x2dc0
[   60.322858][ T4339]  do_syscall_64+0xc9/0x1c0
[   60.322922][ T4339]  ? clear_bhb_loop+0x55/0xb0
[   60.322955][ T4339]  ? clear_bhb_loop+0x55/0xb0
[   60.322987][ T4339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.323016][ T4339] RIP: 0033:0x7f1ab5b2d169
[   60.323032][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.323084][ T4339] RSP: 002b:00007f1ab4191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.323106][ T4339] RAX: ffffffffffffffda RBX: 00007f1ab5d45fa0 RCX: 00007f1ab5b2d169
[   60.323121][ T4339] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000006
[   60.323133][ T4339] RBP: 00007f1ab4191090 R08: 0000000000000000 R09: 0000000000000000
[   60.323144][ T4339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.323155][ T4339] R13: 0000000000000000 R14: 00007f1ab5d45fa0 R15: 00007ffcb5c20c78
[   60.323172][ T4339]  </TASK>
[   60.671712][ T4363] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[   60.685429][ T4363] loop2: detected capacity change from 0 to 1024
[   60.692435][ T4363] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.708212][ T4363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.737171][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.757477][ T4369] __nla_validate_parse: 3 callbacks suppressed
[   60.757495][ T4369] netlink: 312 bytes leftover after parsing attributes in process `syz.2.336'.
[   60.773708][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'.
[   60.831206][ T4371] loop2: detected capacity change from 0 to 8192
[   61.003808][ T4377] loop2: detected capacity change from 0 to 128
[   61.033948][ T4377] syz.2.339: attempt to access beyond end of device
[   61.033948][ T4377] loop2: rw=0, sector=121, nr_sectors = 920 limit=128
[   61.263923][ T4379] loop1: detected capacity change from 0 to 8192
[   61.445399][ T4384] loop1: detected capacity change from 0 to 8192
[   61.632459][ T4412] loop3: detected capacity change from 0 to 256
[   61.682404][ T4387] chnl_net:caif_netlink_parms(): no params data found
[   61.727888][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.735164][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.742643][ T4387] bridge_slave_0: entered allmulticast mode
[   61.754344][ T4387] bridge_slave_0: entered promiscuous mode
[   61.762410][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.769596][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.788420][ T4387] bridge_slave_1: entered allmulticast mode
[   61.794957][ T4387] bridge_slave_1: entered promiscuous mode
[   61.836365][ T4387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.850587][ T4426] loop2: detected capacity change from 0 to 4096
[   61.865237][ T4387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.878210][ T4426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.896744][ T4430] process 'syz.0.357' launched './file0' with NULL argv: empty string added
[   61.898922][ T4387] team0: Port device team_slave_0 added
[   61.914590][ T4387] team0: Port device team_slave_1 added
[   61.943308][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.950405][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.976372][ T4387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.992468][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.999508][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.025614][ T4387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.063296][ T4387] hsr_slave_0: entered promiscuous mode
[   62.069184][ T4441] FAULT_INJECTION: forcing a failure.
[   62.069184][ T4441] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   62.073300][ T4387] hsr_slave_1: entered promiscuous mode
[   62.082308][ T4441] CPU: 1 UID: 0 PID: 4441 Comm: syz.0.361 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   62.082358][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   62.082375][ T4441] Call Trace:
[   62.082383][ T4441]  <TASK>
[   62.082394][ T4441]  dump_stack_lvl+0xf2/0x150
[   62.082430][ T4441]  dump_stack+0x15/0x1a
[   62.082457][ T4441]  should_fail_ex+0x24a/0x260
[   62.082549][ T4441]  should_fail+0xb/0x10
[   62.082583][ T4441]  should_fail_usercopy+0x1a/0x20
[   62.082682][ T4441]  strncpy_from_user+0x25/0x210
[   62.082711][ T4441]  ? kmem_cache_alloc_noprof+0x18e/0x320
[   62.082746][ T4441]  ? getname_flags+0x81/0x3b0
[   62.082845][ T4441]  getname_flags+0xb0/0x3b0
[   62.082901][ T4441]  getname+0x17/0x20
[   62.082940][ T4441]  path_removexattrat+0xf0/0x4b0
[   62.082967][ T4441]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   62.083017][ T4441]  __x64_sys_removexattr+0x38/0x50
[   62.083080][ T4441]  x64_sys_call+0x3ea/0x2dc0
[   62.083114][ T4441]  do_syscall_64+0xc9/0x1c0
[   62.083178][ T4441]  ? clear_bhb_loop+0x55/0xb0
[   62.083243][ T4441]  ? clear_bhb_loop+0x55/0xb0
[   62.083315][ T4441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.083394][ T4441] RIP: 0033:0x7f1ab5b2d169
[   62.083413][ T4441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.083435][ T4441] RSP: 002b:00007f1ab4191038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
[   62.083458][ T4441] RAX: ffffffffffffffda RBX: 00007f1ab5d45fa0 RCX: 00007f1ab5b2d169
[   62.083473][ T4441] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000400000000040
[   62.083489][ T4441] RBP: 00007f1ab4191090 R08: 0000000000000000 R09: 0000000000000000
[   62.083576][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.083667][ T4441] R13: 0000000000000000 R14: 00007f1ab5d45fa0 R15: 00007ffcb5c20c78
[   62.083690][ T4441]  </TASK>
[   62.278504][ T4387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.286106][ T4387] Cannot create hsr debugfs directory
[   62.288084][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.411268][ T4387] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   62.439789][ T4387] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   62.449480][ T4387] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   62.459759][ T4387] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   62.470766][    C0] hrtimer: interrupt took 46696 ns
[   62.478550][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.485712][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.487672][ T4465] binfmt_misc: register: failed to install interpreter file ./file2
[   62.493086][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.508040][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.701811][ T4485] loop1: detected capacity change from 0 to 2048
[   62.721880][ T4387] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.734618][ T4387] 8021q: adding VLAN 0 to HW filter on device team0
[   62.758727][ T4485] Alternate GPT is invalid, using primary GPT.
[   62.765054][ T4485]  loop1: p1 p2 p3
[   62.804248][ T4387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.913858][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.958132][ T4502] capability: warning: `syz.1.382' uses 32-bit capabilities (legacy support in use)
[   63.043092][ T4387] veth0_vlan: entered promiscuous mode
[   63.051263][ T4387] veth1_vlan: entered promiscuous mode
[   63.069368][ T4387] veth0_macvtap: entered promiscuous mode
[   63.079106][ T4387] veth1_macvtap: entered promiscuous mode
[   63.091162][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.101706][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.111796][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.122809][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.132746][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.143366][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.153271][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.163735][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.174543][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.185067][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.195588][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.205510][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.216002][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.225906][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.236347][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.246219][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.256796][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.267735][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.291811][ T4387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.300727][ T4387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.309549][ T4387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.318399][ T4387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.397483][ T4531] loop5: detected capacity change from 0 to 256
[   63.422536][ T4525] loop2: detected capacity change from 0 to 8192
[   63.557212][ T4531] syz.5.343: attempt to access beyond end of device
[   63.557212][ T4531] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256
[   63.571017][ T4531] syz.5.343: attempt to access beyond end of device
[   63.571017][ T4531] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256
[   63.608328][ T3949] kworker/u8:9: attempt to access beyond end of device
[   63.608328][ T3949] loop5: rw=1, sector=256, nr_sectors = 4 limit=256
[   63.617440][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[   63.633631][ T4540] xfrm1: entered promiscuous mode
[   63.638861][ T4540] xfrm1: entered allmulticast mode
[   63.797648][ T4553] FAULT_INJECTION: forcing a failure.
[   63.797648][ T4553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.810887][ T4553] CPU: 0 UID: 0 PID: 4553 Comm: syz.3.398 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   63.810917][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   63.810929][ T4553] Call Trace:
[   63.810935][ T4553]  <TASK>
[   63.810983][ T4553]  dump_stack_lvl+0xf2/0x150
[   63.811015][ T4553]  dump_stack+0x15/0x1a
[   63.811041][ T4553]  should_fail_ex+0x24a/0x260
[   63.811078][ T4553]  should_fail+0xb/0x10
[   63.811110][ T4553]  should_fail_usercopy+0x1a/0x20
[   63.811218][ T4553]  _copy_to_user+0x20/0xa0
[   63.811236][ T4553]  simple_read_from_buffer+0xa0/0x110
[   63.811264][ T4553]  proc_fail_nth_read+0xf9/0x140
[   63.811319][ T4553]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   63.811406][ T4553]  vfs_read+0x19b/0x6f0
[   63.811431][ T4553]  ? __rcu_read_unlock+0x4e/0x70
[   63.811457][ T4553]  ? __fget_files+0x17c/0x1c0
[   63.811576][ T4553]  ksys_read+0xe8/0x1b0
[   63.811608][ T4553]  __x64_sys_read+0x42/0x50
[   63.811638][ T4553]  x64_sys_call+0x2874/0x2dc0
[   63.811664][ T4553]  do_syscall_64+0xc9/0x1c0
[   63.811743][ T4553]  ? clear_bhb_loop+0x55/0xb0
[   63.811777][ T4553]  ? clear_bhb_loop+0x55/0xb0
[   63.811809][ T4553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.811905][ T4553] RIP: 0033:0x7f0e9876bb7c
[   63.811924][ T4553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   63.811943][ T4553] RSP: 002b:00007f0e96dd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   63.811961][ T4553] RAX: ffffffffffffffda RBX: 00007f0e98985fa0 RCX: 00007f0e9876bb7c
[   63.811973][ T4553] RDX: 000000000000000f RSI: 00007f0e96dd70a0 RDI: 0000000000000005
[   63.811987][ T4553] RBP: 00007f0e96dd7090 R08: 0000000000000000 R09: 0000000000000000
[   63.812075][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.812088][ T4553] R13: 0000000000000000 R14: 00007f0e98985fa0 R15: 00007fff5a00f968
[   63.812108][ T4553]  </TASK>
[   64.067968][ T4561] lo: entered promiscuous mode
[   64.072876][ T4561] lo: entered allmulticast mode
[   64.129814][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[   64.169551][ T4565] loop2: detected capacity change from 0 to 512
[   64.180798][ T4565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.193643][ T4565] EXT4-fs (loop2): 1 truncate cleaned up
[   64.202906][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.261215][ T4583] loop1: detected capacity change from 0 to 512
[   64.287732][ T4583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.338787][ T4583] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.351613][   T29] kauditd_printk_skb: 297 callbacks suppressed
[   64.351628][   T29] audit: type=1400 audit(1741073713.630:1592): avc:  denied  { create } for  pid=4595 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.383296][ T4596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.412'.
[   64.400126][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'.
[   64.420279][ T4598] loop5: detected capacity change from 0 to 512
[   64.433467][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.437967][ T4596] 9pnet: Could not find request transport: t
[   64.445218][   T29] audit: type=1400 audit(1741073713.640:1593): avc:  denied  { ioctl } for  pid=4595 comm="syz.0.412" path="socket:[7836]" dev="sockfs" ino=7836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.450538][ T4596] netem: change failed
[   64.472920][   T29] audit: type=1400 audit(1741073713.640:1594): avc:  denied  { bind } for  pid=4595 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.472946][   T29] audit: type=1400 audit(1741073713.680:1595): avc:  denied  { mounton } for  pid=4582 comm="syz.1.411" path="/90/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.519313][   T29] audit: type=1400 audit(1741073713.700:1596): avc:  denied  { ioctl } for  pid=4595 comm="syz.0.412" path="socket:[7845]" dev="sockfs" ino=7845 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   64.545002][   T29] audit: type=1400 audit(1741073713.700:1597): avc:  denied  { mounton } for  pid=4595 comm="syz.0.412" path="/117/bus" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   64.545376][ T4598] EXT4-fs: Ignoring removed oldalloc option
[   64.567783][   T29] audit: type=1400 audit(1741073713.710:1598): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.611857][ T4598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002]
[   64.611879][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.621545][ T4598] System zones: 1-12
[   64.646206][ T4598] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.404: Parent and EA inode have the same ino 15
[   64.659338][ T4598] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   64.672637][ T4598] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.404: Parent and EA inode have the same ino 15
[   64.673701][   T29] audit: type=1326 audit(1741073713.950:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   64.708249][   T29] audit: type=1326 audit(1741073713.950:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   64.731715][   T29] audit: type=1326 audit(1741073713.950:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807b73d169 code=0x7ffc0000
[   64.744191][ T4598] EXT4-fs (loop5): 1 orphan inode deleted
[   64.768665][ T4598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.900546][ T4636] xt_TPROXY: Can be used only with -p tcp or -p udp
[   64.934282][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'.
[   64.948851][ T3949] ==================================================================
[   64.956990][ T3949] BUG: KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer
[   64.966318][ T3949] 
[   64.968659][ T3949] read-write to 0xffff888117d98988 of 8 bytes by task 3373 on cpu 0:
[   64.976736][ T3949]  wg_socket_send_skb_to_peer+0xe4/0x130
[   64.982387][ T3949]  wg_packet_tx_worker+0x127/0x360
[   64.987513][ T3949]  process_scheduled_works+0x4db/0xa20
[   64.992990][ T3949]  worker_thread+0x51d/0x6f0
[   64.997602][ T3949]  kthread+0x4ae/0x520
[   65.001691][ T3949]  ret_from_fork+0x4b/0x60
[   65.006123][ T3949]  ret_from_fork_asm+0x1a/0x30
[   65.010913][ T3949] 
[   65.013248][ T3949] read-write to 0xffff888117d98988 of 8 bytes by task 3949 on cpu 1:
[   65.021330][ T3949]  wg_socket_send_skb_to_peer+0xe4/0x130
[   65.026989][ T3949]  wg_socket_send_buffer_to_peer+0xee/0x120
[   65.032900][ T3949]  wg_packet_handshake_send_worker+0x10c/0x150
[   65.039064][ T3949]  process_scheduled_works+0x4db/0xa20
[   65.044533][ T3949]  worker_thread+0x51d/0x6f0
[   65.049134][ T3949]  kthread+0x4ae/0x520
[   65.053216][ T3949]  ret_from_fork+0x4b/0x60
[   65.057671][ T3949]  ret_from_fork_asm+0x1a/0x30
[   65.062469][ T3949] 
[   65.064798][ T3949] value changed: 0x0000000000000360 -> 0x00000000000003b0
[   65.071903][ T3949] 
[   65.074238][ T3949] Reported by Kernel Concurrency Sanitizer on:
[   65.080400][ T3949] CPU: 1 UID: 0 PID: 3949 Comm: kworker/u8:9 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
[   65.091253][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   65.101346][ T3949] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[   65.108301][ T3949] ==================================================================
[   65.149268][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'.
[   65.165212][ T4649] xfrm1: entered promiscuous mode
[   65.170369][ T4649] xfrm1: entered allmulticast mode
[   67.148474][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.