last executing test programs:

1m41.708762679s ago: executing program 1 (id=2020):
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
readlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004240)=""/4098, 0x47c)

1m41.6515027s ago: executing program 1 (id=2025):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0)

1m41.608812421s ago: executing program 1 (id=2028):
socket(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"])
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0xffffffff})

1m41.566369061s ago: executing program 1 (id=2031):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x51, 0x40)
read$usbmon(r0, 0x0, 0x0)

1m40.668445866s ago: executing program 1 (id=2040):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nombcache}, {@noload}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) (async)
syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 64)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0) (rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r3, 0x1, 0x28, 0x0, &(0x7f00000000c0)) (async)
msgsnd(0x0, 0x0, 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)

1m40.446895559s ago: executing program 1 (id=2043):
r0 = socket$kcm(0x2, 0x3, 0x2)
syz_io_uring_setup(0x762f, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain)
keyctl$link(0x8, r2, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==")
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'O'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0)
syz_usb_disconnect(r9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xbb9}, 0x18)
r11 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r11)
semop(0x0, &(0x7f0000000280)=[{0x4, 0xc0, 0x1800}, {0x1, 0x0, 0x400}], 0x2aaaae05)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x3}, 0x18)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x70, 0x0}, 0x0)

1m26.175891735s ago: executing program 32 (id=2043):
r0 = socket$kcm(0x2, 0x3, 0x2)
syz_io_uring_setup(0x762f, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain)
keyctl$link(0x8, r2, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'O'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0)
syz_usb_disconnect(r9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xbb9}, 0x18)
r11 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r11)
semop(0x0, &(0x7f0000000280)=[{0x4, 0xc0, 0x1800}, {0x1, 0x0, 0x400}], 0x2aaaae05)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x3}, 0x18)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x70, 0x0}, 0x0)

1.845372081s ago: executing program 2 (id=4089):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e264e2203000000060000000f000000c3000000060000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c700d1e1c487554a1fa02bd7598cb60bc8eb0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x4040000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000001000)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

1.631244734s ago: executing program 2 (id=4091):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)

1.575323285s ago: executing program 2 (id=4092):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe4", 0x10)
recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0)

928.519365ms ago: executing program 0 (id=4098):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})

888.789856ms ago: executing program 0 (id=4099):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3, 0x80000, 0x8000000}, 0x27)

817.608897ms ago: executing program 0 (id=4101):
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0))
r1 = io_uring_setup(0x3633, &(0x7f0000000000)={0x0, 0xb100, 0x20, 0x1, 0x26d})
io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xa673, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2000}, 0x18)
connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x10, 0x0, 0x2}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0)

790.398448ms ago: executing program 5 (id=4102):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tc'])

722.373018ms ago: executing program 0 (id=4104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

706.962269ms ago: executing program 0 (id=4105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

689.613419ms ago: executing program 0 (id=4106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
personality(0x410000e)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'wg1\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0xfdef)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600})
r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0xa000200)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1020, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)="e0c2bd3fc52e6e342bc37c2b8fb93136aeae22dc0fcfa4b99967922b812f5765565248ebf948b1ebc29a55a31f86169b2263c6a928d1bf5df26eeb2d39ca13e49a14544f347020916cde6fb8cd09b41ad9da36cba1e110e28f4603e34454f52e604ee3c1fe11f0d399af657a92822e92a971f9aca8c9ff3eece327ed4db03a69bafa62d489365eb26a8434c1c8d79174cbf5a78448f13da9adcd9446562fc1e25a7325a0d9", 0xa5}, {&(0x7f00000003c0)="b8974fdbaa4b4a110e19dac21fa68b1b4d93f3b5d59c456646eddb2d63a560a38d225c9dad7422c31e8d5bea6943943f21021fb0719f1d3c04ff15050b529997e06bfa447cb09c1e559b9354bdb07415b8f19030c6b72a89b0ea124f3c0e2089dffcc764734f73dab43c41d5e57ecae22177c51a1ae4b174ab84759d1da65f3c6391e2290a0e872109c43954d42b4f06637f60f353358086fcac01e45dfc92d80d0b438fc5", 0xa5}, {&(0x7f0000000480)="b029a7a28a1e656f3e0e58134d354596eadf1b4266a160c9bb145d26e5179cad953a8961139d74677f143dec59ae1af65bb5ca79d25f5905cd3fe7d3d000c9", 0x3f}, {&(0x7f0000000580)="75b9d25ea8af513cb9d40885b9db732d40cc54484295da80ccc8845b7eea5314ef41247cf3ba7267e3b6d77775168d861fd0cb2d683ec61430dce2bbea60f20fd944d849cdaeec6941e95ab7ed3f66c6bb8b79d8db8d1686491831d2177be32f4e83947e0d58d77440e4a912f1509fca16d4bb42c8428d396a51167c00bc93992365dd90735815f8eb82d771e5a4d59682c072ff35c5e3652bfa6b7da08be2d93e8eba942a70aa9551e89e6315e296be549a26a8", 0xb4}], 0x4, 0x0, 0x0, 0xc1}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000006c0)="696cd0f9529132bb39e8cd7f6cf3450cbb2b120a5bfa314e40de563d7df300de2682a9c4883602d5b75c7270493c5a225ef34b91bc4b74b86d209de4e5632cfe04aa29f3ef158dc0f486ddbda092b5a9f8e1ad652ad1dcde64111c7a8adf3936d6ed52144f8d6ad7e27539050a1f", 0x6e}, {&(0x7f0000000500)="c899cb6b5421ee027e8c1d24a55a54e3627b36fc3833212b09c1ec2bb8350d4a037cb781895aabcd9f48f3b472ee08d02829", 0x32}, {&(0x7f0000000880)="ef274feb30f424ff69798d357b475e15d580ef40ed5be346a96ec7860b3e33017b729699f7f93503313180ec04063e57c702159c9989b9a48bf8df4ae0542c0bdba4d9ce983a816a7d2a13114a9bbe9373658b3e541c39a711dbc55c1cde5b0e59edc33d07cb63d0c943434feb9adb7408f7d554cd7ff31778bba9d9d27247bf8c13784beddd5e86b73932faaef9cbebb663c80b92f3f746e95c07bcefdd6aca57b74732974a24958dd3a18fc88f622e23e6d441bc22538a72d1ec5f830e2fe6e539044a29", 0xc5}, {&(0x7f00000007c0)="19c297e98bc77ccfa1a7c43c2353fc65d452000427f2d1389409c1d27f5536cf", 0x20}, {&(0x7f0000000800)="b6c023e54e74ecf5348f7ac79f", 0xd}, {&(0x7f0000000a00)="88bdcdc9caded0", 0x7}], 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="2400000000000100010000000000000000000000001c712ae6c7d649ad777a471c0935c02d54ea1e3769f82b9d1fd533585dcf49c1963d611aee9bf33e1a75ab23cd24805c64b4dacfb09f21afef9b4615aadc55525cff89e10e74402575dbc4986c1c5d4aa5c16ee309e1e8678006f60129aaaac807d472b891cf93eaa29e22f4ac6b66ce", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4040040}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c40), 0x0, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x90, 0x40011}}], 0x3, 0x41)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
syz_pidfd_open(r9, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

631.31652ms ago: executing program 2 (id=4108):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e264e2203000000060000000f000000c3000000060000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c700d1e1c487554a1fa02bd7598cb60bc8eb0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x4040000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000001000)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close_range(r4, 0xffffffffffffffff, 0x0)

554.536971ms ago: executing program 2 (id=4111):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e264e2203000000060000000f000000c3000000060000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c700d1e1c487554a1fa02bd7598cb60bc8eb0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x4040000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000001000)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r6, 0x0, 0xfffffffffffffff4}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}})
close_range(r7, 0xffffffffffffffff, 0x0)

464.861032ms ago: executing program 2 (id=4113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
msgsnd(0x0, 0x0, 0xfe9, 0x800)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480020000906010200000000000000000200ffff200007800c00018008000140e000000208000a40ffff060e05000300020000000900020073797a31000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18)
r5 = gettid()
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10)
setitimer(0x0, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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")
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffff801}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

444.318343ms ago: executing program 5 (id=4114):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdc0612461703210d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
close(r4) (async)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

437.335903ms ago: executing program 3 (id=4115):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

405.871624ms ago: executing program 4 (id=4116):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0)

403.304684ms ago: executing program 3 (id=4117):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

343.175474ms ago: executing program 3 (id=4118):
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0))
r1 = io_uring_setup(0x3633, &(0x7f0000000000)={0x0, 0xb100, 0x20, 0x1, 0x26d})
io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xa673, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2000}, 0x18)
connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x10, 0x0, 0x2}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x66, 0x36, 0x61, 0x61, 0x61, 0x37, 0x31, 0x0, 0x38, 0x31, 0x32, 0x35, 0x31, 0x62, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "d3960ea9eb0edfa711e3a205621cf544be5f3632310a8813cd49d7ba40d768ad6169fb95162a74a64e1cadb6d3e86c984a32f0fa31fa08305ce2b602c74a0254", 0x21}, 0x48, r0)

324.429085ms ago: executing program 4 (id=4119):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)

260.096096ms ago: executing program 3 (id=4120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x40}}, 0x20040000)

237.134876ms ago: executing program 4 (id=4121):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))

163.199257ms ago: executing program 4 (id=4122):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0xfeff)

146.282148ms ago: executing program 3 (id=4123):
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0))
r1 = io_uring_setup(0x3633, &(0x7f0000000000)={0x0, 0xb100, 0x20, 0x1, 0x26d})
io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xa673, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2000}, 0x18)
connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x10, 0x0, 0x2}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0)

115.638168ms ago: executing program 4 (id=4124):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e264e2203000000060000000f000000c3000000060000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c700d1e1c487554a1fa02bd7598cb60bc8eb0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x4040000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000001000)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r6, 0x0, 0xfffffffffffffff4}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}})
close_range(r7, 0xffffffffffffffff, 0x0)

53.735979ms ago: executing program 5 (id=4125):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18)
socket$inet6(0xa, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++371K66jGflyVYrvdu7P//du/u1f65D+w/6/5/vsv0XvvqdP3e5KgBwCGobm0szlUp57dgmGr30I1ANiSOY+HZPPzBN07SxT73C5yRxFL6WZqLfRyYAAKDXnp7097smAAAAAAAAAAAAAAAAAAAAMLgO43Fie2Nu7aSSXjxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJ94PAAD//9VF2VM=")

52.623929ms ago: executing program 3 (id=4126):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x40}}, 0x20040000)

23.06435ms ago: executing program 5 (id=4127):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

22.62723ms ago: executing program 5 (id=4128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3, 0xffffffec, 0x398, 0x40, 0x56, 0xffbffffd, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1cb, 0xc, 0x4, 0x5}], "476a0f47a8bfd123f5003e599641733547482dccbcffae462b009e64692b77f8b87a4a960476c0df8a7276b212c034ec8646b48d7aef87933da27b34ac30f24ce71d3695d8d17d07ccaaa30935bc8941a4d8dac405098a49eb7c2ba630fedf6cc927215e0a61d95e9b4bfa7975ece85814d1fdc34630ab9d4cfca180bd7100b9f1366451c6", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5fd)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

21.50239ms ago: executing program 4 (id=4129):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0)

0s ago: executing program 5 (id=4130):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="d688d8cadc3e812e479e648012d733", 0xf}], 0x1}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000f40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000d00)='^\x00', &(0x7f0000000f00)='./file0\x00', r2) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="e0a08cce1e000d2ee82b720000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400f8000000000253cdb4f820ffff58b1290600000000000000ea00000095e3b89978ea2b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = gettid()
sendmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001000)=ANY=[@ANYRES16=r2, @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRESDEC=r2, @ANYRES32=r6, @ANYRESDEC=r7, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0], 0xa0}, 0x4004881) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10009}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3, <r10=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0x1c, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @generic={0xe3, 0x9, 0x5, 0x94d, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x80, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0xeb, 0x8, 0x0, 0x2, 0xfffffff6}]}, &(0x7f0000000700)='GPL\x00', 0xa59, 0x21, &(0x7f0000000740)=""/33, 0x41100, 0x26, '\x00', 0x0, @fallback=0x20, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x6, 0x0, &(0x7f0000000ac0)=[{0x5, 0x5, 0x9, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x2, 0x105, 0x6, 0x8}, {0x4, 0x5, 0x3, 0x2}, {0x2, 0x3, 0x3, 0x6}, {0x1, 0x2, 0x5, 0x5}], 0x10, 0x7}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x99, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000008c0), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x71, 0x2e, 0x61, 0x0, 0x61, 0x30, 0x5f]}}, &(0x7f0000000880)=""/2, 0x2e, 0x2, 0x1, 0x3}, 0x28) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="08000000ff0f0000080000000400000000040000", @ANYRES32=r3, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020003df001800000000000000000000000000f92578298d72ebce7f92b0cf20000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x1a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000034000000000000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185800000bdaff00000000000000000018010000696c6c25000000deff2020207b1af8ff00000200bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000c45b4000ffffffffbf91000000000000b70200f3000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x2, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000a40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x9, 0x9, 0x29f8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r13, r3, r8, r8], &(0x7f0000000b80)=[{0x4, 0x2, 0x5, 0xb}, {0x1, 0x3, 0x8, 0xc2760f005b169495}, {0x5, 0x4, 0x10, 0x1}, {0x4, 0x4, 0xe, 0x3}], 0x10, 0x8b04}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x6, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='GPL\x00', 0xffffffff, 0x0, &(0x7f0000000d00), 0x41000, 0x53, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000d40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x7, 0x56b, 0x2}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000dc0)=[{0x5, 0x3}, {0x0, 0x43, 0x2, 0x9}, {0x1, 0x1, 0x9, 0x2}, {0x3, 0x1, 0xf, 0xa}, {0x0, 0x5, 0xe}], 0x10, 0x8}, 0x94) (async)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r14}, 0x18)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
io_uring_setup(0x243f, 0x0) (async)
ioctl$FIONCLEX(r9, 0x5450) (async)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000002"], 0x54}}, 0x0) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160)

kernel console output (not intermixed with test programs):

5acc83c8
[  170.735997][T10502]  </TASK>
[  170.947166][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  170.956224][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  170.965253][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  171.035776][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  171.293879][T10531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.331257][T10533] @: renamed from vlan0 (while UP)
[  171.434214][T10541] netlink: 'syz.3.2580': attribute type 27 has an invalid length.
[  171.466834][T10541] gretap1: left promiscuous mode
[  171.622738][T10563] xt_hashlimit: max too large, truncated to 1048576
[  171.731221][T10570] lo speed is unknown, defaulting to 1000
[  172.260143][T10621] sctp: [Deprecated]: syz.5.2609 (pid 10621) Use of int in maxseg socket option.
[  172.260143][T10621] Use struct sctp_assoc_value instead
[  172.388600][T10631] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.400366][T10631] netlink: '+}[@': attribute type 2 has an invalid length.
[  172.514073][T10631] macsec1: entered promiscuous mode
[  172.519384][T10631] bridge0: entered promiscuous mode
[  172.536572][T10631] bridge0: port 3(macsec1) entered blocking state
[  172.543084][T10631] bridge0: port 3(macsec1) entered disabled state
[  172.568641][T10631] macsec1: entered allmulticast mode
[  172.574073][T10631] bridge0: entered allmulticast mode
[  172.600276][T10631] macsec1: left allmulticast mode
[  172.605433][T10631] bridge0: left allmulticast mode
[  172.614223][T10631] bridge0: left promiscuous mode
[  172.867244][T10664] xt_hashlimit: max too large, truncated to 1048576
[  172.919781][T10671] netlink: 'syz.0.2629': attribute type 27 has an invalid length.
[  172.963767][T10671] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.970985][T10671] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.985320][T10671] bond_slave_0: left promiscuous mode
[  172.990802][T10671] bond_slave_1: left promiscuous mode
[  173.050925][T10671] veth0_vlan: left allmulticast mode
[  173.070007][T10671] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.079397][T10671] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.088646][T10671] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.097906][T10671] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.128092][T10671] gretap1: left promiscuous mode
[  173.143552][T10671] bond1: left promiscuous mode
[  173.148513][T10671] wireguard0: left promiscuous mode
[  173.160666][T10671] bond2: left promiscuous mode
[  173.165618][T10671] wireguard2: left promiscuous mode
[  173.172612][T10671] bond3: left promiscuous mode
[  173.177481][T10671] wireguard3: left promiscuous mode
[  173.227513][T10683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.236403][T10683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.245238][T10683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.254227][T10683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.399074][T10697] FAULT_INJECTION: forcing a failure.
[  173.399074][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.412312][T10697] CPU: 0 UID: 0 PID: 10697 Comm: syz.5.2637 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  173.412426][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.412442][T10697] Call Trace:
[  173.412449][T10697]  <TASK>
[  173.412458][T10697]  __dump_stack+0x1d/0x30
[  173.412482][T10697]  dump_stack_lvl+0xe8/0x140
[  173.412513][T10697]  dump_stack+0x15/0x1b
[  173.412533][T10697]  should_fail_ex+0x265/0x280
[  173.412575][T10697]  should_fail+0xb/0x20
[  173.412609][T10697]  should_fail_usercopy+0x1a/0x20
[  173.412703][T10697]  _copy_to_user+0x20/0xa0
[  173.412729][T10697]  simple_read_from_buffer+0xb5/0x130
[  173.412769][T10697]  proc_fail_nth_read+0x100/0x140
[  173.412845][T10697]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.412950][T10697]  vfs_read+0x1a0/0x6f0
[  173.412981][T10697]  ? __rcu_read_unlock+0x4f/0x70
[  173.413002][T10697]  ? __rcu_read_unlock+0x4f/0x70
[  173.413073][T10697]  ? __fget_files+0x184/0x1c0
[  173.413100][T10697]  ksys_read+0xda/0x1a0
[  173.413151][T10697]  __x64_sys_read+0x40/0x50
[  173.413190][T10697]  x64_sys_call+0x2d77/0x2fb0
[  173.413211][T10697]  do_syscall_64+0xd2/0x200
[  173.413339][T10697]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  173.413373][T10697]  ? clear_bhb_loop+0x40/0x90
[  173.413402][T10697]  ? clear_bhb_loop+0x40/0x90
[  173.413423][T10697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.413498][T10697] RIP: 0033:0x7f08da7dd3bc
[  173.413518][T10697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  173.413541][T10697] RSP: 002b:00007f08d8e3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.413565][T10697] RAX: ffffffffffffffda RBX: 00007f08daa05fa0 RCX: 00007f08da7dd3bc
[  173.413645][T10697] RDX: 000000000000000f RSI: 00007f08d8e3f0a0 RDI: 0000000000000006
[  173.413662][T10697] RBP: 00007f08d8e3f090 R08: 0000000000000000 R09: 0000000000000000
[  173.413677][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.413692][T10697] R13: 0000000000000000 R14: 00007f08daa05fa0 R15: 00007fff2a0d3dd8
[  173.413718][T10697]  </TASK>
[  173.894924][T10724] C: renamed from lo (while UP)
[  173.899595][T10724] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  174.038385][T10732] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  174.133270][T10737] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  174.215574][T10742] __nla_validate_parse: 33 callbacks suppressed
[  174.215592][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2654'.
[  174.239580][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2655'.
[  174.440536][T10758] netlink: 'syz.3.2662': attribute type 27 has an invalid length.
[  174.574408][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2666'.
[  174.594874][T10768] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.630269][T10768] netlink: '+}[@': attribute type 2 has an invalid length.
[  174.698859][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2670'.
[  174.725506][T10787] xt_hashlimit: max too large, truncated to 1048576
[  174.737380][T10789] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2673'.
[  174.769316][T10768] macsec1: entered promiscuous mode
[  174.774645][T10768] bridge0: entered promiscuous mode
[  174.796865][T10768] bridge0: port 3(macsec1) entered blocking state
[  174.803630][T10768] bridge0: port 3(macsec1) entered disabled state
[  174.824585][T10768] macsec1: entered allmulticast mode
[  174.830100][T10768] bridge0: entered allmulticast mode
[  174.838118][T10768] macsec1: left allmulticast mode
[  174.843284][T10768] bridge0: left allmulticast mode
[  174.850384][T10768] bridge0: left promiscuous mode
[  174.857869][T10782] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2673'.
[  174.911132][T10799] binfmt_misc: register: failed to install interpreter file ./file2
[  174.973314][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'.
[  175.341867][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2689'.
[  175.812127][   T29] kauditd_printk_skb: 702 callbacks suppressed
[  175.812141][   T29] audit: type=1326 audit(1753579303.026:22300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  175.963375][T10839] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  176.030171][T10839] SELinux: failed to load policy
[  176.045698][   T29] audit: type=1326 audit(1753579303.099:22301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.069345][   T29] audit: type=1326 audit(1753579303.120:22302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.093034][   T29] audit: type=1326 audit(1753579303.120:22303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.116750][   T29] audit: type=1326 audit(1753579303.120:22304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.140398][   T29] audit: type=1326 audit(1753579303.120:22305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.164236][   T29] audit: type=1326 audit(1753579303.120:22306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.187917][   T29] audit: type=1326 audit(1753579303.120:22307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.211609][   T29] audit: type=1326 audit(1753579303.120:22308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.235283][   T29] audit: type=1326 audit(1753579303.120:22309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  176.323871][T10844] xt_hashlimit: max too large, truncated to 1048576
[  176.492453][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'.
[  176.796529][T10869] lo speed is unknown, defaulting to 1000
[  177.033344][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'.
[  177.255577][T10872] lo speed is unknown, defaulting to 1000
[  177.461548][T10872] chnl_net:caif_netlink_parms(): no params data found
[  177.565097][T10872] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.572342][T10872] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.580149][T10872] bridge_slave_0: entered allmulticast mode
[  177.586777][T10872] bridge_slave_0: entered promiscuous mode
[  177.596883][T10929] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  177.624848][T10872] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.632076][T10872] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.647051][T10872] bridge_slave_1: entered allmulticast mode
[  177.655285][T10872] bridge_slave_1: entered promiscuous mode
[  177.692368][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.704119][ T4612] bridge_slave_1: left allmulticast mode
[  177.709836][ T4612] bridge_slave_1: left promiscuous mode
[  177.715650][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.738652][ T4612] bridge_slave_0: left allmulticast mode
[  177.744410][ T4612] bridge_slave_0: left promiscuous mode
[  177.750160][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.857058][ T4612] bond0 (unregistering): left promiscuous mode
[  177.863308][ T4612] bond_slave_0: left promiscuous mode
[  177.868903][ T4612] bond_slave_1: left promiscuous mode
[  177.874630][ T4612] dummy0: left promiscuous mode
[  177.881351][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.890083][ T4612] bond_slave_0: left allmulticast mode
[  177.896231][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.905210][ T4612] bond_slave_1: left allmulticast mode
[  177.911425][ T4612] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  177.919941][ T4612] dummy0: left allmulticast mode
[  177.925722][ T4612] bond0 (unregistering): Released all slaves
[  177.934734][ T4612] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  177.943250][ T4612] wireguard0: left promiscuous mode
[  177.948827][ T4612] bond1 (unregistering): Released all slaves
[  177.957562][ T4612] bond2 (unregistering): Released all slaves
[  177.967564][ T4612] bond3 (unregistering): (slave veth3): Releasing active interface
[  177.976042][ T4612] batadv1: entered promiscuous mode
[  177.984892][ T4612] bond3 (unregistering): (slave batadv1): Releasing active interface
[  177.993977][ T4612] bond3 (unregistering): Released all slaves
[  178.002511][ T4612] bond4 (unregistering): Released all slaves
[  178.011251][ T4612] bond5 (unregistering): Released all slaves
[  178.020918][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.076757][T10872] team0: Port device team_slave_0 added
[  178.083662][T10872] team0: Port device team_slave_1 added
[  178.186450][ T4612] hsr_slave_0: left promiscuous mode
[  178.194956][ T4612] hsr_slave_1: left promiscuous mode
[  178.200965][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.212673][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.241929][T10963] netlink: 'syz.4.2733': attribute type 27 has an invalid length.
[  178.276796][ T4612] team0 (unregistering): Port device team_slave_1 removed
[  178.290604][ T4612] team0 (unregistering): Port device team_slave_0 removed
[  178.347086][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.354223][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.380290][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.394216][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.401407][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.427592][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.549556][T10963] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.558616][T10963] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.567741][T10963] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.576800][T10963] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.591324][T10963] gretap1: left promiscuous mode
[  178.596623][T10963] bond1: left promiscuous mode
[  178.660346][T10872] hsr_slave_0: entered promiscuous mode
[  178.668802][T10872] hsr_slave_1: entered promiscuous mode
[  178.680462][T10872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.690034][T10872] Cannot create hsr debugfs directory
[  178.805572][T10995] netlink: 'syz.3.2746': attribute type 1 has an invalid length.
[  178.837122][T10998] SET target dimension over the limit!
[  178.888880][T11007] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.913796][T11007] netlink: '+}[@': attribute type 2 has an invalid length.
[  178.964630][T11007] macsec1: entered promiscuous mode
[  178.970063][T11007] bridge0: entered promiscuous mode
[  178.976862][T11007] bridge0: port 3(macsec1) entered blocking state
[  178.983511][T11007] bridge0: port 3(macsec1) entered disabled state
[  178.990394][T11007] macsec1: entered allmulticast mode
[  178.995797][T11007] bridge0: entered allmulticast mode
[  179.001926][T11007] macsec1: left allmulticast mode
[  179.007103][T11007] bridge0: left allmulticast mode
[  179.012917][T11007] bridge0: left promiscuous mode
[  179.020514][T11014] __nla_validate_parse: 5 callbacks suppressed
[  179.020532][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2754'.
[  179.041835][ T4612] IPVS: stop unused estimator thread 0...
[  179.122420][T11029] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2760'.
[  179.136605][T11029] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2760'.
[  179.152679][T11034] block device autoloading is deprecated and will be removed.
[  179.164009][T11034] 9pnet_fd: Insufficient options for proto=fd
[  179.207886][T10872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  179.217457][T10872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  179.228049][T10872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  179.238006][T10872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  179.288016][T11055] xt_CT: You must specify a L4 protocol and not use inversions on it
[  179.308017][T11055] netlink: '+}[@': attribute type 2 has an invalid length.
[  179.308089][T10872] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.325757][T10872] 8021q: adding VLAN 0 to HW filter on device team0
[  179.338233][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.345506][ T4612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.359646][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.366796][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.402400][T11055] macsec1: entered promiscuous mode
[  179.407741][T11055] bridge0: entered promiscuous mode
[  179.413624][T11055] bridge0: port 1(macsec1) entered blocking state
[  179.420362][T11055] bridge0: port 1(macsec1) entered disabled state
[  179.427765][T11055] macsec1: entered allmulticast mode
[  179.433101][T11055] bridge0: entered allmulticast mode
[  179.439621][T11055] macsec1: left allmulticast mode
[  179.444771][T11055] bridge0: left allmulticast mode
[  179.457183][T11055] bridge0: left promiscuous mode
[  179.503649][T11072] xt_hashlimit: max too large, truncated to 1048576
[  179.508521][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.582040][T11075] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2773'.
[  179.592698][T11075] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2773'.
[  179.605822][T10872] veth0_vlan: entered promiscuous mode
[  179.621595][T10872] veth1_vlan: entered promiscuous mode
[  179.641006][T10872] veth0_macvtap: entered promiscuous mode
[  179.648956][T10872] veth1_macvtap: entered promiscuous mode
[  179.660535][T10872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.671740][T10872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.680518][T10872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.689319][T10872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.698117][T10872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.706920][T10872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.719034][T11088] xt_hashlimit: max too large, truncated to 1048576
[  179.752506][T11092] netlink: 'syz.3.2777': attribute type 27 has an invalid length.
[  179.894421][T11107] xt_CT: You must specify a L4 protocol and not use inversions on it
[  179.905073][T11107] netlink: '+}[@': attribute type 2 has an invalid length.
[  179.934648][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  179.942281][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  179.953279][T11110] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2784'.
[  179.968737][T11110] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2784'.
[  179.984726][T11111] lo speed is unknown, defaulting to 1000
[  179.991079][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  179.998723][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.006429][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.010679][T11107] macsec1: entered promiscuous mode
[  180.013891][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.013922][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.019161][T11107] bridge0: entered promiscuous mode
[  180.021413][T11107] bridge0: port 1(macsec1) entered blocking state
[  180.026670][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.026736][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.034140][T11107] bridge0: port 1(macsec1) entered disabled state
[  180.039324][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.052639][T11107] macsec1: entered allmulticast mode
[  180.053145][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.053204][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.060696][T11107] bridge0: entered allmulticast mode
[  180.101540][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.109057][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.109337][T11107] macsec1: left allmulticast mode
[  180.116476][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.116507][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.116535][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.121762][T11107] bridge0: left allmulticast mode
[  180.128984][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.156565][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.164182][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.171630][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.179145][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.186561][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.194022][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.201491][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.208902][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.216313][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  180.225079][ T3407] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  180.235250][T11107] bridge0: left promiscuous mode
[  180.304833][T11124] xt_hashlimit: max too large, truncated to 1048576
[  180.552823][T11135] xt_hashlimit: max too large, truncated to 1048576
[  180.586049][   T29] kauditd_printk_skb: 1348 callbacks suppressed
[  180.586062][   T29] audit: type=1326 audit(1753579308.037:23658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7bc2a5967 code=0x7ffc0000
[  180.616785][   T29] audit: type=1326 audit(1753579308.037:23659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7bc24ab89 code=0x7ffc0000
[  180.640615][   T29] audit: type=1326 audit(1753579308.037:23660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe7bc2ae9a9 code=0x7ffc0000
[  180.664389][   T29] audit: type=1326 audit(1753579308.079:23661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7bc2a5967 code=0x7ffc0000
[  180.688021][   T29] audit: type=1326 audit(1753579308.079:23662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7bc24ab89 code=0x7ffc0000
[  180.711613][   T29] audit: type=1326 audit(1753579308.079:23663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe7bc2ae9a9 code=0x7ffc0000
[  180.735161][   T29] audit: type=1326 audit(1753579308.100:23664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7bc2a5967 code=0x7ffc0000
[  180.758691][   T29] audit: type=1326 audit(1753579308.100:23665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7bc24ab89 code=0x7ffc0000
[  180.782389][   T29] audit: type=1326 audit(1753579308.100:23666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe7bc2ae9a9 code=0x7ffc0000
[  180.969352][T11153] xt_CT: You must specify a L4 protocol and not use inversions on it
[  180.980173][T11153] netlink: '+}[@': attribute type 2 has an invalid length.
[  181.035743][T11153] bridge0: entered promiscuous mode
[  181.041363][T11153] macsec1: entered promiscuous mode
[  181.049516][T11153] bridge0: port 3(macsec1) entered blocking state
[  181.056217][T11153] bridge0: port 3(macsec1) entered disabled state
[  181.063154][T11153] macsec1: entered allmulticast mode
[  181.068563][T11153] bridge0: entered allmulticast mode
[  181.076060][T11153] macsec1: left allmulticast mode
[  181.081180][T11153] bridge0: left allmulticast mode
[  181.090611][T11153] bridge0: left promiscuous mode
[  181.107615][   T29] audit: type=1400 audit(1753579308.584:23667): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  181.222632][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2798'.
[  181.313999][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'.
[  181.421201][T11185] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2807'.
[  182.021978][T11197] lo speed is unknown, defaulting to 1000
[  182.104790][ T4627] bridge_slave_1: left allmulticast mode
[  182.110533][ T4627] bridge_slave_1: left promiscuous mode
[  182.116462][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.164039][ T4627] bridge_slave_0: left allmulticast mode
[  182.169836][ T4627] bridge_slave_0: left promiscuous mode
[  182.175512][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.277568][ T4627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.315180][ T4627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.328524][T11225] xt_CT: You must specify a L4 protocol and not use inversions on it
[  182.340739][ T4627] bond0 (unregistering): Released all slaves
[  182.365900][T11225] netlink: '+}[@': attribute type 2 has an invalid length.
[  182.389009][ T4627] IPVS: stopping backup sync thread 10732 ...
[  182.421060][ T4627] hsr_slave_0: left promiscuous mode
[  182.440096][ T4627] hsr_slave_1: left promiscuous mode
[  182.445852][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.454177][T11233] FAULT_INJECTION: forcing a failure.
[  182.454177][T11233] name failslab, interval 1, probability 0, space 0, times 0
[  182.466948][T11233] CPU: 0 UID: 0 PID: 11233 Comm: syz.0.2824 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  182.467044][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.467060][T11233] Call Trace:
[  182.467069][T11233]  <TASK>
[  182.467078][T11233]  __dump_stack+0x1d/0x30
[  182.467106][T11233]  dump_stack_lvl+0xe8/0x140
[  182.467241][T11233]  dump_stack+0x15/0x1b
[  182.467262][T11233]  should_fail_ex+0x265/0x280
[  182.467301][T11233]  should_failslab+0x8c/0xb0
[  182.467328][T11233]  __kmalloc_noprof+0xa5/0x3e0
[  182.467386][T11233]  ? bpf_test_init+0xa9/0x160
[  182.467437][T11233]  bpf_test_init+0xa9/0x160
[  182.467477][T11233]  bpf_prog_test_run_xdp+0x274/0x910
[  182.467584][T11233]  ? kstrtouint+0x76/0xc0
[  182.467625][T11233]  ? __rcu_read_unlock+0x4f/0x70
[  182.467656][T11233]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  182.467823][T11233]  bpf_prog_test_run+0x227/0x390
[  182.467863][T11233]  __sys_bpf+0x3dc/0x790
[  182.467913][T11233]  __x64_sys_bpf+0x41/0x50
[  182.467943][T11233]  x64_sys_call+0x2478/0x2fb0
[  182.467968][T11233]  do_syscall_64+0xd2/0x200
[  182.468075][T11233]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  182.468117][T11233]  ? clear_bhb_loop+0x40/0x90
[  182.468141][T11233]  ? clear_bhb_loop+0x40/0x90
[  182.468167][T11233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.468192][T11233] RIP: 0033:0x7fb00b17e9a9
[  182.468259][T11233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.468304][T11233] RSP: 002b:00007fb0097e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  182.468326][T11233] RAX: ffffffffffffffda RBX: 00007fb00b3a5fa0 RCX: 00007fb00b17e9a9
[  182.468386][T11233] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  182.468408][T11233] RBP: 00007fb0097e7090 R08: 0000000000000000 R09: 0000000000000000
[  182.468422][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.468440][T11233] R13: 0000000000000000 R14: 00007fb00b3a5fa0 R15: 00007ffd5acc83c8
[  182.468461][T11233]  </TASK>
[  182.469441][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.735450][ T4627] team0 (unregistering): Port device team_slave_1 removed
[  182.747368][ T4627] team0 (unregistering): Port device team_slave_0 removed
[  182.788974][T11234] bridge0: entered promiscuous mode
[  182.794337][T11234] macsec1: entered promiscuous mode
[  182.801536][T11234] bridge0: port 3(macsec1) entered blocking state
[  182.808362][T11234] bridge0: port 3(macsec1) entered disabled state
[  182.815696][T11234] macsec1: entered allmulticast mode
[  182.821066][T11234] bridge0: entered allmulticast mode
[  182.827452][T11234] macsec1: left allmulticast mode
[  182.832535][T11234] bridge0: left allmulticast mode
[  182.838369][T11234] bridge0: left promiscuous mode
[  182.851667][T11197] chnl_net:caif_netlink_parms(): no params data found
[  182.925286][T11197] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.932457][T11197] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.939944][T11197] bridge_slave_0: entered allmulticast mode
[  182.946741][T11197] bridge_slave_0: entered promiscuous mode
[  182.953844][T11197] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.961179][T11197] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.968488][T11197] bridge_slave_1: entered allmulticast mode
[  182.975568][T11197] bridge_slave_1: entered promiscuous mode
[  183.003764][T11197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.014679][T11197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.030436][T11268] 8021q: adding VLAN 0 to HW filter on device bond3
[  183.059710][T11197] team0: Port device team_slave_0 added
[  183.069296][T11268] bond3 (unregistering): Released all slaves
[  183.082890][T11197] team0: Port device team_slave_1 added
[  183.105035][T11197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.112268][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.138385][T11197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.149838][T11197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.156867][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.183098][T11197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.222012][T11197] hsr_slave_0: entered promiscuous mode
[  183.228898][T11197] hsr_slave_1: entered promiscuous mode
[  183.345304][T11288] xt_hashlimit: max too large, truncated to 1048576
[  183.366919][T11289] xt_hashlimit: max too large, truncated to 1048576
[  183.563527][T11197] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  183.580882][T11197] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  183.601777][T11197] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  183.612365][T11301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11301 comm=syz.4.2847
[  183.665147][T11303] netlink: 'syz.0.2848': attribute type 1 has an invalid length.
[  183.682254][T11197] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  183.724329][T11197] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.731586][T11197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.738947][T11197] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.746071][T11197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.764350][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.789291][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.803963][T11312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11312 comm=syz.4.2847
[  183.844509][T11197] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.861645][T11197] 8021q: adding VLAN 0 to HW filter on device team0
[  183.871723][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.879064][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.903744][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.910912][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.930366][T11197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.940898][T11197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.013123][T11339] xt_hashlimit: max too large, truncated to 1048576
[  184.022710][T11197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.116384][T11355] __nla_validate_parse: 11 callbacks suppressed
[  184.116403][T11355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2863'.
[  184.144482][T11355] 9pnet: Could not find request transport: tcpÿÿÿ
[  184.167324][T11197] veth0_vlan: entered promiscuous mode
[  184.177931][T11197] veth1_vlan: entered promiscuous mode
[  184.201002][T11197] veth0_macvtap: entered promiscuous mode
[  184.209232][T11197] veth1_macvtap: entered promiscuous mode
[  184.223530][T11197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.241065][T11197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.262798][T11197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.272279][T11197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.281053][T11197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.289898][T11197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.311074][T11365] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2867'.
[  184.321307][T11365] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2867'.
[  184.500726][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'.
[  184.650271][T11384] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2872'.
[  184.672633][ T1046] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  184.684729][ T1046] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  184.684986][T11387] netlink: 'syz.3.2874': attribute type 27 has an invalid length.
[  184.730192][T11387] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.737446][T11387] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.764049][T11400] sctp: [Deprecated]: syz.4.2877 (pid 11400) Use of int in max_burst socket option.
[  184.764049][T11400] Use struct sctp_assoc_value instead
[  184.787778][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.799659][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.835116][T11387] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.844458][T11387] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.853521][T11387] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.862595][T11387] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.948719][T11410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2882'.
[  184.949771][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2880'.
[  185.013329][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'.
[  185.100301][T11429] xt_hashlimit: max too large, truncated to 1048576
[  185.254369][T11440] netlink: 'syz.2.2892': attribute type 27 has an invalid length.
[  185.305349][T11440] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.312677][T11440] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.349631][T11446] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2893'.
[  185.359988][   T29] kauditd_printk_skb: 1013 callbacks suppressed
[  185.360003][   T29] audit: type=1400 audit(1753579313.059:24679): avc:  denied  { append } for  pid=11439 comm="syz.0.2893" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  185.410768][T11440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.427300][T11440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.474380][T11440] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.483534][T11440] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.492740][T11440] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.501689][T11440] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.518501][   T29] audit: type=1326 audit(1753579313.228:24680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  185.542195][   T29] audit: type=1326 audit(1753579313.228:24681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  185.750274][T11453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2897'.
[  186.185818][   T29] audit: type=1326 audit(1753579313.921:24682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.217531][   T29] audit: type=1326 audit(1753579313.952:24683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.241771][   T29] audit: type=1326 audit(1753579313.952:24684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.265671][   T29] audit: type=1326 audit(1753579313.952:24685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.289466][   T29] audit: type=1326 audit(1753579313.952:24686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.313086][   T29] audit: type=1326 audit(1753579313.952:24687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.337692][   T29] audit: type=1326 audit(1753579313.952:24688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.5.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  186.851228][ T6603] syz_tun (unregistering): left promiscuous mode
[  186.957349][ T8189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.015281][ T8189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.117362][ T8189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.189717][T11546] SELinux: syz.5.2932 (11546) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  187.216456][ T8189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.266076][T11553] $Hÿ: renamed from bond0 (while UP)
[  187.283020][T11514] chnl_net:caif_netlink_parms(): no params data found
[  187.339995][ T8189] bridge_slave_1: left allmulticast mode
[  187.345758][ T8189] bridge_slave_1: left promiscuous mode
[  187.351507][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.359883][ T8189] bridge_slave_0: left allmulticast mode
[  187.365628][ T8189] bridge_slave_0: left promiscuous mode
[  187.371349][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.482773][ T8189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.521796][ T8189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.561066][ T8189] bond0 (unregistering): Released all slaves
[  187.588542][ T8189] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  187.619138][ T8189] bond1 (unregistering): (slave wireguard1): Releasing backup interface
[  187.639639][ T8189] bond1 (unregistering): Released all slaves
[  187.658447][ T8189] bond2 (unregistering): (slave wireguard2): Releasing backup interface
[  187.671041][ T8189] bond2 (unregistering): Released all slaves
[  187.693232][ T8189] bond3 (unregistering): (slave wireguard3): Releasing backup interface
[  187.710429][ T8189] bond3 (unregistering): Released all slaves
[  187.727805][ T8189] bond4 (unregistering): Released all slaves
[  187.740031][ T8189] bond5 (unregistering): Released all slaves
[  187.750595][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.757918][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.767821][T11514] bridge_slave_0: entered allmulticast mode
[  187.775753][T11514] bridge_slave_0: entered promiscuous mode
[  187.811634][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.818770][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.852317][ T8189] IPVS: stopping backup sync thread 9954 ...
[  187.891092][T11514] bridge_slave_1: entered allmulticast mode
[  187.920418][T11514] bridge_slave_1: entered promiscuous mode
[  187.945578][ T8189] batadv_slave_0: left promiscuous mode
[  187.961192][ T8189] hsr_slave_0: left promiscuous mode
[  187.982789][ T8189] hsr_slave_1: left promiscuous mode
[  188.000394][T11597] 9pnet_fd: Insufficient options for proto=fd
[  188.132550][ T8189] team0 (unregistering): Port device team_slave_1 removed
[  188.142627][ T8189] team0 (unregistering): Port device team_slave_0 removed
[  188.206196][T11611] netlink: 'syz.3.2960': attribute type 27 has an invalid length.
[  188.219278][T11514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.235832][T11514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.249438][T11613] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.260411][T11613] netlink: '+}[@': attribute type 2 has an invalid length.
[  188.276442][T11514] team0: Port device team_slave_0 added
[  188.283455][T11514] team0: Port device team_slave_1 added
[  188.303577][T11514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.310717][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.336758][T11514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.348635][T11514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.355658][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.381767][T11514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.407813][T11613] macsec1: entered promiscuous mode
[  188.413127][T11613] bridge0: entered promiscuous mode
[  188.418768][T11613] bridge0: port 3(macsec1) entered blocking state
[  188.425318][T11613] bridge0: port 3(macsec1) entered disabled state
[  188.432061][T11613] macsec1: entered allmulticast mode
[  188.437375][T11613] bridge0: entered allmulticast mode
[  188.443486][T11613] macsec1: left allmulticast mode
[  188.448569][T11613] bridge0: left allmulticast mode
[  188.454331][T11613] bridge0: left promiscuous mode
[  188.477203][T11514] hsr_slave_0: entered promiscuous mode
[  188.483552][T11514] hsr_slave_1: entered promiscuous mode
[  188.491006][T11514] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.498774][T11514] Cannot create hsr debugfs directory
[  188.861551][T11514] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.965028][T11514] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  189.045237][T11514] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  189.181127][T11514] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  189.378155][T11658] 9pnet_fd: Insufficient options for proto=fd
[  189.452169][T11514] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.509028][T11514] 8021q: adding VLAN 0 to HW filter on device team0
[  189.724350][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.731663][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.780839][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.788002][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.798317][T11670] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  189.804885][T11670] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  189.812494][T11670] vhci_hcd vhci_hcd.0: Device attached
[  189.855639][T11671] vhci_hcd: connection closed
[  189.856255][ T4590] vhci_hcd: stop threads
[  189.865462][ T4590] vhci_hcd: release socket
[  189.870011][ T4590] vhci_hcd: disconnect device
[  189.884367][T11514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.894951][T11514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.010214][T11514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.114515][T11514] veth0_vlan: entered promiscuous mode
[  190.129718][T11514] veth1_vlan: entered promiscuous mode
[  190.156185][T11514] veth0_macvtap: entered promiscuous mode
[  190.164217][T11514] veth1_macvtap: entered promiscuous mode
[  190.195622][T11514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.207625][T11514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.219028][T11514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.227830][T11514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.236638][T11514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.245435][T11514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.356645][   T29] kauditd_printk_skb: 314 callbacks suppressed
[  190.356665][   T29] audit: type=1326 audit(1753579318.302:25003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.365494][T11716] netlink: 'syz.0.2994': attribute type 27 has an invalid length.
[  190.396524][   T29] audit: type=1326 audit(1753579318.302:25004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.420224][   T29] audit: type=1326 audit(1753579318.302:25005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.443926][   T29] audit: type=1326 audit(1753579318.302:25006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.467606][   T29] audit: type=1326 audit(1753579318.302:25007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.491373][   T29] audit: type=1326 audit(1753579318.302:25008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.515292][   T29] audit: type=1326 audit(1753579318.302:25009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.539152][   T29] audit: type=1326 audit(1753579318.302:25010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.562926][   T29] audit: type=1326 audit(1753579318.302:25011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.586923][   T29] audit: type=1326 audit(1753579318.302:25012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.0.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfbe31e9a9 code=0x7ffc0000
[  190.627718][T11716] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.633083][T11720] __nla_validate_parse: 8 callbacks suppressed
[  190.633107][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2995'.
[  190.635078][T11716] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.727025][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.738402][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.764274][T11716] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.773471][T11716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.782539][T11716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.791490][T11716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.803498][T11726] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2997'.
[  190.902078][T11736] netlink: 'syz.2.3002': attribute type 27 has an invalid length.
[  190.957069][T11734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3001'.
[  191.002557][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'.
[  191.045271][T11752] xt_hashlimit: max too large, truncated to 1048576
[  191.121996][T11761] netlink: 'syz.0.3012': attribute type 27 has an invalid length.
[  191.213341][T11771] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3015'.
[  191.231592][T11772] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.255727][T11772] netlink: '+}[@': attribute type 2 has an invalid length.
[  191.325456][T11772] macsec1: entered promiscuous mode
[  191.330819][T11772] bridge0: entered promiscuous mode
[  191.354656][T11772] bridge0: port 1(macsec1) entered blocking state
[  191.361239][T11772] bridge0: port 1(macsec1) entered disabled state
[  191.379793][T11772] macsec1: entered allmulticast mode
[  191.385181][T11772] bridge0: entered allmulticast mode
[  191.396781][T11772] macsec1: left allmulticast mode
[  191.401932][T11772] bridge0: left allmulticast mode
[  191.408773][T11772] bridge0: left promiscuous mode
[  191.437503][T11788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3022'.
[  191.500665][T11795] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.527638][T11795] netlink: '+}[@': attribute type 2 has an invalid length.
[  191.635076][T11795] macsec1: entered promiscuous mode
[  191.640448][T11795] bridge0: entered promiscuous mode
[  191.654096][T11795] bridge0: port 1(macsec1) entered blocking state
[  191.660698][T11795] bridge0: port 1(macsec1) entered disabled state
[  191.675182][T11795] macsec1: entered allmulticast mode
[  191.680605][T11795] bridge0: entered allmulticast mode
[  191.697762][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3027'.
[  191.710702][T11795] macsec1: left allmulticast mode
[  191.715881][T11795] bridge0: left allmulticast mode
[  191.731350][T11795] bridge0: left promiscuous mode
[  192.069415][T11832] xt_hashlimit: max too large, truncated to 1048576
[  192.121834][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3039'.
[  193.345734][T11866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11866 comm=syz.0.3051
[  193.597698][T11889] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3060'.
[  193.628907][T11889] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3060'.
[  194.578260][T11969] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.625655][T11969] netlink: '+}[@': attribute type 2 has an invalid length.
[  194.729588][T11969] macsec1: entered promiscuous mode
[  194.734975][T11969] bridge0: entered promiscuous mode
[  194.749523][T11969] bridge0: port 3(macsec1) entered blocking state
[  194.756151][T11969] bridge0: port 3(macsec1) entered disabled state
[  194.764508][T11969] macsec1: entered allmulticast mode
[  194.769905][T11969] bridge0: entered allmulticast mode
[  194.777793][T11969] macsec1: left allmulticast mode
[  194.782973][T11969] bridge0: left allmulticast mode
[  194.809583][T11969] bridge0: left promiscuous mode
[  195.015140][T12008] xt_hashlimit: max too large, truncated to 1048576
[  195.032580][T12009] netlink: 'syz.2.3114': attribute type 27 has an invalid length.
[  195.121041][T12021] xt_hashlimit: max too large, truncated to 1048576
[  195.122298][T12022] xt_CT: You must specify a L4 protocol and not use inversions on it
[  195.159060][T12022] netlink: '+}[@': attribute type 2 has an invalid length.
[  195.263493][T12022] macsec1: entered promiscuous mode
[  195.268810][T12022] bridge0: entered promiscuous mode
[  195.277236][T12022] bridge0: port 1(macsec1) entered blocking state
[  195.283728][T12022] bridge0: port 1(macsec1) entered disabled state
[  195.360852][T12022] macsec1: entered allmulticast mode
[  195.366290][T12022] bridge0: entered allmulticast mode
[  195.380306][   T29] kauditd_printk_skb: 1387 callbacks suppressed
[  195.380324][   T29] audit: type=1326 audit(1753579323.586:26400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.411562][T12022] macsec1: left allmulticast mode
[  195.416671][T12022] bridge0: left allmulticast mode
[  195.419595][T12042] netlink: 'syz.3.3126': attribute type 27 has an invalid length.
[  195.434670][   T29] audit: type=1326 audit(1753579323.617:26401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.458338][   T29] audit: type=1326 audit(1753579323.617:26402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.481974][   T29] audit: type=1326 audit(1753579323.617:26403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  195.505623][   T29] audit: type=1326 audit(1753579323.617:26404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  195.529348][   T29] audit: type=1326 audit(1753579323.617:26405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.552991][   T29] audit: type=1326 audit(1753579323.617:26406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.576584][   T29] audit: type=1326 audit(1753579323.617:26407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.600295][   T29] audit: type=1326 audit(1753579323.617:26408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.623895][   T29] audit: type=1326 audit(1753579323.617:26409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  195.725329][T12022] bridge0: left promiscuous mode
[  195.810303][T12056] __nla_validate_parse: 7 callbacks suppressed
[  195.810339][T12056] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3130'.
[  195.826099][T12056] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3130'.
[  195.893460][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3135'.
[  195.921488][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3137'.
[  196.020325][T12080] netlink: 'syz.4.3141': attribute type 27 has an invalid length.
[  196.050560][T12082] xt_CT: You must specify a L4 protocol and not use inversions on it
[  196.061130][T12082] netlink: '+}[@': attribute type 2 has an invalid length.
[  196.113124][T12082] macsec1: entered promiscuous mode
[  196.118396][T12082] bridge0: entered promiscuous mode
[  196.125838][T12082] bridge0: port 1(macsec1) entered blocking state
[  196.132372][T12082] bridge0: port 1(macsec1) entered disabled state
[  196.139383][T12082] macsec1: entered allmulticast mode
[  196.144775][T12082] bridge0: entered allmulticast mode
[  196.152434][T12082] macsec1: left allmulticast mode
[  196.157589][T12082] bridge0: left allmulticast mode
[  196.164229][T12082] bridge0: left promiscuous mode
[  196.232469][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3143'.
[  196.316423][T12089] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3144'.
[  196.362325][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3149'.
[  196.450710][T12108] xt_CT: You must specify a L4 protocol and not use inversions on it
[  196.461198][T12108] netlink: '+}[@': attribute type 2 has an invalid length.
[  196.508247][T12108] bridge0: entered promiscuous mode
[  196.513624][T12108] macsec1: entered promiscuous mode
[  196.519862][T12108] bridge0: port 3(macsec1) entered blocking state
[  196.526429][T12108] bridge0: port 3(macsec1) entered disabled state
[  196.527453][T12114] xt_hashlimit: max too large, truncated to 1048576
[  196.533029][T12108] macsec1: entered allmulticast mode
[  196.545054][T12108] bridge0: entered allmulticast mode
[  196.554996][T12108] macsec1: left allmulticast mode
[  196.560127][T12108] bridge0: left allmulticast mode
[  196.565997][T12108] bridge0: left promiscuous mode
[  196.711451][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3161'.
[  196.807769][T12134] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3163'.
[  196.829873][T12134] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3163'.
[  196.886946][T12144] xt_CT: You must specify a L4 protocol and not use inversions on it
[  196.914489][T12144] netlink: '+}[@': attribute type 2 has an invalid length.
[  196.981703][T12144] bridge0: entered promiscuous mode
[  196.989324][T12144] macsec1: entered promiscuous mode
[  196.996255][T12144] bridge0: port 3(macsec1) entered blocking state
[  197.003010][T12144] bridge0: port 3(macsec1) entered disabled state
[  197.010380][T12144] macsec1: entered allmulticast mode
[  197.015723][T12144] bridge0: entered allmulticast mode
[  197.022856][T12144] macsec1: left allmulticast mode
[  197.024754][T12162] xt_hashlimit: max too large, truncated to 1048576
[  197.028051][T12144] bridge0: left allmulticast mode
[  197.040481][T12144] bridge0: left promiscuous mode
[  197.443612][T12198] $Hÿ: renamed from bond0
[  197.451560][T12198] $Hÿ: entered promiscuous mode
[  197.456746][T12198] bond_slave_0: entered promiscuous mode
[  197.462579][T12198] bond_slave_1: entered promiscuous mode
[  197.633686][T12221] xt_hashlimit: max too large, truncated to 1048576
[  197.864543][T12250] $Hÿ: renamed from bond0
[  197.903504][T12250] $Hÿ: entered promiscuous mode
[  197.908596][T12250] bond_slave_0: entered promiscuous mode
[  197.914370][T12250] bond_slave_1: entered promiscuous mode
[  198.351953][T12290] $Hÿ: renamed from bond0
[  198.358318][T12290] $Hÿ: entered promiscuous mode
[  198.363491][T12290] bond_slave_0: entered promiscuous mode
[  198.369266][T12290] bond_slave_1: entered promiscuous mode
[  200.485030][   T29] kauditd_printk_skb: 898 callbacks suppressed
[  200.485049][   T29] audit: type=1326 audit(1753579328.943:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.534563][T12443] netlink: 'syz.5.3293': attribute type 27 has an invalid length.
[  200.577269][   T29] audit: type=1326 audit(1753579328.943:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.600956][   T29] audit: type=1326 audit(1753579328.985:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.624729][   T29] audit: type=1326 audit(1753579328.985:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.648793][   T29] audit: type=1326 audit(1753579328.985:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.672421][   T29] audit: type=1326 audit(1753579328.985:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.696217][   T29] audit: type=1326 audit(1753579328.985:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.719931][   T29] audit: type=1326 audit(1753579328.985:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.743549][   T29] audit: type=1326 audit(1753579328.985:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.767185][   T29] audit: type=1326 audit(1753579328.985:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  200.841185][T12443] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.848502][T12443] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.902990][T12455] __nla_validate_parse: 23 callbacks suppressed
[  200.903011][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3298'.
[  200.977502][T12460] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3299'.
[  201.030836][T12443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.051589][T12443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.116507][T12443] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.125596][T12443] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.134557][T12443] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.143486][T12443] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.167866][T12476] xt_hashlimit: max too large, truncated to 1048576
[  201.180162][T12443] $Hÿ: left promiscuous mode
[  201.185115][T12443] bond_slave_0: left promiscuous mode
[  201.190742][T12443] bond_slave_1: left promiscuous mode
[  201.206046][T12443] macvlan2: left promiscuous mode
[  201.365843][T12488] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3311'.
[  201.438259][T12491] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3312'.
[  201.460718][T12491] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3312'.
[  201.644970][T12517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3325'.
[  201.742480][T12526] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3328'.
[  201.751978][T12526] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3328'.
[  201.797976][T12527] xt_hashlimit: max too large, truncated to 1048576
[  201.878469][T12530] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3329'.
[  201.920929][T12530] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3329'.
[  202.505691][T12547] chnl_net:caif_netlink_parms(): no params data found
[  202.696207][T12547] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.703367][T12547] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.771516][T12547] bridge_slave_0: entered allmulticast mode
[  202.806710][T12547] bridge_slave_0: entered promiscuous mode
[  202.854311][T12547] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.861475][T12547] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.901475][T12547] bridge_slave_1: entered allmulticast mode
[  202.908047][T12547] bridge_slave_1: entered promiscuous mode
[  202.943346][T12547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.977093][T12547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.020430][T12547] team0: Port device team_slave_0 added
[  203.042739][T12547] team0: Port device team_slave_1 added
[  203.113049][T12547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.120079][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.146134][T12547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.199070][T12547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.206155][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.232270][T12547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.275206][T12602] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.312354][T12602] netlink: '+}[@': attribute type 2 has an invalid length.
[  203.350584][T12547] hsr_slave_0: entered promiscuous mode
[  203.365599][T12547] hsr_slave_1: entered promiscuous mode
[  203.371762][T12547] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.391276][T12547] Cannot create hsr debugfs directory
[  203.538141][ T8189] bond0 (unregistering): Released all slaves
[  203.547398][ T8189] bond1 (unregistering): Released all slaves
[  203.558769][T12602] macsec1: entered promiscuous mode
[  203.564121][T12602] bridge0: entered promiscuous mode
[  203.569772][T12602] bridge0: port 3(macsec1) entered blocking state
[  203.576294][T12602] bridge0: port 3(macsec1) entered disabled state
[  203.594224][T12602] macsec1: entered allmulticast mode
[  203.599661][T12602] bridge0: entered allmulticast mode
[  203.627145][T12602] macsec1: left allmulticast mode
[  203.632284][T12602] bridge0: left allmulticast mode
[  203.645946][T12602] bridge0: left promiscuous mode
[  203.665948][ T8189] tipc: Left network mode
[  203.687883][ T8189] hsr_slave_0: left promiscuous mode
[  203.727072][ T8189] hsr_slave_1: left promiscuous mode
[  204.276447][T12547] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  204.286261][T12547] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  204.293897][T12634] xt_CT: You must specify a L4 protocol and not use inversions on it
[  204.335770][T12642] netlink: 'syz.2.3366': attribute type 2 has an invalid length.
[  204.336256][T12547] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  204.392980][T12547] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  204.471157][T12634] macsec1: entered promiscuous mode
[  204.476516][T12634] bridge0: entered promiscuous mode
[  204.492910][T12634] bridge0: port 3(macsec1) entered blocking state
[  204.499826][T12634] bridge0: port 3(macsec1) entered disabled state
[  204.507150][T12634] macsec1: entered allmulticast mode
[  204.512525][T12634] bridge0: entered allmulticast mode
[  204.537446][T12634] macsec1: left allmulticast mode
[  204.542565][T12634] bridge0: left allmulticast mode
[  204.733541][T12634] bridge0: left promiscuous mode
[  204.864620][T12547] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.898928][T12547] 8021q: adding VLAN 0 to HW filter on device team0
[  204.951100][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.958286][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.024387][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.031540][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.459896][T12547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.470355][T12547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.664486][T12684] $Hÿ: entered promiscuous mode
[  205.669643][T12684] bond_slave_0: entered promiscuous mode
[  205.675429][T12684] bond_slave_1: entered promiscuous mode
[  205.697997][T12547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.815685][T12694] __nla_validate_parse: 10 callbacks suppressed
[  205.815703][T12694] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3382'.
[  205.941844][   T29] kauditd_printk_skb: 447 callbacks suppressed
[  205.941862][   T29] audit: type=1326 audit(1753579334.678:27765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  205.973554][   T29] audit: type=1326 audit(1753579334.678:27766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  205.997234][   T29] audit: type=1326 audit(1753579334.678:27767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.020916][   T29] audit: type=1326 audit(1753579334.678:27768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.044622][   T29] audit: type=1326 audit(1753579334.678:27769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.105589][T12547] veth0_vlan: entered promiscuous mode
[  206.118415][   T29] audit: type=1326 audit(1753579334.815:27770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.135075][T12547] veth1_vlan: entered promiscuous mode
[  206.142195][   T29] audit: type=1326 audit(1753579334.815:27771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.171231][   T29] audit: type=1326 audit(1753579334.815:27772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.250162][T12547] veth0_macvtap: entered promiscuous mode
[  206.275520][T12704] netlink: 'syz.2.3385': attribute type 27 has an invalid length.
[  206.276587][T12547] veth1_macvtap: entered promiscuous mode
[  206.290917][   T29] audit: type=1326 audit(1753579335.025:27773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.314859][   T29] audit: type=1326 audit(1753579335.025:27774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  206.338945][T12704] $Hÿ: left promiscuous mode
[  206.343780][T12704] bond_slave_0: left promiscuous mode
[  206.349333][T12704] bond_slave_1: left promiscuous mode
[  206.437878][T12547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.469032][T12547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.497356][T12547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.506166][T12547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.515063][T12547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.523949][T12547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.661076][T12723] $Hÿ: entered promiscuous mode
[  206.666288][T12723] bond_slave_0: entered promiscuous mode
[  206.672381][T12723] bond_slave_1: entered promiscuous mode
[  206.861561][T12737] netlink: 'syz.5.3397': attribute type 27 has an invalid length.
[  206.959290][T12737] $Hÿ: left promiscuous mode
[  206.964295][T12737] bond_slave_0: left promiscuous mode
[  206.970057][T12737] bond_slave_1: left promiscuous mode
[  207.615347][T12769] xt_hashlimit: max too large, truncated to 1048576
[  207.862497][T12780] 9pnet: Could not find request transport: t
[  208.410023][T12803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3423'.
[  208.426885][T12815] netlink: 'syz.4.3428': attribute type 27 has an invalid length.
[  208.455489][T12814] 9pnet: Could not find request transport: t
[  208.623386][T12815] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.630697][T12815] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.832054][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.862861][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.970887][T12815] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.979915][T12815] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.988879][T12815] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.997992][T12815] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.770534][T12883] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3451'.
[  209.886816][T12883] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3451'.
[  210.274196][T12887] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3454'.
[  210.326301][T12887] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3454'.
[  210.707338][   T29] kauditd_printk_skb: 830 callbacks suppressed
[  210.707356][   T29] audit: type=1326 audit(1753579339.688:28605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ab1845967 code=0x7ffc0000
[  210.737163][   T29] audit: type=1326 audit(1753579339.688:28606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ab17eab89 code=0x7ffc0000
[  210.925059][   T29] audit: type=1326 audit(1753579339.688:28607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  210.948746][   T29] audit: type=1326 audit(1753579339.699:28608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ab1845967 code=0x7ffc0000
[  210.972253][   T29] audit: type=1326 audit(1753579339.699:28609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ab17eab89 code=0x7ffc0000
[  210.996235][   T29] audit: type=1326 audit(1753579339.699:28610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  211.019859][   T29] audit: type=1326 audit(1753579339.720:28611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ab1845967 code=0x7ffc0000
[  211.043469][   T29] audit: type=1326 audit(1753579339.720:28612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ab17eab89 code=0x7ffc0000
[  211.067009][   T29] audit: type=1326 audit(1753579339.720:28613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1ab184e9a9 code=0x7ffc0000
[  211.090581][   T29] audit: type=1326 audit(1753579339.730:28614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.3.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ab1845967 code=0x7ffc0000
[  211.152103][T12917] netlink: 'syz.2.3461': attribute type 27 has an invalid length.
[  211.226259][T12917] $Hÿ: left promiscuous mode
[  211.231206][T12917] bond_slave_0: left promiscuous mode
[  211.236780][T12917] bond_slave_1: left promiscuous mode
[  211.326836][T12924] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3467'.
[  211.343077][T12924] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3467'.
[  211.595172][T12931] 9pnet_fd: Insufficient options for proto=fd
[  211.876868][T12954] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3479'.
[  212.064974][T12963] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3483'.
[  212.094558][T12963] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3483'.
[  212.164273][T12969] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3485'.
[  212.536955][T12972] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.574228][T12972] netlink: '+}[@': attribute type 2 has an invalid length.
[  212.707346][T12972] macsec1: entered promiscuous mode
[  212.712639][T12972] bridge0: entered promiscuous mode
[  212.719437][T12972] bridge0: port 3(macsec1) entered blocking state
[  212.726008][T12972] bridge0: port 3(macsec1) entered disabled state
[  212.742189][T12972] macsec1: entered allmulticast mode
[  212.747635][T12972] bridge0: entered allmulticast mode
[  212.765935][T12972] macsec1: left allmulticast mode
[  212.771102][T12972] bridge0: left allmulticast mode
[  212.779129][T12972] bridge0: left promiscuous mode
[  212.864115][T12982] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3491'.
[  212.876201][T12982] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3491'.
[  213.072805][T12996] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3497'.
[  213.082160][T12996] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3497'.
[  214.352081][T13061] IPVS: length: 120 != 8
[  215.485033][   T29] kauditd_printk_skb: 366 callbacks suppressed
[  215.485049][   T29] audit: type=1326 audit(1753579344.698:28981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f064b455967 code=0x7ffc0000
[  215.531801][   T29] audit: type=1326 audit(1753579344.698:28982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f064b3fab89 code=0x7ffc0000
[  215.555519][   T29] audit: type=1326 audit(1753579344.698:28983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  215.579058][   T29] audit: type=1326 audit(1753579344.709:28984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f064b455967 code=0x7ffc0000
[  215.602610][   T29] audit: type=1326 audit(1753579344.709:28985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f064b3fab89 code=0x7ffc0000
[  215.626145][   T29] audit: type=1326 audit(1753579344.709:28986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  215.649696][   T29] audit: type=1326 audit(1753579344.709:28987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f064b455967 code=0x7ffc0000
[  215.673229][   T29] audit: type=1326 audit(1753579344.709:28988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f064b3fab89 code=0x7ffc0000
[  215.696839][   T29] audit: type=1326 audit(1753579344.709:28989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  215.720356][   T29] audit: type=1326 audit(1753579344.709:28990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13070 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f064b455967 code=0x7ffc0000
[  216.537396][T13152] __nla_validate_parse: 12 callbacks suppressed
[  216.537481][T13152] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3560'.
[  216.574883][T13152] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3560'.
[  216.768778][T13163] 9pnet_fd: Insufficient options for proto=fd
[  217.290215][T13195] xt_hashlimit: max too large, truncated to 1048576
[  217.316169][T13194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3576'.
[  217.335390][T13199] 9pnet_fd: Insufficient options for proto=fd
[  217.362442][T13194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3576'.
[  217.738330][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3583'.
[  217.960345][T13235] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3590'.
[  217.981668][T13235] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3590'.
[  218.526280][T13244] xt_hashlimit: max too large, truncated to 1048576
[  218.535791][T13256] xt_CT: You must specify a L4 protocol and not use inversions on it
[  218.547460][T13254] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3598'.
[  218.568933][T13256] netlink: '+}[@': attribute type 2 has an invalid length.
[  218.576550][T13254] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3598'.
[  218.663536][T13256] macsec1: entered promiscuous mode
[  218.668857][T13256] bridge0: entered promiscuous mode
[  218.677764][T13256] bridge0: port 3(macsec1) entered blocking state
[  218.677801][T13256] bridge0: port 3(macsec1) entered disabled state
[  218.677971][T13256] macsec1: entered allmulticast mode
[  218.677989][T13256] bridge0: entered allmulticast mode
[  218.678851][T13256] macsec1: left allmulticast mode
[  218.678910][T13256] bridge0: left allmulticast mode
[  218.679620][T13256] bridge0: left promiscuous mode
[  219.069599][T13286] xt_CT: You must specify a L4 protocol and not use inversions on it
[  219.111485][T13286] netlink: '+}[@': attribute type 2 has an invalid length.
[  219.186373][T13286] macsec1: entered promiscuous mode
[  219.191701][T13286] bridge0: entered promiscuous mode
[  219.197453][T13286] bridge0: port 3(macsec1) entered blocking state
[  219.204043][T13286] bridge0: port 3(macsec1) entered disabled state
[  219.212179][T13286] macsec1: entered allmulticast mode
[  219.217530][T13286] bridge0: entered allmulticast mode
[  219.223712][T13286] macsec1: left allmulticast mode
[  219.228857][T13286] bridge0: left allmulticast mode
[  219.238899][T13286] bridge0: left promiscuous mode
[  219.389492][T13297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3615'.
[  219.670956][T13327] xt_CT: You must specify a L4 protocol and not use inversions on it
[  219.719026][T13331] netlink: 'syz.3.3626': attribute type 2 has an invalid length.
[  219.795561][T13334] xt_hashlimit: max too large, truncated to 1048576
[  219.814305][T13331] macsec1: entered promiscuous mode
[  219.819657][T13331] bridge0: entered promiscuous mode
[  219.826230][T13331] bridge0: port 3(macsec1) entered blocking state
[  219.832793][T13331] bridge0: port 3(macsec1) entered disabled state
[  219.849172][T13331] macsec1: entered allmulticast mode
[  219.854599][T13331] bridge0: entered allmulticast mode
[  219.895713][T13331] macsec1: left allmulticast mode
[  219.900843][T13331] bridge0: left allmulticast mode
[  219.933831][T13331] bridge0: left promiscuous mode
[  220.022193][T13337] $Hÿ: entered promiscuous mode
[  220.027359][T13337] bond_slave_0: entered promiscuous mode
[  220.033336][T13337] bond_slave_1: entered promiscuous mode
[  220.362425][   T29] kauditd_printk_skb: 911 callbacks suppressed
[  220.362440][   T29] audit: type=1326 audit(1753579349.823:29902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.434968][   T29] audit: type=1326 audit(1753579349.823:29903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.458715][   T29] audit: type=1326 audit(1753579349.823:29904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.482437][   T29] audit: type=1326 audit(1753579349.823:29905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.506058][   T29] audit: type=1326 audit(1753579349.823:29906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.529732][   T29] audit: type=1326 audit(1753579349.823:29907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.553610][   T29] audit: type=1326 audit(1753579349.823:29908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.577243][   T29] audit: type=1326 audit(1753579349.823:29909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.600930][   T29] audit: type=1326 audit(1753579349.823:29910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.624576][   T29] audit: type=1326 audit(1753579349.823:29911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  220.729664][T13366] netlink: 'syz.4.3640': attribute type 27 has an invalid length.
[  220.798439][T13372] $Hÿ: renamed from bond0
[  220.826963][T13372] $Hÿ: entered promiscuous mode
[  220.832255][T13372] bond_slave_0: entered promiscuous mode
[  220.838079][T13372] bond_slave_1: entered promiscuous mode
[  221.043438][T13389] bond0: entered allmulticast mode
[  221.058670][T13389] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.071218][ T2960] IPVS: starting estimator thread 0...
[  221.170918][T13393] IPVS: using max 2304 ests per chain, 115200 per kthread
[  221.372599][T13405] __nla_validate_parse: 5 callbacks suppressed
[  221.372615][T13405] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3655'.
[  221.819971][T13422] 9pnet: Could not find request transport: fd0x0000000000000004
[  222.057305][T13438] SELinux: failed to load policy
[  222.167872][T13450] 9pnet: Could not find request transport: fd0x0000000000000004
[  222.223889][T13455] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  222.251451][T13455] openvswitch: netlink: Message has 6 unknown bytes.
[  222.282099][T13462] 9pnet: Could not find request transport: fd0x0000000000000004
[  222.306837][T13466] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3680'.
[  222.316376][T13466] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3680'.
[  222.353556][T13474] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3684'.
[  222.378432][T13476] 9pnet: Could not find request transport: fd0x0000000000000004
[  222.433034][T13485] netlink: 'syz.4.3689': attribute type 27 has an invalid length.
[  222.441340][T13485] $Hÿ: left promiscuous mode
[  222.446236][T13485] bond_slave_0: left promiscuous mode
[  222.451808][T13485] bond_slave_1: left promiscuous mode
[  222.477781][T13492] 9pnet_fd: Insufficient options for proto=fd
[  222.508111][T13499] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3694'.
[  222.517571][T13499] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3694'.
[  222.697380][T13512] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  222.707323][T13514] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3696'.
[  222.797410][T13523] netlink: 'syz.2.3703': attribute type 27 has an invalid length.
[  222.812191][T13525] 9pnet_fd: Insufficient options for proto=fd
[  222.834240][T13527] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.854940][T13531] FAULT_INJECTION: forcing a failure.
[  222.854940][T13531] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  222.868293][T13531] CPU: 1 UID: 0 PID: 13531 Comm: syz.5.3706 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  222.868330][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  222.868346][T13531] Call Trace:
[  222.868355][T13531]  <TASK>
[  222.868369][T13531]  __dump_stack+0x1d/0x30
[  222.868401][T13531]  dump_stack_lvl+0xe8/0x140
[  222.868458][T13531]  dump_stack+0x15/0x1b
[  222.868479][T13531]  should_fail_ex+0x265/0x280
[  222.868518][T13531]  should_fail_alloc_page+0xf2/0x100
[  222.868546][T13531]  __alloc_frozen_pages_noprof+0xff/0x360
[  222.868626][T13531]  alloc_pages_mpol+0xb3/0x250
[  222.868654][T13531]  alloc_pages_noprof+0x90/0x130
[  222.868682][T13531]  pte_alloc_one+0x2d/0x120
[  222.868746][T13531]  __pte_alloc+0x32/0x2b0
[  222.868779][T13531]  ? mas_state_walk+0x574/0x650
[  222.868829][T13531]  handle_mm_fault+0x1c16/0x2be0
[  222.868856][T13531]  ? mas_walk+0xf2/0x120
[  222.868900][T13531]  do_user_addr_fault+0x636/0x1090
[  222.868932][T13531]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  222.868958][T13531]  exc_page_fault+0x62/0xa0
[  222.869034][T13531]  asm_exc_page_fault+0x26/0x30
[  222.869059][T13531] RIP: 0033:0x7f08da6a0d46
[  222.869083][T13531] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  222.869136][T13531] RSP: 002b:00007f08d8e3e4a0 EFLAGS: 00010246
[  222.869154][T13531] RAX: 0000000000000001 RBX: 00007f08d8e3e540 RCX: 0000000000000101
[  222.869166][T13531] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f08d8e3e5e0
[  222.869181][T13531] RBP: 0000000000000102 R08: 00007f08d0a1f000 R09: 0000000000000000
[  222.869228][T13531] R10: 0000000000000000 R11: 00007f08d8e3e550 R12: 0000000000000001
[  222.869244][T13531] R13: 00007f08da87c880 R14: 0000000000000000 R15: 00007f08d8e3e5e0
[  222.869327][T13531]  </TASK>
[  222.869351][T13531] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  222.916375][T13527] netlink: '+}[@': attribute type 2 has an invalid length.
[  223.097302][T13533] macsec1: entered promiscuous mode
[  223.102583][T13533] bridge0: entered promiscuous mode
[  223.145018][T13533] bridge0: port 3(macsec1) entered blocking state
[  223.151797][T13533] bridge0: port 3(macsec1) entered disabled state
[  223.179768][T13533] macsec1: entered allmulticast mode
[  223.185149][T13533] bridge0: entered allmulticast mode
[  223.207515][T13533] macsec1: left allmulticast mode
[  223.212693][T13533] bridge0: left allmulticast mode
[  223.223082][T13533] bridge0: left promiscuous mode
[  223.234659][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3710'.
[  223.350132][T13560] xt_hashlimit: max too large, truncated to 1048576
[  223.441587][T13564] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3714'.
[  223.450989][T13564] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3714'.
[  223.464228][T13566] netlink: 'syz.2.3715': attribute type 27 has an invalid length.
[  223.678196][T13579] xt_hashlimit: max too large, truncated to 1048576
[  224.110355][T13601] 9pnet_fd: Insufficient options for proto=fd
[  224.278681][T13608] xt_hashlimit: max too large, truncated to 1048576
[  224.614441][T13627] 9pnet: Could not find request transport: t
[  224.992685][T13651] xt_hashlimit: max too large, truncated to 1048576
[  225.133689][   T29] kauditd_printk_skb: 1635 callbacks suppressed
[  225.133707][   T29] audit: type=1326 audit(1753579354.833:31547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f579cb55967 code=0x7ffc0000
[  225.211867][   T29] audit: type=1326 audit(1753579354.875:31548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f579cafab89 code=0x7ffc0000
[  225.235502][   T29] audit: type=1326 audit(1753579354.875:31549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f579cb55967 code=0x7ffc0000
[  225.259043][   T29] audit: type=1326 audit(1753579354.875:31550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f579cafab89 code=0x7ffc0000
[  225.282811][   T29] audit: type=1326 audit(1753579354.875:31551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  225.306359][   T29] audit: type=1326 audit(1753579354.885:31552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f579cb55967 code=0x7ffc0000
[  225.330029][   T29] audit: type=1326 audit(1753579354.885:31553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f579cafab89 code=0x7ffc0000
[  225.353752][   T29] audit: type=1326 audit(1753579354.885:31554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  225.377396][   T29] audit: type=1326 audit(1753579354.896:31555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f579cb55967 code=0x7ffc0000
[  225.401280][   T29] audit: type=1326 audit(1753579354.896:31556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.2.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f579cafab89 code=0x7ffc0000
[  225.433197][   T36] IPVS: starting estimator thread 0...
[  225.550561][T13659] IPVS: using max 2304 ests per chain, 115200 per kthread
[  225.955858][T13690] xt_hashlimit: max too large, truncated to 1048576
[  225.973259][T13689] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.019432][T13689] netlink: '+}[@': attribute type 2 has an invalid length.
[  226.188934][T13689] macsec1: entered promiscuous mode
[  226.194322][T13689] bridge0: entered promiscuous mode
[  226.231600][T13689] bridge0: port 3(macsec1) entered blocking state
[  226.238256][T13689] bridge0: port 3(macsec1) entered disabled state
[  226.292175][T13689] macsec1: entered allmulticast mode
[  226.297713][T13689] bridge0: entered allmulticast mode
[  226.322327][T13689] macsec1: left allmulticast mode
[  226.327443][T13689] bridge0: left allmulticast mode
[  226.334384][T13689] bridge0: left promiscuous mode
[  226.503169][T13700] tipc: Started in network mode
[  226.508367][T13700] tipc: Node identity d64723091444, cluster identity 4711
[  226.515821][T13700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.551190][T13700] syzkaller0: entered promiscuous mode
[  226.556805][T13700] syzkaller0: entered allmulticast mode
[  226.601996][T13700] tipc: Resetting bearer <eth:syzkaller0>
[  226.627321][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13700 comm=syz.5.3763
[  226.675004][T13699] tipc: Resetting bearer <eth:syzkaller0>
[  226.683908][T13699] tipc: Disabling bearer <eth:syzkaller0>
[  226.812483][T13704] __nla_validate_parse: 10 callbacks suppressed
[  226.812498][T13704] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3764'.
[  226.830898][T13704] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3764'.
[  227.088558][T13723] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3773'.
[  227.098493][T13723] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3773'.
[  227.306547][T13732] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3777'.
[  227.351063][T13732] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3777'.
[  227.824007][T13758] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3786'.
[  228.079010][T13774] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3791'.
[  228.313221][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7
[  228.320730][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3
[  228.328232][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.335801][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.343299][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.350854][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.358357][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.365800][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3
[  228.373255][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.381107][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.388543][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.395974][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.403430][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.411025][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.418529][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.425962][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.433424][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.441035][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.448534][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.456090][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.463598][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.471039][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.478506][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  228.582432][ T3407] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  228.907697][T13808] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3803'.
[  228.917030][T13808] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3803'.
[  229.679614][T13848] netlink: 'syz.5.3818': attribute type 27 has an invalid length.
[  229.712201][T13848] $Hÿ: left promiscuous mode
[  229.717110][T13848] bond_slave_0: left promiscuous mode
[  229.722705][T13848] bond_slave_1: left promiscuous mode
[  229.997873][   T29] kauditd_printk_skb: 320 callbacks suppressed
[  229.997891][   T29] audit: type=1326 audit(1753579359.937:31877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  230.075778][   T29] audit: type=1326 audit(1753579359.947:31878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  230.099479][   T29] audit: type=1326 audit(1753579359.947:31879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  230.123514][   T29] audit: type=1326 audit(1753579359.947:31880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  230.147280][   T29] audit: type=1326 audit(1753579359.947:31881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f08da7de9e3 code=0x7ffc0000
[  230.171140][   T29] audit: type=1326 audit(1753579359.947:31882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f08da7dd45f code=0x7ffc0000
[  230.194628][   T29] audit: type=1326 audit(1753579359.947:31883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f08da7dea37 code=0x7ffc0000
[  230.218241][   T29] audit: type=1326 audit(1753579359.958:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08da7dd310 code=0x7ffc0000
[  230.241845][   T29] audit: type=1326 audit(1753579359.958:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f08da7dd60a code=0x7ffc0000
[  230.265252][   T29] audit: type=1326 audit(1753579359.958:31886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.5.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da7de9a9 code=0x7ffc0000
[  230.529206][T13883] netlink: 'syz.3.3832': attribute type 27 has an invalid length.
[  230.560072][T13883] $Hÿ: left promiscuous mode
[  230.564984][T13883] bond_slave_0: left promiscuous mode
[  230.570770][T13883] bond_slave_1: left promiscuous mode
[  230.601618][T13883] bond0: left allmulticast mode
[  230.686930][T13890] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  231.831673][T13930] __nla_validate_parse: 9 callbacks suppressed
[  231.831688][T13930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3851'.
[  231.864194][T13929] netlink: 'syz.4.3846': attribute type 27 has an invalid length.
[  231.993398][T13934] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  232.350609][T13955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3863'.
[  232.580836][T13957] netlink: 'syz.3.3864': attribute type 27 has an invalid length.
[  232.639540][T13959] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3865'.
[  232.649950][T13959] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3865'.
[  233.125125][T13982] netlink: 'syz.3.3875': attribute type 27 has an invalid length.
[  233.157957][T13986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3877'.
[  233.206810][T13988] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.230444][T13988] netlink: '+}[@': attribute type 2 has an invalid length.
[  233.331426][T13988] macsec1: entered promiscuous mode
[  233.336785][T13988] bridge0: entered promiscuous mode
[  233.369998][T13988] bridge0: port 3(macsec1) entered blocking state
[  233.376512][T13988] bridge0: port 3(macsec1) entered disabled state
[  233.399318][T13988] macsec1: entered allmulticast mode
[  233.404670][T13988] bridge0: entered allmulticast mode
[  233.443740][T13988] macsec1: left allmulticast mode
[  233.448867][T13988] bridge0: left allmulticast mode
[  233.483309][T13988] bridge0: left promiscuous mode
[  233.585027][T14009] $Hÿ: entered promiscuous mode
[  233.590195][T14009] bond_slave_0: entered promiscuous mode
[  233.596147][T14009] bond_slave_1: entered promiscuous mode
[  233.726871][T14013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3888'.
[  234.099893][T14031] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3896'.
[  234.256093][T14040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3900'.
[  234.373506][T14054] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3905'.
[  234.390768][T14054] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3905'.
[  234.768464][   T29] kauditd_printk_skb: 1325 callbacks suppressed
[  234.768480][   T29] audit: type=1326 audit(1753579364.946:33212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f064b45d60a code=0x7ffc0000
[  234.803727][   T29] audit: type=1326 audit(1753579364.957:33213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  234.810468][T14105] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  234.827400][   T29] audit: type=1326 audit(1753579364.957:33214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f064b45d310 code=0x7ffc0000
[  234.858685][   T29] audit: type=1326 audit(1753579364.957:33215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f064b4601d7 code=0x7ffc0000
[  234.882295][   T29] audit: type=1326 audit(1753579364.957:33216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  234.906246][   T29] audit: type=1326 audit(1753579364.957:33217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f064b4601d7 code=0x7ffc0000
[  234.906283][   T29] audit: type=1326 audit(1753579364.957:33218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f064b45d60a code=0x7ffc0000
[  234.906333][   T29] audit: type=1326 audit(1753579364.957:33219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  234.906365][   T29] audit: type=1326 audit(1753579364.957:33220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  234.906390][   T29] audit: type=1326 audit(1753579364.957:33221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f579cb5e9a9 code=0x7ffc0000
[  235.259442][T14137] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  235.572725][T14166] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  236.137225][T14200] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  236.630510][T14233] tipc: Started in network mode
[  236.635599][T14233] tipc: Node identity 5a769e9aef33, cluster identity 4711
[  236.642850][T14233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.650031][T14233] syzkaller0: entered promiscuous mode
[  236.655571][T14233] syzkaller0: entered allmulticast mode
[  236.664866][T14232] tipc: Resetting bearer <eth:syzkaller0>
[  236.671599][T14232] tipc: Disabling bearer <eth:syzkaller0>
[  237.249330][T14262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.257236][T14262] syzkaller0: entered promiscuous mode
[  237.262800][T14262] syzkaller0: entered allmulticast mode
[  237.299432][T14261] tipc: Resetting bearer <eth:syzkaller0>
[  237.319968][T14261] tipc: Disabling bearer <eth:syzkaller0>
[  237.441415][T14275] __nla_validate_parse: 18 callbacks suppressed
[  237.441434][T14275] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4003'.
[  237.482555][T14275] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4003'.
[  237.568748][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'.
[  237.577874][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'.
[  237.586936][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'.
[  237.638660][T14295] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4010'.
[  237.648718][T14295] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4010'.
[  237.728995][T14301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.745009][T14301] syzkaller0: entered promiscuous mode
[  237.750749][T14301] syzkaller0: entered allmulticast mode
[  237.789739][T14300] tipc: Resetting bearer <eth:syzkaller0>
[  237.820176][T14300] tipc: Disabling bearer <eth:syzkaller0>
[  237.820523][T14307] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  237.890617][T14316] netlink: 'syz.0.4020': attribute type 27 has an invalid length.
[  237.913355][T14316] $Hÿ: left promiscuous mode
[  237.918185][T14316] bond_slave_0: left promiscuous mode
[  237.923749][T14316] bond_slave_1: left promiscuous mode
[  237.983362][T14326] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4022'.
[  238.014732][T14326] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4022'.
[  238.168722][T14352] xt_hashlimit: max too large, truncated to 1048576
[  238.255173][T14359] tipc: Started in network mode
[  238.260189][T14359] tipc: Node identity e24736c36378, cluster identity 4711
[  238.267608][T14359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.301277][T14359] syzkaller0: entered promiscuous mode
[  238.307145][T14359] syzkaller0: entered allmulticast mode
[  238.317261][T14358] tipc: Resetting bearer <eth:syzkaller0>
[  238.338715][T14358] tipc: Disabling bearer <eth:syzkaller0>
[  238.426598][T14365] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4038'.
[  238.573787][T14382] xt_hashlimit: max too large, truncated to 1048576
[  239.190172][T14422] all: renamed from bridge_slave_0
[  239.205685][T14422] FAULT_INJECTION: forcing a failure.
[  239.205685][T14422] name failslab, interval 1, probability 0, space 0, times 0
[  239.218499][T14422] CPU: 0 UID: 0 PID: 14422 Comm: syz.0.4059 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  239.218610][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  239.218627][T14422] Call Trace:
[  239.218635][T14422]  <TASK>
[  239.218648][T14422]  __dump_stack+0x1d/0x30
[  239.218675][T14422]  dump_stack_lvl+0xe8/0x140
[  239.218696][T14422]  dump_stack+0x15/0x1b
[  239.218711][T14422]  should_fail_ex+0x265/0x280
[  239.218741][T14422]  should_failslab+0x8c/0xb0
[  239.218766][T14422]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  239.218829][T14422]  ? kstrdup_const+0x3e/0x50
[  239.218860][T14422]  kstrdup+0x3e/0xd0
[  239.218887][T14422]  kstrdup_const+0x3e/0x50
[  239.218917][T14422]  kobject_rename+0x172/0x350
[  239.218946][T14422]  ? sysfs_rename_link_ns+0x106/0x120
[  239.219107][T14422]  device_rename+0x11f/0x180
[  239.219136][T14422]  netif_change_name+0x1eb/0x6b0
[  239.219228][T14422]  ? krealloc_noprof+0x136/0x2d0
[  239.219261][T14422]  ? krealloc_noprof+0x136/0x2d0
[  239.219292][T14422]  ? nla_strscpy+0xec/0x120
[  239.219316][T14422]  do_setlink+0x80b/0x2810
[  239.219383][T14422]  ? avc_has_perm_noaudit+0x1b1/0x200
[  239.219413][T14422]  ? selinux_capable+0x1f9/0x270
[  239.219444][T14422]  ? security_capable+0x83/0x90
[  239.219501][T14422]  ? ns_capable+0x7d/0xb0
[  239.219525][T14422]  ? netlink_ns_capable+0x86/0xa0
[  239.219565][T14422]  rtnl_newlink+0xe75/0x12d0
[  239.219607][T14422]  ? rt2800_init_rfcsr+0x1bc60/0x25d40
[  239.219691][T14422]  ? x86_call_depth_emit_accounting+0x128/0x2e0
[  239.219729][T14422]  ? copy_from_kernel_nofault+0x188/0x200
[  239.219821][T14422]  ? xas_load+0x413/0x430
[  239.219878][T14422]  ? xas_load+0x413/0x430
[  239.219972][T14422]  ? __rcu_read_unlock+0x4f/0x70
[  239.219996][T14422]  ? xa_load+0xb1/0xe0
[  239.220019][T14422]  ? avc_has_perm_noaudit+0xc3/0x200
[  239.220053][T14422]  ? __rcu_read_unlock+0x4f/0x70
[  239.220080][T14422]  ? avc_has_perm_noaudit+0x1b1/0x200
[  239.220179][T14422]  ? selinux_capable+0x1f9/0x270
[  239.220222][T14422]  ? security_capable+0x83/0x90
[  239.220261][T14422]  ? ns_capable+0x7d/0xb0
[  239.220288][T14422]  ? __pfx_rtnl_newlink+0x10/0x10
[  239.220314][T14422]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  239.220337][T14422]  ? avc_has_perm_noaudit+0x1b1/0x200
[  239.220411][T14422]  netlink_rcv_skb+0x123/0x220
[  239.220448][T14422]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  239.220485][T14422]  rtnetlink_rcv+0x1c/0x30
[  239.220522][T14422]  netlink_unicast+0x5a8/0x680
[  239.220564][T14422]  netlink_sendmsg+0x58b/0x6b0
[  239.220592][T14422]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.220680][T14422]  __sock_sendmsg+0x142/0x180
[  239.220710][T14422]  ____sys_sendmsg+0x31e/0x4e0
[  239.220755][T14422]  ___sys_sendmsg+0x17b/0x1d0
[  239.220797][T14422]  __x64_sys_sendmsg+0xd4/0x160
[  239.220826][T14422]  x64_sys_call+0x2999/0x2fb0
[  239.220847][T14422]  do_syscall_64+0xd2/0x200
[  239.220906][T14422]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  239.220940][T14422]  ? clear_bhb_loop+0x40/0x90
[  239.221013][T14422]  ? clear_bhb_loop+0x40/0x90
[  239.221037][T14422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.221057][T14422] RIP: 0033:0x7fcfbe31e9a9
[  239.221072][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.221143][T14422] RSP: 002b:00007fcfbc987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.221165][T14422] RAX: ffffffffffffffda RBX: 00007fcfbe545fa0 RCX: 00007fcfbe31e9a9
[  239.221177][T14422] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  239.221188][T14422] RBP: 00007fcfbc987090 R08: 0000000000000000 R09: 0000000000000000
[  239.221202][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  239.221218][T14422] R13: 0000000000000000 R14: 00007fcfbe545fa0 R15: 00007ffe620a73e8
[  239.221243][T14422]  </TASK>
[  239.624598][   T29] kauditd_printk_skb: 1709 callbacks suppressed
[  239.624615][   T29] audit: type=1400 audit(1753579370.050:34931): avc:  denied  { create } for  pid=14423 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  239.711824][   T29] audit: type=1400 audit(1753579370.071:34932): avc:  denied  { write } for  pid=14423 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  239.732364][   T29] audit: type=1400 audit(1753579370.071:34933): avc:  denied  { nlmsg_write } for  pid=14423 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  239.753281][   T29] audit: type=1400 audit(1753579370.113:34934): avc:  denied  { write } for  pid=14426 comm="syz.2.4062" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  239.916802][   T29] audit: type=1326 audit(1753579370.344:34935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  239.940700][   T29] audit: type=1326 audit(1753579370.344:34936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  239.964458][   T29] audit: type=1326 audit(1753579370.344:34937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  239.988163][   T29] audit: type=1326 audit(1753579370.344:34938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  240.011822][   T29] audit: type=1326 audit(1753579370.344:34939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  240.035592][   T29] audit: type=1326 audit(1753579370.344:34940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064b45e9a9 code=0x7ffc0000
[  240.114262][T14450] netlink: 'syz.0.4069': attribute type 1 has an invalid length.
[  240.123630][T14451] netlink: 'syz.3.4070': attribute type 1 has an invalid length.
[  240.208028][T14456] 9pnet: Could not find request transport: t
[  240.272165][T14450] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.347740][T14458] vlan2: entered allmulticast mode
[  240.352984][T14458] bond0: entered allmulticast mode
[  240.443271][T14468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.521561][T14467] tipc: Disabling bearer <eth:syzkaller0>
[  240.756883][T14486] can0: slcan on ptm0.
[  240.806688][T14485] can0 (unregistered): slcan off ptm0.
[  242.105447][T14526] netlink: 'syz.3.4100': attribute type 27 has an invalid length.
[  242.125468][T14526] $Hÿ: left promiscuous mode
[  242.130363][T14526] bond_slave_0: left promiscuous mode
[  242.135902][T14526] bond_slave_1: left promiscuous mode
[  242.284836][T14540] __nla_validate_parse: 16 callbacks suppressed
[  242.284857][T14540] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4107'.
[  242.438216][T14549] 9pnet: Could not find request transport: tc
[  242.462143][T14543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4109'.
[  242.588062][T14565] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4118'.
[  242.620556][T14565] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4118'.
[  242.644337][T14569] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4119'.
[  242.762271][T14566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.830510][T14579] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4123'.
[  242.844349][T14579] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4123'.
[  242.972100][T14594] ==================================================================
[  242.980244][T14594] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  242.987591][T14594] 
[  242.989928][T14594] write to 0xffff8881186c4e00 of 8 bytes by task 14592 on cpu 0:
[  242.997652][T14594]  mas_wmb_replace+0xe45/0x14a0
[  243.002521][T14594]  mas_wr_store_entry+0x1773/0x2b50
[  243.007747][T14594]  mas_store_prealloc+0x74d/0x9e0
[  243.012805][T14594]  vma_iter_store_new+0x1c5/0x200
[  243.017853][T14594]  vma_complete+0x125/0x580
[  243.022370][T14594]  __split_vma+0x5d9/0x650
[  243.026807][T14594]  vma_modify+0x3f2/0xc80
[  243.031154][T14594]  vma_modify_flags+0x101/0x130
[  243.036020][T14594]  mprotect_fixup+0x2cc/0x570
[  243.040727][T14594]  do_mprotect_pkey+0x6d6/0x980
[  243.045600][T14594]  __x64_sys_mprotect+0x48/0x60
[  243.050468][T14594]  x64_sys_call+0x2794/0x2fb0
[  243.055163][T14594]  do_syscall_64+0xd2/0x200
[  243.059684][T14594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.065615][T14594] 
[  243.067945][T14594] read to 0xffff8881186c4e00 of 8 bytes by task 14594 on cpu 1:
[  243.075590][T14594]  mas_state_walk+0x485/0x650
[  243.080295][T14594]  mas_walk+0x30/0x120
[  243.084388][T14594]  lock_vma_under_rcu+0xa2/0x2f0
[  243.089351][T14594]  do_user_addr_fault+0x233/0x1090
[  243.094491][T14594]  exc_page_fault+0x62/0xa0
[  243.099017][T14594]  asm_exc_page_fault+0x26/0x30
[  243.103895][T14594] 
[  243.106226][T14594] value changed: 0xffff8881046fd10e -> 0xffff8881186c4e00
[  243.113341][T14594] 
[  243.115687][T14594] Reported by Kernel Concurrency Sanitizer on:
[  243.121872][T14594] CPU: 1 UID: 0 PID: 14594 Comm: syz.5.4130 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  243.134387][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  243.144457][T14594] ==================================================================