last executing test programs:

12.040502938s ago: executing program 3 (id=6):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps    \x00'}, 0x20) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffffffffffff, 0x200902) (async)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

11.930410729s ago: executing program 3 (id=8):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="91103a0000000000956088"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x10)
pread64(r0, &(0x7f0000001900)=""/217, 0xd9, 0xffffffffffffff64)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000018c0)={0xffffffff, 0x0, &(0x7f0000001840)=[{&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/120, 0x78}], &(0x7f0000000040)=[0x4, 0x8], 0x7}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe87, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x1f)
r4 = open(&(0x7f00000004c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

11.682672963s ago: executing program 3 (id=11):
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0020000000000000b7080000000000007b8af8ff00000000bfa20000000300000000000000ffff03000008000000b70400b75a3958971c000000008500000059000000950455ad3f777a9deb010066612b69ad53660dcd5e417383a371eab388ee7b0a8a66771dbc94e1f7cea5b532621e0c744184717f98027fdb49a27e4a2fe27f661ebd65005fd4"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400ff1f0000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

11.500978256s ago: executing program 3 (id=12):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x341003, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)

10.609294459s ago: executing program 3 (id=25):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000800)=0x5, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket(0xa, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r5=>0x0})
syz_emit_ethernet(0xac, 0x0, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1e010100000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad04000014000e00ff0200000000000000000000000000010800160002000000"], 0x114}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0, 0x2890}, 0x1, 0x0, 0x0, 0x4004050}, 0x4040804)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

9.741915162s ago: executing program 1 (id=39):
r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r1 = getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc00}}, './file2\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110500000000000d500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r3}, 0x18)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0xfffffffc, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x40080, &(0x7f0000000100), 0x3, 0x512, &(0x7f0000001180)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6041, 0x9f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r8, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="3c000000000000000000000007000000442cabb30a0101000000009bffffffff00000571ac141435000000060000000000000001ac1414aa0000008100000000"], 0x40}}], 0x2, 0x401eb94)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0xb90d, 0x10000, 0x3})
close(r0)

9.617124535s ago: executing program 1 (id=42):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x6) (async)
epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r4}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe"], 0x0)

8.969828994s ago: executing program 1 (id=52):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r4, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}})
sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0)
accept4(r4, 0x0, 0x0, 0x400000000000000)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfe59)

8.838023726s ago: executing program 3 (id=54):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

8.049842148s ago: executing program 1 (id=62):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2007, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)

7.842667561s ago: executing program 1 (id=64):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000800)=0x5, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket(0xa, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r5=>0x0})
syz_emit_ethernet(0xac, 0x0, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1e010100000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad04000014000e00ff0200000000000000000000000000010800160002000000"], 0x114}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0, 0x2890}, 0x1, 0x0, 0x0, 0x4004050}, 0x4040804)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

6.823201447s ago: executing program 1 (id=70):
bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x70}, 0x8080)
syz_open_dev$ptys(0xc, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0x2, 0x0, 0xfffffffffffffffa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0xbc, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x2, 0x9, 0xae, 0x68, 0x1, 0x67, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@end]}}, "7cf3b680c7da365b2027c2ad65e334c8f09189334099413b9c192059c302daaae9e15a964a4a05f9ce4644bfd43eb076f9f5242d8a14766f9a5002ee12ea43d3e27511f34c9a0a9f909911f7a1f82abc885fcb6f67b4bb8fcc5f5b2cf294889ed7120adcb6dd1967ba7748200855842c37e165be61fa79f1b221c418a360c611039364c910ff090b3db40725452c28d693abc869150b"}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000580)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000200000e00000119078000000000000000000000000000c907861230000e89171f41292a0000792bd78774a1e5a106fe2cde3645017eeeba42f21ce1ad0a722fd31e7e1df857dd3bf2e8d50e1e5643dac540f940a8aa516ed31fe330f4eb41212d24e860c8f20d4c13a2715b9537c0bdbf04fd4b59a03f1af19b4fe99cf09db54ef7ca2235291ede8964d255c1e59"], 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093", 0x15}], 0x1, 0x0, 0xfffffffffffffe37}, 0x4080)
rseq(&(0x7f00000004c0), 0x20, 0x4, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000105050000100002800c0002800500010000000000"], 0x24}}, 0x0)

2.772196458s ago: executing program 0 (id=109):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="c0f0fb15bf8f4fc47a61c34dfe97c814a9ab6d25203699141d8d7cf46346ff54abe0481d6d9ad1b1c7f031e2a91fa266089f3bf05ae527a45d0cc9af5f92e956760333ed349563943cf03c9c", @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r3, @ANYRES16=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[])
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40047440, &(0x7f0000001200))

2.770050038s ago: executing program 4 (id=110):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40402, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3})
mq_timedreceive(r2, 0x0, 0x0, 0x800000000000, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x3ed7, 0x0)
rt_sigsuspend(0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ftruncate(r3, 0x8012007ffb)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0xff1f, 0x2000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)

2.730871669s ago: executing program 4 (id=111):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x1b, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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")
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa})
socket$inet6(0xa, 0x2, 0x8)

2.459179863s ago: executing program 0 (id=112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="71b28209c8", 0x5}], 0x1}, 0x40004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300001f, 0x62033, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0xffffffff, @mcast2, 0x7}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x20, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x200000, 0x7}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}}, 0xf0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)

2.282136276s ago: executing program 2 (id=114):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)

2.208306447s ago: executing program 2 (id=115):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

1.33543657s ago: executing program 2 (id=116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000000})
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r4, 0x20, &(0x7f00000001c0)={&(0x7f0000000340)=""/68, 0x44, <r8=>0x0, &(0x7f00000003c0)=""/110, 0x6e}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000ffffb702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000013400000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000480)={0xffffffffffffffff, r10, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10)
r11 = getpgrp(0x0)
r12 = syz_pidfd_open(r11, 0x0)
process_madvise(r12, 0x0, 0x0, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r13}, 0x10)

1.237010162s ago: executing program 2 (id=117):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0xfff}]})
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x20000000000000fb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000300), &(0x7f0000000380)=r3}, 0x20)
connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x3, 0x2, 0x0, 0x3}}, 0x2e)
socket$qrtr(0x2a, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5)
socket$rxrpc(0x21, 0x2, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6000, @fd_index=0x4, 0xffffffff, 0x0, 0x0, 0xe, 0x1})
socket(0x1f, 0xa, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='rxrpc_congest\x00'}, 0x18)
r7 = semget$private(0x0, 0x4, 0xcf)
semop(r7, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1)
semop(r7, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1)
semtimedop(r7, &(0x7f0000000000)=[{0x4, 0x2}, {0x1, 0xfb7b, 0x1000}], 0x2, &(0x7f0000000040))
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0, r8, 0x0, 0x8000000000000009}, 0x18)

1.144909263s ago: executing program 0 (id=118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)

1.035794885s ago: executing program 4 (id=119):
socket$inet6(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000030001000900000073797a32000000000800410073697700140033006d6163767461703000"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000002c0)={[{@dioread_lock}, {@usrquota}, {@errors_continue}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@resuid}, {@errors_remount}, {@nolazytime}, {@nomblk_io_submit}], [], 0x2c}, 0x84, 0x4ac, &(0x7f0000000740)="$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")
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
r8 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x211267a2, 0x1008, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r8, 0x3)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000300)=0x4, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)

808.572168ms ago: executing program 4 (id=120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)

691.83551ms ago: executing program 4 (id=121):
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400ff1f0000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

656.38874ms ago: executing program 4 (id=122):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000900)=""/250)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r3, 0x400, 0x2)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)

275.045996ms ago: executing program 0 (id=123):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2007, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)

197.504808ms ago: executing program 2 (id=124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r4=>0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
syz_pidfd_open(r4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0)

197.112857ms ago: executing program 0 (id=125):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)

86.231659ms ago: executing program 2 (id=126):
r0 = semget$private(0x0, 0x7, 0x0)
semtimedop(r0, &(0x7f0000000300)=[{0x1, 0xfff7, 0x1000}], 0x1, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{0x2, 0x6, 0x1000}, {0x1, 0x9, 0x1000}], 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/64)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xc002, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket(0x2a, 0x4, 0x2)
syz_clone(0xe50c177b, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=127):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x8001}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4)
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x803, 0x0) (fail_nth: 3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts.
[   27.954534][   T29] audit: type=1400 audit(1752026552.789:62): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.955714][ T3293] cgroup: Unknown subsys name 'net'
[   27.977377][   T29] audit: type=1400 audit(1752026552.789:63): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.004777][   T29] audit: type=1400 audit(1752026552.819:64): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.201057][ T3293] cgroup: Unknown subsys name 'cpuset'
[   28.207399][ T3293] cgroup: Unknown subsys name 'rlimit'
[   28.398405][   T29] audit: type=1400 audit(1752026553.229:65): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.423273][   T29] audit: type=1400 audit(1752026553.229:66): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.443822][   T29] audit: type=1400 audit(1752026553.229:67): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.452415][ T3297] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.464218][   T29] audit: type=1400 audit(1752026553.239:68): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.493044][   T29] audit: type=1400 audit(1752026553.239:69): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.517939][   T29] audit: type=1400 audit(1752026553.239:70): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.522315][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.541181][   T29] audit: type=1400 audit(1752026553.309:71): avc:  denied  { relabelto } for  pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.712709][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   30.740602][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   30.798908][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   30.835318][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.842569][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.849884][ T3304] bridge_slave_0: entered allmulticast mode
[   30.856640][ T3304] bridge_slave_0: entered promiscuous mode
[   30.870444][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   30.881573][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.888708][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.896027][ T3304] bridge_slave_1: entered allmulticast mode
[   30.902460][ T3304] bridge_slave_1: entered promiscuous mode
[   30.924107][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   30.946970][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.954099][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.961528][ T3305] bridge_slave_0: entered allmulticast mode
[   30.967975][ T3305] bridge_slave_0: entered promiscuous mode
[   30.989896][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.997080][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.004377][ T3305] bridge_slave_1: entered allmulticast mode
[   31.011003][ T3305] bridge_slave_1: entered promiscuous mode
[   31.022879][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.054793][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.072744][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.081944][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.089013][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.096363][ T3308] bridge_slave_0: entered allmulticast mode
[   31.102766][ T3308] bridge_slave_0: entered promiscuous mode
[   31.121127][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.135654][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.142831][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.150170][ T3308] bridge_slave_1: entered allmulticast mode
[   31.156521][ T3308] bridge_slave_1: entered promiscuous mode
[   31.191708][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.199004][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.206216][ T3309] bridge_slave_0: entered allmulticast mode
[   31.212681][ T3309] bridge_slave_0: entered promiscuous mode
[   31.219677][ T3304] team0: Port device team_slave_0 added
[   31.231016][ T3305] team0: Port device team_slave_0 added
[   31.236870][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.243993][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.251237][ T3313] bridge_slave_0: entered allmulticast mode
[   31.257702][ T3313] bridge_slave_0: entered promiscuous mode
[   31.268977][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.276098][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.283264][ T3309] bridge_slave_1: entered allmulticast mode
[   31.289785][ T3309] bridge_slave_1: entered promiscuous mode
[   31.301951][ T3304] team0: Port device team_slave_1 added
[   31.313452][ T3305] team0: Port device team_slave_1 added
[   31.320426][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.329567][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.336712][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.343896][ T3313] bridge_slave_1: entered allmulticast mode
[   31.350330][ T3313] bridge_slave_1: entered promiscuous mode
[   31.357896][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.383012][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.397723][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.426800][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.433814][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.459803][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.471794][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.481238][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.488221][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.514176][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.534618][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.541660][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.567795][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.579625][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.589127][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.596159][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.622145][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.636169][ T3309] team0: Port device team_slave_0 added
[   31.642663][ T3308] team0: Port device team_slave_0 added
[   31.662274][ T3309] team0: Port device team_slave_1 added
[   31.668637][ T3308] team0: Port device team_slave_1 added
[   31.681328][ T3313] team0: Port device team_slave_0 added
[   31.699328][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.706397][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.732566][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.748949][ T3313] team0: Port device team_slave_1 added
[   31.776273][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.783320][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.809339][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.822494][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.829541][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.855529][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.878335][ T3304] hsr_slave_0: entered promiscuous mode
[   31.884373][ T3304] hsr_slave_1: entered promiscuous mode
[   31.897908][ T3305] hsr_slave_0: entered promiscuous mode
[   31.904148][ T3305] hsr_slave_1: entered promiscuous mode
[   31.910060][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.917627][ T3305] Cannot create hsr debugfs directory
[   31.923540][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.930571][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.956640][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.967690][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.974826][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.000815][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.012158][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.019130][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.045204][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.087977][ T3309] hsr_slave_0: entered promiscuous mode
[   32.094304][ T3309] hsr_slave_1: entered promiscuous mode
[   32.100259][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.107865][ T3309] Cannot create hsr debugfs directory
[   32.156568][ T3313] hsr_slave_0: entered promiscuous mode
[   32.162699][ T3313] hsr_slave_1: entered promiscuous mode
[   32.168717][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.176321][ T3313] Cannot create hsr debugfs directory
[   32.200597][ T3308] hsr_slave_0: entered promiscuous mode
[   32.206645][ T3308] hsr_slave_1: entered promiscuous mode
[   32.212625][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.220258][ T3308] Cannot create hsr debugfs directory
[   32.384849][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.393317][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.402231][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.412901][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.437367][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.446008][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.457680][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.466793][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.494326][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.511130][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.519917][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.528832][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.552649][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.562247][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.578266][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.587023][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.608335][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.622775][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.632038][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.644887][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.654042][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.698664][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.715507][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.722665][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.746104][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.753240][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.770716][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.784178][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.793284][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.808065][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   32.829273][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.836437][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.853485][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.860635][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.872836][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   32.881523][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   32.895395][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.902454][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.920497][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.927648][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.946702][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.953863][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.972072][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.979209][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.992586][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.008629][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.019078][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.061048][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.078931][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   33.102257][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.109475][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.136694][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.145627][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.152832][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.186116][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.196723][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.359777][ T3305] veth0_vlan: entered promiscuous mode
[   33.381270][ T3305] veth1_vlan: entered promiscuous mode
[   33.396055][ T3309] veth0_vlan: entered promiscuous mode
[   33.407834][ T3309] veth1_vlan: entered promiscuous mode
[   33.422673][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.446009][ T3305] veth0_macvtap: entered promiscuous mode
[   33.454211][ T3313] veth0_vlan: entered promiscuous mode
[   33.460330][ T3304] veth0_vlan: entered promiscuous mode
[   33.467719][ T3305] veth1_macvtap: entered promiscuous mode
[   33.478492][ T3313] veth1_vlan: entered promiscuous mode
[   33.494893][ T3309] veth0_macvtap: entered promiscuous mode
[   33.502865][ T3304] veth1_vlan: entered promiscuous mode
[   33.513540][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.526249][ T3309] veth1_macvtap: entered promiscuous mode
[   33.535169][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.547679][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.556659][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.565606][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.574503][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.587912][ T3313] veth0_macvtap: entered promiscuous mode
[   33.595977][ T3313] veth1_macvtap: entered promiscuous mode
[   33.629566][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   33.629584][   T29] audit: type=1400 audit(1752026558.459:81): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/root/syzkaller.PPEL5O/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   33.632910][ T3304] veth0_macvtap: entered promiscuous mode
[   33.657404][   T29] audit: type=1400 audit(1752026558.469:82): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.687792][   T29] audit: type=1400 audit(1752026558.469:83): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/root/syzkaller.PPEL5O/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   33.694082][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.713070][   T29] audit: type=1400 audit(1752026558.469:84): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.723869][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.742185][   T29] audit: type=1400 audit(1752026558.469:85): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/root/syzkaller.PPEL5O/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   33.751894][ T3304] veth1_macvtap: entered promiscuous mode
[   33.775926][   T29] audit: type=1400 audit(1752026558.469:86): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/root/syzkaller.PPEL5O/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   33.798498][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.808990][   T29] audit: type=1400 audit(1752026558.469:87): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.838822][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.850162][   T29] audit: type=1400 audit(1752026558.679:88): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.858616][ T3308] veth0_vlan: entered promiscuous mode
[   33.872961][   T29] audit: type=1400 audit(1752026558.679:89): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.900762][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.902302][ T3308] veth1_vlan: entered promiscuous mode
[   33.917505][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.931495][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.940400][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.949107][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.957998][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.970185][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.978911][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.987686][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.996617][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.006170][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   34.024041][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.032841][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.041758][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.050534][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.069858][ T3308] veth0_macvtap: entered promiscuous mode
[   34.084951][ T3308] veth1_macvtap: entered promiscuous mode
[   34.090880][   T29] audit: type=1400 audit(1752026558.919:90): avc:  denied  { read write } for  pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.107866][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.153651][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.199921][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.208756][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.217563][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.219709][ T3477] loop2: detected capacity change from 0 to 2048
[   34.226379][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.267166][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.338993][ T3492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.395412][ T3495] loop3: detected capacity change from 0 to 2048
[   34.396819][ T3497] xt_CT: You must specify a L4 protocol and not use inversions on it
[   34.456969][ T3495]  loop3: p1 < > p4
[   34.466421][ T3502] lo speed is unknown, defaulting to 1000
[   34.472403][ T3502] lo speed is unknown, defaulting to 1000
[   34.478355][ T3502] lo speed is unknown, defaulting to 1000
[   34.484291][ T3505] xt_TPROXY: Can be used only with -p tcp or -p udp
[   34.486600][ T3502] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   34.492592][ T3495] loop3: p4 size 8388608 extends beyond EOD, truncated
[   34.499142][ T3502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   34.519498][ T3502] lo speed is unknown, defaulting to 1000
[   34.533210][ T3502] lo speed is unknown, defaulting to 1000
[   34.544825][ T2996]  loop3: p1 < > p4
[   34.549484][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated
[   34.557780][ T3502] lo speed is unknown, defaulting to 1000
[   34.587676][ T2996]  loop3: p1 < > p4
[   34.607203][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated
[   34.610463][ T3505] wireguard0: entered promiscuous mode
[   34.672210][ T3502] lo speed is unknown, defaulting to 1000
[   34.683869][ T3502] lo speed is unknown, defaulting to 1000
[   34.695021][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   34.701109][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   34.751135][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   34.761454][ T3502] syz.0.9 (3502) used greatest stack depth: 10712 bytes left
[   34.769361][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   34.822925][ T3507] lo speed is unknown, defaulting to 1000
[   34.906875][ T3519] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   35.030456][ T3523] FAULT_INJECTION: forcing a failure.
[   35.030456][ T3523] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.043700][ T3523] CPU: 1 UID: 0 PID: 3523 Comm: syz.4.15 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   35.043738][ T3523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   35.043757][ T3523] Call Trace:
[   35.043765][ T3523]  <TASK>
[   35.043774][ T3523]  __dump_stack+0x1d/0x30
[   35.043800][ T3523]  dump_stack_lvl+0xe8/0x140
[   35.043823][ T3523]  dump_stack+0x15/0x1b
[   35.043875][ T3523]  should_fail_ex+0x265/0x280
[   35.043931][ T3523]  should_fail+0xb/0x20
[   35.043980][ T3523]  should_fail_usercopy+0x1a/0x20
[   35.044012][ T3523]  strncpy_from_user+0x25/0x230
[   35.044040][ T3523]  ? kmem_cache_alloc_noprof+0x186/0x310
[   35.044149][ T3523]  ? getname_flags+0x80/0x3b0
[   35.044228][ T3523]  getname_flags+0xae/0x3b0
[   35.044255][ T3523]  __x64_sys_execve+0x42/0x70
[   35.044285][ T3523]  x64_sys_call+0x13ab/0x2fb0
[   35.044307][ T3523]  do_syscall_64+0xd2/0x200
[   35.044372][ T3523]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   35.044397][ T3523]  ? clear_bhb_loop+0x40/0x90
[   35.044417][ T3523]  ? clear_bhb_loop+0x40/0x90
[   35.044457][ T3523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.044552][ T3523] RIP: 0033:0x7fd59a0ae929
[   35.044574][ T3523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.044595][ T3523] RSP: 002b:00007fd598717038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   35.044617][ T3523] RAX: ffffffffffffffda RBX: 00007fd59a2d5fa0 RCX: 00007fd59a0ae929
[   35.044631][ T3523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[   35.044645][ T3523] RBP: 00007fd598717090 R08: 0000000000000000 R09: 0000000000000000
[   35.044656][ T3523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.044747][ T3523] R13: 0000000000000000 R14: 00007fd59a2d5fa0 R15: 00007ffede868158
[   35.044770][ T3523]  </TASK>
[   35.273727][ T3525] program syz.4.16 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.312897][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.366863][ T3527] tipc: Started in network mode
[   35.366972][ T3527] tipc: Node identity 1681417fbe32, cluster identity 4711
[   35.367081][ T3527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   35.368925][ T3529] syzkaller0: entered promiscuous mode
[   35.368945][ T3529] syzkaller0: entered allmulticast mode
[   35.429589][ T3529] tipc: Resetting bearer <eth:syzkaller0>
[   35.432166][ T3529] tipc: Disabling bearer <eth:syzkaller0>
[   35.706167][ T3562] geneve1: entered promiscuous mode
[   35.752271][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'.
[   35.773086][ T3560] loop2: detected capacity change from 0 to 8192
[   35.812284][ T3295]  loop2: p2 p3 p4
[   35.812345][ T3295] loop2: p2 start 2936012800 is beyond EOD, truncated
[   35.812365][ T3295] loop2: p3 start 1912602624 is beyond EOD, truncated
[   35.812418][ T3295] loop2: p4 size 656640 extends beyond EOD, truncated
[   35.833361][ T3560]  loop2: p2 p3 p4
[   35.833419][ T3560] loop2: p2 start 2936012800 is beyond EOD, truncated
[   35.833440][ T3560] loop2: p3 start 1912602624 is beyond EOD, truncated
[   35.833460][ T3560] loop2: p4 size 656640 extends beyond EOD, truncated
[   36.052534][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   36.313426][ T3588] geneve2: entered promiscuous mode
[   36.318760][ T3588] geneve2: entered allmulticast mode
[   36.353450][ T3590] bridge0: port 3(syz_tun) entered blocking state
[   36.360041][ T3590] bridge0: port 3(syz_tun) entered disabled state
[   36.366909][ T3590] syz_tun: entered allmulticast mode
[   36.376518][ T3590] syz_tun: entered promiscuous mode
[   36.383276][ T3590] bridge0: port 3(syz_tun) entered blocking state
[   36.389773][ T3590] bridge0: port 3(syz_tun) entered forwarding state
[   36.452333][ T3599] netlink: 76 bytes leftover after parsing attributes in process `syz.1.35'.
[   36.475050][ T3601] netlink: 'syz.4.36': attribute type 4 has an invalid length.
[   36.622825][ T3611] Zero length message leads to an empty skb
[   36.632558][ T3607] loop1: detected capacity change from 0 to 512
[   36.718157][ T3620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'.
[   37.151615][ T3636] x_tables: ip_tables: ah match: only valid for protocol 51
[   37.409825][ T3646] SELinux:  policydb magic number 0x1001e does not match expected magic number 0xf97cff8c
[   37.420459][ T3646] SELinux: failed to load policy
[   37.421607][ T3645] loop2: detected capacity change from 0 to 512
[   37.432144][ T3645] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.452157][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.466470][ T3645] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.603973][ T3656] unsupported nla_type 52263
[   37.634770][ T3658] binfmt_misc: register: failed to install interpreter file ./file0
[   37.670218][ T3645] syz.2.53 (3645) used greatest stack depth: 10416 bytes left
[   37.679395][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.728870][ T3661] FAULT_INJECTION: forcing a failure.
[   37.728870][ T3661] name failslab, interval 1, probability 0, space 0, times 1
[   37.741633][ T3661] CPU: 1 UID: 0 PID: 3661 Comm: syz.2.58 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   37.741729][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   37.741742][ T3661] Call Trace:
[   37.741749][ T3661]  <TASK>
[   37.741757][ T3661]  __dump_stack+0x1d/0x30
[   37.741784][ T3661]  dump_stack_lvl+0xe8/0x140
[   37.741810][ T3661]  dump_stack+0x15/0x1b
[   37.741832][ T3661]  should_fail_ex+0x265/0x280
[   37.741941][ T3661]  should_failslab+0x8c/0xb0
[   37.741970][ T3661]  kmem_cache_alloc_node_noprof+0x57/0x320
[   37.742015][ T3661]  ? __alloc_skb+0x101/0x320
[   37.742084][ T3661]  __alloc_skb+0x101/0x320
[   37.742119][ T3661]  netlink_alloc_large_skb+0xba/0xf0
[   37.742160][ T3661]  netlink_sendmsg+0x3cf/0x6b0
[   37.742333][ T3661]  ? __pfx_netlink_sendmsg+0x10/0x10
[   37.742375][ T3661]  __sock_sendmsg+0x142/0x180
[   37.742405][ T3661]  ____sys_sendmsg+0x31e/0x4e0
[   37.742526][ T3661]  ___sys_sendmsg+0x17b/0x1d0
[   37.742580][ T3661]  __x64_sys_sendmsg+0xd4/0x160
[   37.742706][ T3661]  x64_sys_call+0x2999/0x2fb0
[   37.742736][ T3661]  do_syscall_64+0xd2/0x200
[   37.742771][ T3661]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   37.742873][ T3661]  ? clear_bhb_loop+0x40/0x90
[   37.743023][ T3661]  ? clear_bhb_loop+0x40/0x90
[   37.743055][ T3661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.743085][ T3661] RIP: 0033:0x7f73142fe929
[   37.743105][ T3661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.743126][ T3661] RSP: 002b:00007f7312967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   37.743166][ T3661] RAX: ffffffffffffffda RBX: 00007f7314525fa0 RCX: 00007f73142fe929
[   37.743178][ T3661] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000006
[   37.743193][ T3661] RBP: 00007f7312967090 R08: 0000000000000000 R09: 0000000000000000
[   37.743209][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.743224][ T3661] R13: 0000000000000000 R14: 00007f7314525fa0 R15: 00007ffd0a70c658
[   37.743340][ T3661]  </TASK>
[   38.097881][ T3669] bridge0: port 3(syz_tun) entered blocking state
[   38.104545][ T3669] bridge0: port 3(syz_tun) entered disabled state
[   38.153970][ T3669] syz_tun: entered allmulticast mode
[   38.202798][ T3669] syz_tun: entered promiscuous mode
[   38.313023][ T3669] bridge0: port 3(syz_tun) entered blocking state
[   38.319614][ T3669] bridge0: port 3(syz_tun) entered forwarding state
[   38.539549][ T3671] lo speed is unknown, defaulting to 1000
[   38.599660][ T3677] geneve1: entered promiscuous mode
[   38.633786][   T29] kauditd_printk_skb: 569 callbacks suppressed
[   38.633805][   T29] audit: type=1400 audit(1752026563.469:661): avc:  denied  { create } for  pid=3679 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   38.662483][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.673698][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'.
[   38.694315][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.715232][   T29] audit: type=1400 audit(1752026563.499:662): avc:  denied  { read write } for  pid=3679 comm="syz.0.65" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.738630][   T29] audit: type=1400 audit(1752026563.499:663): avc:  denied  { open } for  pid=3679 comm="syz.0.65" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.762391][   T29] audit: type=1400 audit(1752026563.499:664): avc:  denied  { ioctl } for  pid=3679 comm="syz.0.65" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.787271][   T29] audit: type=1326 audit(1752026563.509:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cbdd7e929 code=0x7ffc0000
[   38.810452][   T29] audit: type=1326 audit(1752026563.509:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2cbdd7e929 code=0x7ffc0000
[   38.833670][   T29] audit: type=1326 audit(1752026563.459:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   38.857373][   T29] audit: type=1326 audit(1752026563.509:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   38.881062][   T29] audit: type=1326 audit(1752026563.509:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   38.904157][   T29] audit: type=1326 audit(1752026563.509:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   39.031161][ T3683] process 'syz.4.66' launched './file0' with NULL argv: empty string added
[   39.576371][ T3698] lo speed is unknown, defaulting to 1000
[   39.995431][ T3700] mmap: syz.2.71 (3700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.233472][ T3705] loop4: detected capacity change from 0 to 1024
[   40.280716][ T3705] =======================================================
[   40.280716][ T3705] WARNING: The mand mount option has been deprecated and
[   40.280716][ T3705]          and is ignored by this kernel. Remove the mand
[   40.280716][ T3705]          option from the mount to silence this warning.
[   40.280716][ T3705] =======================================================
[   40.361007][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'.
[   40.500003][ T3705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.530195][ T3705] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.545430][ T3709] tipc: New replicast peer: 255.255.255.255
[   40.551646][ T3709] tipc: Enabled bearer <udp:syz2>, priority 10
[   40.567723][ T3709] loop2: detected capacity change from 0 to 2048
[   40.592764][ T3705] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.72: lblock 1 mapped to illegal pblock 1 (length 15)
[   40.608544][ T3709] EXT4-fs (loop2): failed to initialize system zone (-117)
[   40.639022][ T3709] EXT4-fs (loop2): mount failed
[   40.684329][ T3705] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   40.696930][ T3705] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.696930][ T3705] 
[   40.772580][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.842970][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.861138][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.881370][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.901247][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.910832][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.924939][ T3724] lo speed is unknown, defaulting to 1000
[   40.930232][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.941066][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.960360][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.023377][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.050144][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.072940][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.100279][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.509223][ T3754] FAULT_INJECTION: forcing a failure.
[   41.509223][ T3754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.522548][ T3754] CPU: 1 UID: 0 PID: 3754 Comm: syz.0.80 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   41.522583][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   41.522598][ T3754] Call Trace:
[   41.522606][ T3754]  <TASK>
[   41.522616][ T3754]  __dump_stack+0x1d/0x30
[   41.522707][ T3754]  dump_stack_lvl+0xe8/0x140
[   41.522730][ T3754]  dump_stack+0x15/0x1b
[   41.522746][ T3754]  should_fail_ex+0x265/0x280
[   41.522781][ T3754]  should_fail+0xb/0x20
[   41.522907][ T3754]  should_fail_usercopy+0x1a/0x20
[   41.522942][ T3754]  _copy_from_user+0x1c/0xb0
[   41.522966][ T3754]  do_ipv6_setsockopt+0x220/0x22e0
[   41.522996][ T3754]  ? _parse_integer+0x27/0x40
[   41.523028][ T3754]  ? kstrtoull+0x111/0x140
[   41.523099][ T3754]  ? __rcu_read_unlock+0x4f/0x70
[   41.523125][ T3754]  ? avc_has_perm_noaudit+0x1b1/0x200
[   41.523160][ T3754]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   41.523208][ T3754]  ipv6_setsockopt+0x59/0x130
[   41.523279][ T3754]  rawv6_setsockopt+0x1d2/0x420
[   41.523307][ T3754]  sock_common_setsockopt+0x69/0x80
[   41.523333][ T3754]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   41.523363][ T3754]  __sys_setsockopt+0x184/0x200
[   41.523451][ T3754]  __x64_sys_setsockopt+0x64/0x80
[   41.523485][ T3754]  x64_sys_call+0x2bd5/0x2fb0
[   41.523511][ T3754]  do_syscall_64+0xd2/0x200
[   41.523619][ T3754]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.523647][ T3754]  ? clear_bhb_loop+0x40/0x90
[   41.523695][ T3754]  ? clear_bhb_loop+0x40/0x90
[   41.523716][ T3754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.523736][ T3754] RIP: 0033:0x7f0b52ffe929
[   41.523753][ T3754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.523771][ T3754] RSP: 002b:00007f0b51667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   41.523795][ T3754] RAX: ffffffffffffffda RBX: 00007f0b53225fa0 RCX: 00007f0b52ffe929
[   41.523811][ T3754] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003
[   41.523825][ T3754] RBP: 00007f0b51667090 R08: 0000000000000004 R09: 0000000000000000
[   41.523841][ T3754] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001
[   41.523856][ T3754] R13: 0000000000000000 R14: 00007f0b53225fa0 R15: 00007ffe8acb9338
[   41.523890][ T3754]  </TASK>
[   41.758862][ T2959] tipc: Node number set to 2830319999
[   41.872203][ T3765] FAULT_INJECTION: forcing a failure.
[   41.872203][ T3765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.885414][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.0.84 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   41.885460][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   41.885477][ T3765] Call Trace:
[   41.885485][ T3765]  <TASK>
[   41.885495][ T3765]  __dump_stack+0x1d/0x30
[   41.885523][ T3765]  dump_stack_lvl+0xe8/0x140
[   41.885549][ T3765]  dump_stack+0x15/0x1b
[   41.885571][ T3765]  should_fail_ex+0x265/0x280
[   41.885675][ T3765]  should_fail+0xb/0x20
[   41.885770][ T3765]  should_fail_usercopy+0x1a/0x20
[   41.885805][ T3765]  _copy_from_user+0x1c/0xb0
[   41.885824][ T3765]  ___sys_sendmsg+0xc1/0x1d0
[   41.885885][ T3765]  __x64_sys_sendmsg+0xd4/0x160
[   41.885936][ T3765]  x64_sys_call+0x2999/0x2fb0
[   41.885965][ T3765]  do_syscall_64+0xd2/0x200
[   41.886009][ T3765]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.886045][ T3765]  ? clear_bhb_loop+0x40/0x90
[   41.886137][ T3765]  ? clear_bhb_loop+0x40/0x90
[   41.886167][ T3765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.886195][ T3765] RIP: 0033:0x7f0b52ffe929
[   41.886226][ T3765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.886249][ T3765] RSP: 002b:00007f0b51667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.886300][ T3765] RAX: ffffffffffffffda RBX: 00007f0b53225fa0 RCX: 00007f0b52ffe929
[   41.886332][ T3765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   41.886343][ T3765] RBP: 00007f0b51667090 R08: 0000000000000000 R09: 0000000000000000
[   41.886358][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.886373][ T3765] R13: 0000000000000000 R14: 00007f0b53225fa0 R15: 00007ffe8acb9338
[   41.886395][ T3765]  </TASK>
[   42.436747][ T3786] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[   42.871398][ T3803] infiniband syz!: set active
[   42.876261][ T3803] infiniband syz!: added team_slave_0
[   42.920453][ T3803] RDS/IB: syz!: added
[   42.926870][ T3803] smc: adding ib device syz! with port count 1
[   42.941149][ T3803] smc:    ib device syz! port 1 has pnetid 
[   43.189952][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[   43.237336][ T3812] loop2: detected capacity change from 0 to 128
[   43.356607][ T3812] syz.2.103: attempt to access beyond end of device
[   43.356607][ T3812] loop2: rw=2049, sector=145, nr_sectors = 32 limit=128
[   43.391597][ T3812] syz.2.103: attempt to access beyond end of device
[   43.391597][ T3812] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   43.455732][ T3812] syz.2.103: attempt to access beyond end of device
[   43.455732][ T3812] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   43.517642][ T3812] syz.2.103: attempt to access beyond end of device
[   43.517642][ T3812] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   43.580110][ T3812] syz.2.103: attempt to access beyond end of device
[   43.580110][ T3812] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   43.596171][ T3836] loop4: detected capacity change from 0 to 512
[   43.623009][ T3836] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   43.627615][ T3812] syz.2.103: attempt to access beyond end of device
[   43.627615][ T3812] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   43.660333][ T3836] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.111: bad orphan inode 15
[   43.680126][ T3812] syz.2.103: attempt to access beyond end of device
[   43.680126][ T3812] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   43.695398][ T3836] ext4_test_bit(bit=14, block=18) = 1
[   43.700886][ T3836] is_bad_inode(inode)=0
[   43.705074][ T3836] NEXT_ORPHAN(inode)=1023
[   43.709427][ T3836] max_ino=32
[   43.710129][ T3812] syz.2.103: attempt to access beyond end of device
[   43.710129][ T3812] loop2: rw=2049, sector=281, nr_sectors = 9 limit=128
[   43.712694][ T3836] i_nlink=0
[   43.726360][   T29] kauditd_printk_skb: 264 callbacks suppressed
[   43.726379][   T29] audit: type=1326 audit(1752026568.569:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   43.758741][   T29] audit: type=1326 audit(1752026568.599:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73142fe929 code=0x7ffc0000
[   43.782635][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   43.801897][ T3836] ext2 filesystem being mounted at /35/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   43.842547][   T29] audit: type=1400 audit(1752026568.679:936): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   43.906194][ T3843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'.
[   43.941689][   T29] audit: type=1400 audit(1752026568.719:937): avc:  denied  { create } for  pid=3839 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   43.961688][   T29] audit: type=1400 audit(1752026568.719:938): avc:  denied  { write } for  pid=3839 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   43.981575][   T29] audit: type=1400 audit(1752026568.719:939): avc:  denied  { execute } for  pid=3839 comm="syz.0.112" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   44.007862][   T29] audit: type=1400 audit(1752026568.739:940): avc:  denied  { block_suspend } for  pid=3835 comm="syz.4.111" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.204218][ T3713] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set
[   44.327715][ T3851] lo speed is unknown, defaulting to 1000
[   44.982806][   T29] audit: type=1400 audit(1752026569.819:941): avc:  denied  { create } for  pid=3854 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.096943][   T29] audit: type=1400 audit(1752026569.839:942): avc:  denied  { ioctl } for  pid=3854 comm="syz.2.116" path="socket:[4938]" dev="sockfs" ino=4938 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.121889][   T29] audit: type=1326 audit(1752026569.919:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73142fe929 code=0x0
[   45.254838][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   45.345029][ T3864] loop4: detected capacity change from 0 to 512
[   45.355326][ T3864] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.368123][ T3864] EXT4-fs: old and new quota format mixing
[   45.392559][ T3865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.117'.
[   45.984890][ T3873] lo speed is unknown, defaulting to 1000
[   46.075052][ T3860] syz.2.117 (3860) used greatest stack depth: 10400 bytes left
[   46.132588][ T3884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[   46.252128][ T3894] loop2: detected capacity change from 0 to 128
[   46.265655][ T3295] ==================================================================
[   46.273793][ T3295] BUG: KCSAN: data-race in _copy_to_iter / fat_set_state
[   46.280860][ T3295] 
[   46.283188][ T3295] write to 0xffff88812c6ed041 of 1 bytes by task 3894 on cpu 1:
[   46.290830][ T3295]  fat_set_state+0x16c/0x1e0
[   46.295442][ T3295]  fat_fill_super+0x1875/0x1ce0
[   46.300331][ T3295]  vfat_fill_super+0x24/0x30
[   46.304957][ T3295]  get_tree_bdev_flags+0x291/0x300
[   46.310099][ T3295]  get_tree_bdev+0x1f/0x30
[   46.314553][ T3295]  vfat_get_tree+0x1c/0x30
[   46.319005][ T3295]  vfs_get_tree+0x54/0x1d0
[   46.323458][ T3295]  do_new_mount+0x207/0x680
[   46.328001][ T3295]  path_mount+0x4a4/0xb20
[   46.332359][ T3295]  __se_sys_mount+0x28f/0x2e0
[   46.337160][ T3295]  __x64_sys_mount+0x67/0x80
[   46.341818][ T3295]  x64_sys_call+0xd36/0x2fb0
[   46.346432][ T3295]  do_syscall_64+0xd2/0x200
[   46.350969][ T3295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.356961][ T3295] 
[   46.359308][ T3295] read to 0xffff88812c6ed000 of 512 bytes by task 3295 on cpu 0:
[   46.367031][ T3295]  _copy_to_iter+0x12d/0xe30
[   46.371646][ T3295]  copy_page_to_iter+0x18f/0x2d0
[   46.376611][ T3295]  filemap_read+0x407/0xa00
[   46.381147][ T3295]  blkdev_read_iter+0x22d/0x2e0
[   46.386020][ T3295]  vfs_read+0x5cd/0x6f0
[   46.390205][ T3295]  ksys_read+0xda/0x1a0
[   46.394385][ T3295]  __x64_sys_read+0x40/0x50
[   46.398913][ T3295]  x64_sys_call+0x2d77/0x2fb0
[   46.403604][ T3295]  do_syscall_64+0xd2/0x200
[   46.408133][ T3295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.414040][ T3295] 
[   46.416370][ T3295] Reported by Kernel Concurrency Sanitizer on:
[   46.422549][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   46.434543][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   46.444615][ T3295] ==================================================================
[   46.560406][ T3895] FAULT_INJECTION: forcing a failure.
[   46.560406][ T3895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.573798][ T3895] CPU: 0 UID: 0 PID: 3895 Comm: syz.0.127 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) 
[   46.573832][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   46.573849][ T3895] Call Trace:
[   46.573856][ T3895]  <TASK>
[   46.573865][ T3895]  __dump_stack+0x1d/0x30
[   46.573891][ T3895]  dump_stack_lvl+0xe8/0x140
[   46.573932][ T3895]  dump_stack+0x15/0x1b
[   46.574010][ T3895]  should_fail_ex+0x265/0x280
[   46.574047][ T3895]  should_fail+0xb/0x20
[   46.574076][ T3895]  should_fail_usercopy+0x1a/0x20
[   46.574149][ T3895]  _copy_from_user+0x1c/0xb0
[   46.574169][ T3895]  ppp_write+0x11f/0x330
[   46.574205][ T3895]  vfs_writev+0x403/0x8b0
[   46.574235][ T3895]  ? __pfx_ppp_write+0x10/0x10
[   46.574340][ T3895]  __x64_sys_pwritev+0xfd/0x1c0
[   46.574367][ T3895]  x64_sys_call+0x2752/0x2fb0
[   46.574395][ T3895]  do_syscall_64+0xd2/0x200
[   46.574467][ T3895]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   46.574501][ T3895]  ? clear_bhb_loop+0x40/0x90
[   46.574529][ T3895]  ? clear_bhb_loop+0x40/0x90
[   46.574649][ T3895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.574673][ T3895] RIP: 0033:0x7f0b52ffe929
[   46.574688][ T3895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.574707][ T3895] RSP: 002b:00007f0b51667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[   46.574728][ T3895] RAX: ffffffffffffffda RBX: 00007f0b53225fa0 RCX: 00007f0b52ffe929
[   46.574821][ T3895] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[   46.574834][ T3895] RBP: 00007f0b51667090 R08: 0000000000000000 R09: 0000000000000000
[   46.574846][ T3895] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000001
[   46.574859][ T3895] R13: 0000000000000000 R14: 00007f0b53225fa0 R15: 00007ffe8acb9338
[   46.574879][ T3895]  </TASK>
[   46.597174][ T3889] syz.2.126: attempt to access beyond end of device
[   46.597174][ T3889] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128
[   46.889194][ T3889] syz.2.126: attempt to access beyond end of device
[   46.889194][ T3889] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128
[   46.922833][ T3894] lo speed is unknown, defaulting to 1000
[   46.940297][ T3889] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   46.960993][ T3889] Buffer I/O error on dev loop2, logical block 143, lost async page write
[   46.983388][ T3889] Buffer I/O error on dev loop2, logical block 144, lost async page write
[   47.023618][ T3889] Buffer I/O error on dev loop2, logical block 145, lost async page write
[   47.042711][ T3889] Buffer I/O error on dev loop2, logical block 146, lost async page write
[   47.098754][ T3889] Buffer I/O error on dev loop2, logical block 147, lost async page write
[   47.113397][ T3889] Buffer I/O error on dev loop2, logical block 156, lost async page write
[   47.143817][ T3889] Buffer I/O error on dev loop2, logical block 157, lost async page write
[   47.153050][ T3889] Buffer I/O error on dev loop2, logical block 160, lost async page write
[   47.165896][ T3889] Buffer I/O error on dev loop2, logical block 161, lost async page write