last executing test programs:

7m7.290542865s ago: executing program 1 (id=1252):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000002c0), 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0)

7m6.397144838s ago: executing program 1 (id=1271):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r4=>0x0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10204, 0x484200)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4008054)
keyctl$setperm(0x5, 0x0, 0x421)
keyctl$unlink(0x9, 0x0, 0x0)

7m5.976157485s ago: executing program 1 (id=1278):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x28}, 0x94)

7m5.914400626s ago: executing program 1 (id=1281):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000002c0), 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0)

7m5.580099321s ago: executing program 1 (id=1286):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000040)=""/52, 0x34)
getdents64(r4, 0xfffffffffffffffe, 0x29)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, 0x0, 0x4080)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x44, r7, 0x8, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x4}]}, 0x44}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x80, 0x25dfdbfa, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7948}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'team_slave_1\x00'})
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)

7m5.223001107s ago: executing program 1 (id=1295):
socket$inet_sctp(0x2, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
pipe(&(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7m5.058554629s ago: executing program 32 (id=1295):
socket$inet_sctp(0x2, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
pipe(&(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m28.73429142s ago: executing program 3 (id=6282):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

2m28.711758901s ago: executing program 3 (id=6283):
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2000c40, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x1f3e695bb4ffa0cd)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)

2m28.685295131s ago: executing program 3 (id=6284):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')

2m28.684701991s ago: executing program 3 (id=6285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f000080"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10)
clock_getres(0x7, 0x0)
read(r4, &(0x7f00000019c0)=""/4097, 0x1001)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000000000000000000000080073616fc8415b7050f9c5ef454704dcd98e3d83f11cb2fbc40eeb81d9a621d0bc5981c91d7399f5a3a1fcd739656f809703770f332b7ff"], 0x48)
open(0x0, 0x60840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0), &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pause()
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m27.655799697s ago: executing program 3 (id=6299):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffff92, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x70c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6e0, 0x2, [@TCA_U32_SEL={0x6d4, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5, [{0x6, 0x5, 0x2d, 0xfffffff4}, {0x4, 0x5, 0x3d7, 0x1c}, {0x2, 0xe, 0x9850, 0x7}, {0x3, 0x1, 0x340c, 0x3}, {0x8, 0xfff, 0x75e0000, 0xfffffff2}, {0x7, 0x2, 0x8, 0x7}, {0x1, 0x9, 0x7, 0x1}, {0x7fff, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x7, 0x37}, {0x401, 0x9, 0x5, 0x9}, {0xc283, 0x7, 0xf497, 0x2}, {0x2, 0x10001, 0x800, 0x80000001}, {0x4, 0x81, 0x9, 0xf}, {0x800, 0x5, 0x7fff, 0x400}, {0x8, 0x3, 0xb217, 0x40}, {0x8001, 0x6, 0x4, 0x9}, {0x0, 0x4ce, 0x6, 0x80000001}, {0x7, 0x2, 0x10000, 0x427e}, {0x2, 0x1, 0x4000004, 0x8}, {0x4, 0xf, 0x200, 0x929}, {0x2, 0x1, 0x8, 0x7fff}, {0xe25, 0x3, 0x8, 0x9}, {0x801b, 0x80000000, 0x4080000, 0x8}, {0x8, 0x3, 0x2, 0x1}, {0x9, 0xb6f1, 0x5f, 0x5}, {0x9, 0xa, 0x7, 0x45}, {0x7f, 0x3f, 0x7fffffff, 0x1}, {0x1, 0xfffffe01, 0x3, 0xfffffffb}, {0x9, 0x4, 0x80000000}, {0xffff, 0x9, 0xfffffffa, 0x80}, {0x4, 0x400, 0x1, 0x6}, {0x0, 0x3, 0x3, 0xfffffff9}, {0x6, 0x0, 0x2, 0x8}, {0x4, 0x4, 0x5, 0x2}, {0x987b, 0x3, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x80000000}, {0x8, 0xffffff00, 0x3, 0x7}, {0x3, 0x7, 0x4}, {0x9, 0x6, 0xab, 0x8}, {0x9, 0x51c7, 0x1ff, 0x9}, {0x4, 0x1, 0x6, 0x6}, {0x7, 0x9437, 0x4, 0x2}, {0x81, 0x0, 0xd, 0x6}, {0x5, 0x0, 0x1, 0xfffffffc}, {0x1, 0x24, 0x8, 0x4}, {0x9, 0x10001, 0x7fffffff, 0x7}, {0xfffffffa, 0x101, 0x101, 0x2}, {0x6, 0x4, 0x8, 0x9}, {0x1, 0xb765, 0x8, 0x9}, {0x6, 0x6, 0x8, 0x6}, {0x2, 0x70fd, 0x4, 0x4}, {0x96, 0x1, 0x3874c876, 0x7}, {0x9, 0x2, 0x1}, {0x3, 0x200, 0x1, 0x6f12}, {0x0, 0x7, 0x848, 0x6}, {0x0, 0xfffff801, 0x4, 0x4}, {0x2000000, 0x81, 0x5, 0x100}, {0x2, 0x80000000, 0x2, 0xfff}, {0x0, 0x4e, 0x5, 0x401}, {0x6, 0x8f9a, 0x5, 0x4}, {0x9, 0x100, 0x41, 0x7}, {0x9, 0xfffffff8, 0x4, 0xfffffff9}, {0xe, 0xfffffffb, 0xb, 0x9}, {0x7, 0x7, 0x5, 0x9}, {0x0, 0x0, 0x7, 0x7}, {0x6, 0x4, 0x259, 0xffff0001}, {0x2, 0xfffffffd, 0x9d3, 0x3}, {0x8, 0xbf4, 0xff, 0x204}, {0x7, 0x36, 0x9, 0x80000000}, {0x6, 0x5, 0xe4e, 0x2}, {0x400, 0x5, 0x80, 0x4f57}, {0x4, 0x1, 0x7}, {0x7, 0x5, 0xfffff961, 0x9ada}, {0xaf38, 0x81, 0xf, 0x750}, {0x1, 0x2, 0x6, 0xecc3}, {0x9, 0x80000000, 0x40, 0xcf}, {0x80000001, 0x3, 0x8, 0x6}, {0x0, 0x3, 0x6, 0xb6}, {0xe8, 0x10001, 0x4, 0xa0}, {0x1, 0x5, 0x8, 0x9a0}, {0xf49f, 0x3, 0x7, 0x40}, {0x5, 0x12, 0x0, 0x80000000}, {0x8000, 0x93cf934, 0x80000001, 0x8}, {0x5, 0x9a7, 0x9, 0x2}, {0x1, 0x9, 0x7ff, 0x4}, {0x0, 0xfffffff2, 0x6, 0x2}, {0x0, 0xfffffffa, 0x1, 0xffffffff}, {0x5d4, 0x5, 0x8, 0x6}, {0x2, 0x6, 0x4, 0x7b54}, {0x0, 0x8, 0x200000, 0x7fff}, {0x4, 0x4, 0x3, 0x7}, {0x800, 0x0, 0x7, 0x6}, {0x5, 0x9, 0x5, 0x2}, {0x8da, 0xffff6d39, 0xffffffff, 0x46bf6802}, {0x0, 0xc987, 0x4}, {0x9, 0x9, 0x1, 0x1911}, {0x8000, 0x2, 0x4, 0xd7f}, {0x4, 0x5, 0x5}, {0x401, 0x1d9d, 0x9, 0xfff}, {0x40, 0x7, 0xfc37, 0x101}, {0x3, 0x3, 0x10001, 0xfffffff7}, {0x5, 0x3, 0x4d}, {0x10, 0x3, 0x7, 0x7}, {0x1ff, 0x2, 0xef8, 0xfffffffa}, {0x8001, 0x9, 0x80, 0xa}, {0x101, 0xfffffffa, 0x7, 0x5}, {0x58, 0x40, 0x1, 0x6}, {0x20, 0x2, 0x101}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

2m27.338897252s ago: executing program 3 (id=6303):
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x400003, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x2}, 0x10)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x200, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
unshare(0x6a040000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x4, 0x6, 0x203, 0x40, 0x4]}, &(0x7f0000000000)=0x54)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="4b6ca936f0ef323f8acf9c48d2d900dd50d29e786b2051d923a84661874d770f159faba3ca3315e9e63e135e8f2b6390891e8f67353fbb60e40e4a5122c25fc46ecb96550a883e91c1836fc3ab4397b0e37e5066863e1797eee20bbe17df3a8fcab3fd9cbaef4ad5060ad6552cc03ad10be4b7302a5cf0ceef868de5e375adc942ab6d6451f2a1ebc76ca3e69fe80a4aff93b6f86e1ff765d5b98bc4743d4cae4ab223e363bf6a7c63718cf10e6bff12d0cc13a5247de4bcc9743895ec93f8afbbcba2170759b1a84d57e04e5de9032bbe46ff94693892af9a8209bc03426c541d", @ANYRES16=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

2m27.303042512s ago: executing program 33 (id=6303):
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x400003, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x2}, 0x10)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x200, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
unshare(0x6a040000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x4, 0x6, 0x203, 0x40, 0x4]}, &(0x7f0000000000)=0x54)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="4b6ca936f0ef323f8acf9c48d2d900dd50d29e786b2051d923a84661874d770f159faba3ca3315e9e63e135e8f2b6390891e8f67353fbb60e40e4a5122c25fc46ecb96550a883e91c1836fc3ab4397b0e37e5066863e1797eee20bbe17df3a8fcab3fd9cbaef4ad5060ad6552cc03ad10be4b7302a5cf0ceef868de5e375adc942ab6d6451f2a1ebc76ca3e69fe80a4aff93b6f86e1ff765d5b98bc4743d4cae4ab223e363bf6a7c63718cf10e6bff12d0cc13a5247de4bcc9743895ec93f8afbbcba2170759b1a84d57e04e5de9032bbe46ff94693892af9a8209bc03426c541d", @ANYRES16=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

2.319850475s ago: executing program 2 (id=9085):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)

2.277211825s ago: executing program 2 (id=9086):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007ba933ff00000000bfa200000000000007020000f8ffdd116316000008000000b704000000000000850000008200000295"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = gettid()
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
tkill(r8, 0x7)
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0xc, 0x7, 0x2, 0xfffffffffffffff4}]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8}, 0x94)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000)

2.142879697s ago: executing program 2 (id=9090):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r6, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8)
r8 = dup2(r6, r7)
fcntl$setown(r6, 0x8, r4)
tkill(r4, 0x13)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {<r9=>r3}}, './file0\x00'})
ioctl$HIDIOCGRAWNAME(r9, 0x80404804, &(0x7f00000003c0))
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4c200, &(0x7f0000000300)="e9a24658d774f346e6b709e59026b9785f76aeb94cfe3150f57a15d952353988d36941b135ce0973b85da3edc03f68bfd2fd7f8f4662844078a480e01a907788a4c468bddf3be5d0aca08ae56e3ba9c9d9c2c4f8506e1c7b127b9fb025c44d6639bb88fd7cd0a2f1c63988ca", 0x6c, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000400)="589d2e0e2682aedc4979660cd79ccab3b9a789ed739b1bf4eb571da87df7")

1.622165165s ago: executing program 4 (id=9095):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
semtimedop(0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f00000002c0)=[{}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000b7ed7c386fc56252d40657269173a9e7958056521aaad337ce72c6cad58621bcd62a9c0af8438ca9b1b49b4f97f87d2d81cf17ec369e187973e28bf8caa38b3712ffe95ec3a704633166a68ac2d0f2ee2b9af22a8d4ff5f02095905ca31fd8c0557e520cae0c4adab8cc01f761369793762110a8e0590ba2074da4"], 0x34}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

1.400447979s ago: executing program 4 (id=9097):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10)
clock_getres(0x7, 0x0)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.252003341s ago: executing program 2 (id=9101):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000010})
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4)
setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)=@v2={0x2000000, [{0x1, 0xfffffffb}, {0x4, 0x4}]}, 0x14, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',k'])

798.510108ms ago: executing program 2 (id=9106):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x200000, 0xa0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x98}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r6 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x600, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), r4)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8b35fb738dd9c682eb8f3d5c29c369c4aad621c836e11138d346cf4cd53966236eadd6a60cf10c6dfd2ddf4faceb61a3a89445b8fcc3a35d21bcf699cb8189108a85ee04000000444bbd0baa9d81bf992a5061696168080e07aa31c13ee3b58872fd8dff01644bd01f3d8f32e63ccbe91fe2ab58", @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="24003080140004003e7d9e838196f61c9b54c9c6b8bd5d48050002000300000004000180"], 0x40}}, 0x0)
clock_gettime(0x0, &(0x7f0000000740))
futex(&(0x7f0000000700), 0x8, 0x0, 0x0, &(0x7f00000007c0)=0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000001c80)={0x44, r5, 0x101, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000)
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[{@errors_remount}, {@nobh}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, '\\[\''}}, {@fowner_lt}, {@subj_role={'subj_role', 0x3d, '.^.@[\xdc'}}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d000000000a24c0000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r11, 0x0, 0xffffffffffffffff}, 0x18)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000fffd000000200000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe8000f5ffffff00000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffffffffffff00000000ffffffff000000002bbd700000000000020000002200000000000000480003006c7a7300"/233], 0x154}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

798.067058ms ago: executing program 5 (id=9107):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r0 = open(&(0x7f0000000300)='./bus\x00', 0x14927e, 0x100)
fallocate(r0, 0x0, 0x0, 0x1000f4)
mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f)
r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x5e21, @loopback}}, 0xfffffffc, 0x0, 0x3f, 0x0, 0x30}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

759.103458ms ago: executing program 5 (id=9108):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
semtimedop(0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f00000002c0)=[{}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000b7ed7c386fc56252d40657269173a9e7958056521aaad337ce72c6cad58621bcd62a9c0af8438ca9b1b49b4f97f87d2d81cf17ec369e187973e28bf8caa38b3712ffe95ec3a704633166a68ac2d0f2ee2b9af22a8d4ff5f02095905ca31fd8c0557e520cae0c4adab8cc01f761369793762110a8e0590ba2074da4"], 0x34}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

746.789429ms ago: executing program 2 (id=9109):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe36)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_ACTION={0x6, 0x3, 0x41}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='io_uring_fail_link\x00', r1, 0x0, 0x207}, 0x18)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r3, &(0x7f00000003c0)=""/4096, 0x1000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r6, 0x4}, 0x8)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={<r9=>0x0, 0x9}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e20, @empty}}, 0x16, 0x7f}, 0x90)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10)
r10 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101})
ppoll(&(0x7f0000002280)=[{r10, 0x800}], 0x1, 0x0, 0x0, 0x0)
mq_timedsend(r10, 0x0, 0x0, 0x4, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r12 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r13 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r13, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57)

724.262409ms ago: executing program 5 (id=9110):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x606800, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$selinux_validatetrans(r3, &(0x7f0000000200)={'system_u:object_r:dhcpd_state_t:s0', 0x20, 'system_u:object_r:boot_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x79)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='ext4_update_sb\x00', r4, 0x0, 0x3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1204050, &(0x7f0000000040), 0xfb, 0x496, &(0x7f0000000f40)="$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")
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800009cd2e15c1dfbc577000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigpending(0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f00)=@newtaction={0xf50, 0x30, 0x25, 0x0, 0x0, {}, [{0xf3c, 0x1, [@m_pedit={0xf38, 0x1, 0x0, 0x0, {{0xa}, {0xf0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xe8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {}, {0x0, 0x80000000}, {0x0, 0x0, 0x0, 0xfffff000}, {0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x80000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x6}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x9f6acee820ff84a1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf50}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10)
inotify_init()
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==")
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]})
getpgrp(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

630.71169ms ago: executing program 5 (id=9111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtclass={0x34, 0x28, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1a, 0xffe0}, {0x3, 0x4}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xaa, 0x43}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000025c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r7, 0x9, 0x0, [0x400010000, 0x6, 0x1, 0x9, 0x9], [0x8, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x400, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x10000000004, 0x4, 0x23, 0x400, 0x4, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x1, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x40000000000003ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0xe3, 0xff, 0x2, 0x9e, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x400000000000001, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x200000000000be9f, 0x3, 0x80000001, 0x3, 0x5, 0x20a, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x9, 0xffffefff]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000001c0)={r7, "f05e70bd3cc0a19f8371511a2df40e29"})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001c00)=<r8=>0x0)
syz_open_procfs(r8, &(0x7f0000001c40)='net/wireless\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read(r10, &(0x7f0000000040)=""/148, 0xffffff96)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppoe(r10, &(0x7f0000001280)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'hsr0\x00'}}, 0x1e)
connect$pppl2tp(r12, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x9a, &(0x7f00000011c0)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000641100fc020000000000000000000000000000ff02000000030000000000000000000100000e22006490780200002029e7b64e45e62a80efa0622a00000a000002000000b3a5a32c15a74899004ccf462627b693b45267c0cfac6d6f6c18a07448e7cfc77224eeb79b8e5cc84de93512fdd553dabc6b2adfa4d4d8104bb9887ab53acb4540e3d0b4c2c5585ef57152f112ea"], 0x0)

592.369051ms ago: executing program 6 (id=9112):
unlinkat(0xffffffffffffffff, 0x0, 0x200)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
set_tid_address(&(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000020000840000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)

579.255171ms ago: executing program 6 (id=9113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000540)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)

567.150902ms ago: executing program 6 (id=9114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffff92, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x70c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6e0, 0x2, [@TCA_U32_SEL={0x6d4, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5, [{0x6, 0x5, 0x2d, 0xfffffff4}, {0x4, 0x5, 0x3d7, 0x1c}, {0x2, 0xe, 0x9850, 0x7}, {0x3, 0x1, 0x340c, 0x3}, {0x8, 0xfff, 0x75e0000, 0xfffffff2}, {0x7, 0x2, 0x8, 0x7}, {0x1, 0x9, 0x7, 0x1}, {0x7fff, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x7, 0x37}, {0x401, 0x9, 0x5, 0x9}, {0xc283, 0x7, 0xf497, 0x2}, {0x2, 0x10001, 0x800, 0x80000001}, {0x4, 0x81, 0x9, 0xf}, {0x800, 0x5, 0x7fff, 0x400}, {0x8, 0x3, 0xb217, 0x40}, {0x8001, 0x6, 0x4, 0x9}, {0x0, 0x4ce, 0x6, 0x80000001}, {0x7, 0x2, 0x10000, 0x427e}, {0x2, 0x1, 0x4000004, 0x8}, {0x4, 0xf, 0x200, 0x929}, {0x2, 0x1, 0x8, 0x7fff}, {0xe25, 0x3, 0x8, 0x9}, {0x801b, 0x80000000, 0x4080000, 0x8}, {0x8, 0x3, 0x2, 0x1}, {0x9, 0xb6f1, 0x5f, 0x5}, {0x9, 0xa, 0x7, 0x45}, {0x7f, 0x3f, 0x7fffffff, 0x1}, {0x1, 0xfffffe01, 0x3, 0xfffffffb}, {0x9, 0x4, 0x80000000}, {0xffff, 0x9, 0xfffffffa, 0x80}, {0x4, 0x400, 0x1, 0x6}, {0x0, 0x3, 0x3, 0xfffffff9}, {0x6, 0x0, 0x2, 0x8}, {0x4, 0x4, 0x5, 0x2}, {0x987b, 0x3, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x80000000}, {0x8, 0xffffff00, 0x3, 0x7}, {0x3, 0x7, 0x4}, {0x9, 0x6, 0xab, 0x8}, {0x9, 0x51c7, 0x1ff, 0x9}, {0x4, 0x1, 0x6, 0x6}, {0x7, 0x9437, 0x4, 0x2}, {0x81, 0x0, 0xd, 0x6}, {0x5, 0x0, 0x1, 0xfffffffc}, {0x1, 0x24, 0x8, 0x4}, {0x9, 0x10001, 0x7fffffff, 0x7}, {0xfffffffa, 0x101, 0x101, 0x2}, {0x6, 0x4, 0x8, 0x9}, {0x1, 0xb765, 0x8, 0x9}, {0x6, 0x6, 0x8, 0x6}, {0x2, 0x70fd, 0x4, 0x4}, {0x96, 0x1, 0x3874c876, 0x7}, {0x9, 0x2, 0x1}, {0x3, 0x200, 0x1, 0x6f12}, {0x0, 0xfffff801, 0x4, 0x4}, {0x2000000, 0x81, 0x5, 0x100}, {0x2, 0x80000000, 0x2, 0xfff}, {0x0, 0x4e, 0x5, 0x401}, {0x6, 0x8f9a, 0x5, 0x4}, {0x9, 0x100, 0x41, 0x7}, {0x9, 0xfffffff8, 0x4, 0xfffffff9}, {0xe, 0xfffffffb, 0xb, 0x9}, {0x7, 0x7, 0x5, 0x9}, {0x0, 0x0, 0x7, 0x7}, {0x6, 0x4, 0x259, 0xffff0001}, {0x2, 0xfffffffd, 0x9d3, 0x3}, {0x8, 0xbf4, 0xff, 0x204}, {0x7, 0x36, 0x9, 0x80000000}, {0x6, 0x5, 0xe4e, 0x2}, {0x400, 0x5, 0x80, 0x4f57}, {0x4, 0x1, 0x7}, {0x7, 0x5, 0xfffff961, 0x9ada}, {0xaf38, 0x81, 0xf, 0x750}, {0x1, 0x2, 0x6, 0xecc3}, {0x9, 0x80000000, 0x40, 0xcf}, {0x80000001, 0x3, 0x8, 0x6}, {0x0, 0x3, 0x6, 0xb6}, {0xe8, 0x10001, 0x4, 0xa0}, {0x1, 0x5, 0x8, 0x9a0}, {0xf49f, 0x3, 0x7, 0x40}, {0x5, 0x12, 0x0, 0x80000000}, {0x8000, 0x93cf934, 0x80000001, 0x8}, {0x5, 0x9a7, 0x9, 0x2}, {0x1, 0x9, 0x7ff, 0x4}, {0x0, 0xfffffff2, 0x6, 0x2}, {0x0, 0xfffffffa, 0x1, 0xffffffff}, {0x5d4, 0x5, 0x8, 0x6}, {0x2, 0x6, 0x4, 0x7b54}, {0x0, 0x8, 0x200000, 0x7fff}, {0x4, 0x4, 0x3, 0x7}, {0x800, 0x0, 0x7, 0x6}, {0x5, 0x9, 0x5, 0x2}, {0x8da, 0xffff6d39, 0xffffffff, 0x46bf6802}, {0x0, 0xc987, 0x4}, {0x9, 0x9, 0x1, 0x1911}, {0x8000, 0x2, 0x4, 0xd7f}, {0x4, 0x5, 0x5}, {0x401, 0x1d9d, 0x9, 0xfff}, {0x40, 0x7, 0xfc37, 0x101}, {0x3, 0x3, 0x10001, 0xfffffff7}, {0x5, 0x3, 0x4d}, {0x10, 0x3, 0x7, 0x7}, {0x1ff, 0x2, 0xef8, 0xfffffffa}, {0x8001, 0x9, 0x80, 0xa}, {0x101, 0xfffffffa, 0x7, 0x5}, {0x58, 0x40, 0x1, 0x6}, {0x20, 0x2, 0x101}, {0xe, 0x4, 0x5, 0x9}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

551.958912ms ago: executing program 4 (id=9115):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040))
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0x13b}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x2, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xc, 0x1, '\\$^&(`[\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000540))
ptrace$cont(0x21, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x32, &(0x7f0000001100)={0x12, 0x80, 0x200})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r12, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
close(r7)

522.262362ms ago: executing program 5 (id=9116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20)
sendfile(r5, r6, 0x0, 0x8000fffffffe)

460.413393ms ago: executing program 6 (id=9118):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r0 = open(&(0x7f0000000300)='./bus\x00', 0x14927e, 0x100)
fallocate(r0, 0x0, 0x0, 0x1000f4)
mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f)
r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x5e21, @loopback}}, 0xfffffffc, 0x0, 0x3f, 0x0, 0x30}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

232.791607ms ago: executing program 4 (id=9120):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
semtimedop(0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f00000002c0)=[{}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000b7ed7c386fc56252d40657269173a9e7958056521aaad337ce72c6cad58621bcd62a9c0af8438ca9b1b49b4f97f87d2d81cf17ec369e187973e28bf8caa38b3712ffe95ec3a704633166a68ac2d0f2ee2b9af22a8d4ff5f02095905ca31fd8c0557e520cae0c4adab8cc01f761369793762110a8e0590ba2074da4"], 0x34}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

198.939108ms ago: executing program 4 (id=9122):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="03032abd7000ffdbdf2506"], 0xec0}}, 0x80)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed)
msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x200040, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000}, 0x50)

186.951658ms ago: executing program 0 (id=9123):
unlinkat(0xffffffffffffffff, 0x0, 0x200)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
set_tid_address(&(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000020000840000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)

176.964298ms ago: executing program 6 (id=9124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000540)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)

160.379038ms ago: executing program 0 (id=9125):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='0', 0x1}], 0x1)

159.671478ms ago: executing program 5 (id=9126):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10)
clock_getres(0x7, 0x0)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

150.196458ms ago: executing program 6 (id=9127):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007ba933ff00000000bfa200000000000007020000f8ffdd116316000008000000b704000000000000850000008200000295"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = gettid()
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r9, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
tkill(r8, 0x7)
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0xc, 0x7, 0x2, 0xfffffffffffffff4}]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8}, 0x94)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000)

99.007409ms ago: executing program 0 (id=9128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000002000/0x4000)=nil, 0x2)

98.684529ms ago: executing program 0 (id=9129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffff92, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x70c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6e0, 0x2, [@TCA_U32_SEL={0x6d4, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5, [{0x6, 0x5, 0x2d, 0xfffffff4}, {0x4, 0x5, 0x3d7, 0x1c}, {0x2, 0xe, 0x9850, 0x7}, {0x3, 0x1, 0x340c, 0x3}, {0x8, 0xfff, 0x75e0000, 0xfffffff2}, {0x7, 0x2, 0x8, 0x7}, {0x1, 0x9, 0x7, 0x1}, {0x7fff, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x7, 0x37}, {0x401, 0x9, 0x5, 0x9}, {0xc283, 0x7, 0xf497, 0x2}, {0x2, 0x10001, 0x800, 0x80000001}, {0x4, 0x81, 0x9, 0xf}, {0x800, 0x5, 0x7fff, 0x400}, {0x8, 0x3, 0xb217, 0x40}, {0x8001, 0x6, 0x4, 0x9}, {0x0, 0x4ce, 0x6, 0x80000001}, {0x7, 0x2, 0x10000, 0x427e}, {0x2, 0x1, 0x4000004, 0x8}, {0x4, 0xf, 0x200, 0x929}, {0x2, 0x1, 0x8, 0x7fff}, {0xe25, 0x3, 0x8, 0x9}, {0x801b, 0x80000000, 0x4080000, 0x8}, {0x8, 0x3, 0x2, 0x1}, {0x9, 0xb6f1, 0x5f, 0x5}, {0x9, 0xa, 0x7, 0x45}, {0x7f, 0x3f, 0x7fffffff, 0x1}, {0x1, 0xfffffe01, 0x3, 0xfffffffb}, {0x9, 0x4, 0x80000000}, {0xffff, 0x9, 0xfffffffa, 0x80}, {0x4, 0x400, 0x1, 0x6}, {0x0, 0x3, 0x3, 0xfffffff9}, {0x6, 0x0, 0x2, 0x8}, {0x4, 0x4, 0x5, 0x2}, {0x987b, 0x3, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x80000000}, {0x8, 0xffffff00, 0x3, 0x7}, {0x3, 0x7, 0x4}, {0x9, 0x6, 0xab, 0x8}, {0x9, 0x51c7, 0x1ff, 0x9}, {0x4, 0x1, 0x6, 0x6}, {0x7, 0x9437, 0x4, 0x2}, {0x81, 0x0, 0xd, 0x6}, {0x5, 0x0, 0x1, 0xfffffffc}, {0x1, 0x24, 0x8, 0x4}, {0x9, 0x10001, 0x7fffffff, 0x7}, {0xfffffffa, 0x101, 0x101, 0x2}, {0x6, 0x4, 0x8, 0x9}, {0x1, 0xb765, 0x8, 0x9}, {0x6, 0x6, 0x8, 0x6}, {0x2, 0x70fd, 0x4, 0x4}, {0x96, 0x1, 0x3874c876, 0x7}, {0x9, 0x2, 0x1}, {0x0, 0x7, 0x848, 0x6}, {0x0, 0xfffff801, 0x4, 0x4}, {0x2000000, 0x81, 0x5, 0x100}, {0x2, 0x80000000, 0x2, 0xfff}, {0x0, 0x4e, 0x5, 0x401}, {0x6, 0x8f9a, 0x5, 0x4}, {0x9, 0x100, 0x41, 0x7}, {0x9, 0xfffffff8, 0x4, 0xfffffff9}, {0xe, 0xfffffffb, 0xb, 0x9}, {0x7, 0x7, 0x5, 0x9}, {0x0, 0x0, 0x7, 0x7}, {0x6, 0x4, 0x259, 0xffff0001}, {0x2, 0xfffffffd, 0x9d3, 0x3}, {0x8, 0xbf4, 0xff, 0x204}, {0x7, 0x36, 0x9, 0x80000000}, {0x6, 0x5, 0xe4e, 0x2}, {0x400, 0x5, 0x80, 0x4f57}, {0x4, 0x1, 0x7}, {0x7, 0x5, 0xfffff961, 0x9ada}, {0xaf38, 0x81, 0xf, 0x750}, {0x1, 0x2, 0x6, 0xecc3}, {0x9, 0x80000000, 0x40, 0xcf}, {0x80000001, 0x3, 0x8, 0x6}, {0x0, 0x3, 0x6, 0xb6}, {0xe8, 0x10001, 0x4, 0xa0}, {0x1, 0x5, 0x8, 0x9a0}, {0xf49f, 0x3, 0x7, 0x40}, {0x5, 0x12, 0x0, 0x80000000}, {0x8000, 0x93cf934, 0x80000001, 0x8}, {0x5, 0x9a7, 0x9, 0x2}, {0x1, 0x9, 0x7ff, 0x4}, {0x0, 0xfffffff2, 0x6, 0x2}, {0x0, 0xfffffffa, 0x1, 0xffffffff}, {0x5d4, 0x5, 0x8, 0x6}, {0x2, 0x6, 0x4, 0x7b54}, {0x0, 0x8, 0x200000, 0x7fff}, {0x4, 0x4, 0x3, 0x7}, {0x800, 0x0, 0x7, 0x6}, {0x5, 0x9, 0x5, 0x2}, {0x8da, 0xffff6d39, 0xffffffff, 0x46bf6802}, {0x0, 0xc987, 0x4}, {0x9, 0x9, 0x1, 0x1911}, {0x8000, 0x2, 0x4, 0xd7f}, {0x4, 0x5, 0x5}, {0x401, 0x1d9d, 0x9, 0xfff}, {0x40, 0x7, 0xfc37, 0x101}, {0x3, 0x3, 0x10001, 0xfffffff7}, {0x5, 0x3, 0x4d}, {0x10, 0x3, 0x7, 0x7}, {0x1ff, 0x2, 0xef8, 0xfffffffa}, {0x8001, 0x9, 0x80, 0xa}, {0x101, 0xfffffffa, 0x7, 0x5}, {0x58, 0x40, 0x1, 0x6}, {0x20, 0x2, 0x101}, {0xe, 0x4, 0x5, 0x9}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

98.456999ms ago: executing program 4 (id=9130):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x8, 0x0, 0x0}}, 0x10)
timerfd_create(0x1, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xf6c447fee59251f4})
close_range(0xffffffffffffffff, r6, 0x0)

69.977809ms ago: executing program 0 (id=9131):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040))
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0x13b}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x2, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xc, 0x1, '\\$^&(`[\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000540))
ptrace$cont(0x21, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x32, &(0x7f0000001100)={0x12, 0x80, 0x200})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r12, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
close(r7)

0s ago: executing program 0 (id=9132):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x100800)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x5, 0x29, 0x1, 0x4145, 0x0, [0xd, 0x3, 0x6, 0x2]})
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, &(0x7f0000000140)=0xc)
prlimit64(r1, 0x0, &(0x7f0000000180)={0x1, 0x4}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x81000) (async)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x81000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x8, 0x2}}, './file0\x00'})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pI4   \x00'}, 0x20)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@local}, &(0x7f0000000640)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@local, <r5=>0x0}, &(0x7f0000000640)=0x14)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x9}, {0xe, 0x4}, {0x9}, {0x8}, {0x0, 0x1}, {0xf}]}, @fwd={0xa}, @float={0x5, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x30, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000700)=""/48, 0x80, 0x30, 0x1, 0x10001}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x22, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x2, 0x3, 0x2, 0x1, 0x3, 0xfffffffffffffffc, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x79, &(0x7f0000000980)=""/121, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x2, 0xd, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x1, 0x5, 0x3, 0x4}, {0x1, 0x2, 0xe, 0x9}], 0x10, 0x6}, 0x94)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x101001, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) (async)
r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0x1, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000e80)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x15, 0x1c, &(0x7f00000003c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd3a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @generic={0xda, 0x1, 0xa, 0xbb, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x5, 0x2, 0x1, 0xffc0, 0x9}], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000500)=""/195, 0x41000, 0xb8c167abd7e90939, '\x00', r5, @fallback=0x31, r6, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x5, 0x4, 0x5}, 0x10, 0x0, r7, 0x6, &(0x7f0000000d00)=[r8, r9, 0x1, r10, r11], &(0x7f0000000d40)=[{0x0, 0x5, 0x8, 0x2}, {0x5, 0x1, 0x1, 0x6}, {0x5, 0x1, 0x4, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xf, 0xc}, {0x0, 0x2, 0x2, 0xc}], 0x10, 0x400000, @value=r12}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x15, 0x1c, &(0x7f00000003c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd3a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @generic={0xda, 0x1, 0xa, 0xbb, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x5, 0x2, 0x1, 0xffc0, 0x9}], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000500)=""/195, 0x41000, 0xb8c167abd7e90939, '\x00', r5, @fallback=0x31, r6, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x5, 0x4, 0x5}, 0x10, 0x0, r7, 0x6, &(0x7f0000000d00)=[r8, r9, 0x1, r10, r11], &(0x7f0000000d40)=[{0x0, 0x5, 0x8, 0x2}, {0x5, 0x1, 0x1, 0x6}, {0x5, 0x1, 0x4, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xf, 0xc}, {0x0, 0x2, 0x2, 0xc}], 0x10, 0x400000, @value=r12}, 0x94)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0)
r13 = dup(r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r13) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r13)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, <r14=>r13}, './file0\x00'})
sendto$packet(r14, &(0x7f0000000f80)="24630210aa720543794c51cc9d36dfe8b4bde8f6ba723e9fd2900ab13824d8d1672142a51da746c3827b", 0x2a, 0x4000004, &(0x7f0000000fc0)={0x11, 0x6, r5, 0x1, 0x3, 0x6, @remote}, 0x14)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0xf)
chmod(&(0x7f0000001000)='./file0\x00', 0x4) (async)
chmod(&(0x7f0000001000)='./file0\x00', 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0x6, 0xd, 0xeac, 0x1014, r3, 0xcc, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xf}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0x6, 0xd, 0xeac, 0x1014, r3, 0xcc, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xf}, 0x50)
getpgid(r1) (async)
r15 = getpgid(r1)
capget(&(0x7f00000010c0)={0x19980330, r15}, &(0x7f0000001100)={0x5, 0x3, 0x6, 0x4, 0x1, 0x5})
getsockopt$MRT(r8, 0x0, 0xd0, &(0x7f0000001140), &(0x7f0000001180)=0x4)

kernel console output (not intermixed with test programs):

[T27459]  ? vfs_write+0x75e/0x8e0
[  505.200118][T27459]  __x64_sys_clone+0xe6/0x120
[  505.200144][T27459]  x64_sys_call+0x2c59/0x2fb0
[  505.200166][T27459]  do_syscall_64+0xd2/0x200
[  505.200185][T27459]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  505.200280][T27459]  ? clear_bhb_loop+0x40/0x90
[  505.200301][T27459]  ? clear_bhb_loop+0x40/0x90
[  505.200366][T27459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.200387][T27459] RIP: 0033:0x7fdb7c34e929
[  505.200400][T27459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.200415][T27459] RSP: 002b:00007fdb7a974fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  505.200431][T27459] RAX: ffffffffffffffda RBX: 00007fdb7c576160 RCX: 00007fdb7c34e929
[  505.200446][T27459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  505.200459][T27459] RBP: 00007fdb7a975090 R08: 0000000000000000 R09: 0000000000000000
[  505.200472][T27459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  505.200484][T27459] R13: 0000000000000000 R14: 00007fdb7c576160 R15: 00007ffc00a6f2a8
[  505.200502][T27459]  </TASK>
[  505.240793][T27462] FAULT_INJECTION: forcing a failure.
[  505.240793][T27462] name failslab, interval 1, probability 0, space 0, times 0
[  505.240844][T27462] CPU: 0 UID: 0 PID: 27462 Comm: syz.6.8195 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  505.240872][T27462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  505.240885][T27462] Call Trace:
[  505.240891][T27462]  <TASK>
[  505.240899][T27462]  __dump_stack+0x1d/0x30
[  505.240917][T27462]  dump_stack_lvl+0xe8/0x140
[  505.240950][T27462]  dump_stack+0x15/0x1b
[  505.240964][T27462]  should_fail_ex+0x265/0x280
[  505.240992][T27462]  ? __se_sys_mount+0xef/0x2e0
[  505.241082][T27462]  should_failslab+0x8c/0xb0
[  505.241106][T27462]  __kmalloc_cache_noprof+0x4c/0x320
[  505.241133][T27462]  ? memdup_user+0x99/0xd0
[  505.241165][T27462]  __se_sys_mount+0xef/0x2e0
[  505.241179][T27462]  ? fput+0x8f/0xc0
[  505.241233][T27462]  ? ksys_write+0x192/0x1a0
[  505.241327][T27462]  __x64_sys_mount+0x67/0x80
[  505.241345][T27462]  x64_sys_call+0xd36/0x2fb0
[  505.241366][T27462]  do_syscall_64+0xd2/0x200
[  505.241385][T27462]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  505.241408][T27462]  ? clear_bhb_loop+0x40/0x90
[  505.241476][T27462]  ? clear_bhb_loop+0x40/0x90
[  505.241498][T27462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.241519][T27462] RIP: 0033:0x7f6860ade929
[  505.241532][T27462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.241569][T27462] RSP: 002b:00007f685f147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  505.241628][T27462] RAX: ffffffffffffffda RBX: 00007f6860d05fa0 RCX: 00007f6860ade929
[  505.241657][T27462] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000
[  505.241670][T27462] RBP: 00007f685f147090 R08: 0000200000000400 R09: 0000000000000000
[  505.241684][T27462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.241720][T27462] R13: 0000000000000000 R14: 00007f6860d05fa0 R15: 00007ffe8961dde8
[  505.241734][T27462]  </TASK>
[  505.500736][T27471] bond1: entered promiscuous mode
[  505.584515][T27478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  505.588800][T27471] bond1: entered allmulticast mode
[  505.589080][T27471] 8021q: adding VLAN 0 to HW filter on device bond1
[  505.702848][T27471] bond1 (unregistering): Released all slaves
[  506.088756][T27518] $H�: renamed from bond0 (while UP)
[  506.095744][T27518] $H�: entered promiscuous mode
[  506.100940][T27518] bond_slave_0: entered promiscuous mode
[  506.106714][T27518] bond_slave_1: entered promiscuous mode
[  506.138477][T27522] lo speed is unknown, defaulting to 1000
[  506.675732][T27552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8224'.
[  506.792924][T27561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  506.891050][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8235'.
[  506.926290][T27581] lo speed is unknown, defaulting to 1000
[  507.080598][T27604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8245'.
[  507.124809][T27607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8248'.
[  507.395942][T27631] FAULT_INJECTION: forcing a failure.
[  507.395942][T27631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.409047][T27631] CPU: 0 UID: 0 PID: 27631 Comm: syz.0.8256 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  507.409070][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.409087][T27631] Call Trace:
[  507.409093][T27631]  <TASK>
[  507.409099][T27631]  __dump_stack+0x1d/0x30
[  507.409120][T27631]  dump_stack_lvl+0xe8/0x140
[  507.409176][T27631]  dump_stack+0x15/0x1b
[  507.409257][T27631]  should_fail_ex+0x265/0x280
[  507.409286][T27631]  should_fail+0xb/0x20
[  507.409327][T27631]  should_fail_usercopy+0x1a/0x20
[  507.409392][T27631]  _copy_to_user+0x20/0xa0
[  507.409410][T27631]  simple_read_from_buffer+0xb5/0x130
[  507.409441][T27631]  proc_fail_nth_read+0x100/0x140
[  507.409481][T27631]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  507.409514][T27631]  vfs_read+0x1a0/0x6f0
[  507.409563][T27631]  ? __rcu_read_unlock+0x4f/0x70
[  507.409652][T27631]  ? __fget_files+0x184/0x1c0
[  507.409670][T27631]  ksys_read+0xda/0x1a0
[  507.409704][T27631]  __x64_sys_read+0x40/0x50
[  507.409734][T27631]  x64_sys_call+0x2d77/0x2fb0
[  507.409787][T27631]  do_syscall_64+0xd2/0x200
[  507.409852][T27631]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  507.409878][T27631]  ? clear_bhb_loop+0x40/0x90
[  507.409897][T27631]  ? clear_bhb_loop+0x40/0x90
[  507.409930][T27631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.409948][T27631] RIP: 0033:0x7fdb7c34d33c
[  507.409974][T27631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  507.409993][T27631] RSP: 002b:00007fdb7a9b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  507.410012][T27631] RAX: ffffffffffffffda RBX: 00007fdb7c575fa0 RCX: 00007fdb7c34d33c
[  507.410025][T27631] RDX: 000000000000000f RSI: 00007fdb7a9b70a0 RDI: 0000000000000004
[  507.410038][T27631] RBP: 00007fdb7a9b7090 R08: 0000000000000000 R09: 0000000000000000
[  507.410050][T27631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.410104][T27631] R13: 0000000000000000 R14: 00007fdb7c575fa0 R15: 00007ffc00a6f2a8
[  507.410120][T27631]  </TASK>
[  507.639693][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8261'.
[  508.101857][T27676] FAULT_INJECTION: forcing a failure.
[  508.101857][T27676] name failslab, interval 1, probability 0, space 0, times 0
[  508.114566][T27676] CPU: 0 UID: 0 PID: 27676 Comm: syz.2.8275 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  508.114590][T27676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  508.114600][T27676] Call Trace:
[  508.114606][T27676]  <TASK>
[  508.114613][T27676]  __dump_stack+0x1d/0x30
[  508.114635][T27676]  dump_stack_lvl+0xe8/0x140
[  508.114732][T27676]  dump_stack+0x15/0x1b
[  508.114749][T27676]  should_fail_ex+0x265/0x280
[  508.114814][T27676]  should_failslab+0x8c/0xb0
[  508.114834][T27676]  kmem_cache_alloc_noprof+0x50/0x310
[  508.114861][T27676]  ? __inet_hash_connect+0x7a2/0x1350
[  508.114934][T27676]  ? inet_sk_get_local_port_range+0x89/0x100
[  508.114953][T27676]  __inet_hash_connect+0x7a2/0x1350
[  508.114995][T27676]  ? __pfx___inet6_check_established+0x10/0x10
[  508.115023][T27676]  inet6_hash_connect+0xaf/0xc0
[  508.115043][T27676]  tcp_v6_connect+0x972/0xc10
[  508.115132][T27676]  __inet_stream_connect+0x169/0x7e0
[  508.115176][T27676]  ? tcp_sendmsg_fastopen+0x172/0x520
[  508.115218][T27676]  ? should_failslab+0x8c/0xb0
[  508.115341][T27676]  ? __kmalloc_cache_noprof+0x189/0x320
[  508.115364][T27676]  tcp_sendmsg_fastopen+0x43a/0x520
[  508.115386][T27676]  tcp_sendmsg_locked+0x27be/0x2cc0
[  508.115441][T27676]  ? mntput_no_expire+0x6f/0x3c0
[  508.115469][T27676]  ? mntput+0x4b/0x80
[  508.115641][T27676]  ? __rcu_read_unlock+0x4f/0x70
[  508.115659][T27676]  ? avc_has_perm_noaudit+0x1b1/0x200
[  508.115686][T27676]  ? avc_has_perm+0xd3/0x150
[  508.115756][T27676]  ? _raw_spin_unlock_bh+0x36/0x40
[  508.115781][T27676]  ? __pfx_tcp_sendmsg+0x10/0x10
[  508.115807][T27676]  tcp_sendmsg+0x2f/0x50
[  508.115905][T27676]  inet6_sendmsg+0x76/0xd0
[  508.115924][T27676]  __sock_sendmsg+0x8b/0x180
[  508.115994][T27676]  __sys_sendto+0x268/0x330
[  508.116029][T27676]  __x64_sys_sendto+0x76/0x90
[  508.116085][T27676]  x64_sys_call+0x2eb6/0x2fb0
[  508.116107][T27676]  do_syscall_64+0xd2/0x200
[  508.116126][T27676]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  508.116148][T27676]  ? clear_bhb_loop+0x40/0x90
[  508.116167][T27676]  ? clear_bhb_loop+0x40/0x90
[  508.116214][T27676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.116236][T27676] RIP: 0033:0x7fc7854de929
[  508.116282][T27676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.116369][T27676] RSP: 002b:00007fc783b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.116389][T27676] RAX: ffffffffffffffda RBX: 00007fc785705fa0 RCX: 00007fc7854de929
[  508.116444][T27676] RDX: fffffffffffffea7 RSI: 0000200000f6f000 RDI: 0000000000000003
[  508.116458][T27676] RBP: 00007fc783b47090 R08: 0000200000b63fe4 R09: 000000000000001c
[  508.116471][T27676] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001
[  508.116484][T27676] R13: 0000000000000000 R14: 00007fc785705fa0 R15: 00007ffe5c272028
[  508.116503][T27676]  </TASK>
[  508.458445][T27680] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  508.549784][T27692] lo speed is unknown, defaulting to 1000
[  508.715290][T27714] FAULT_INJECTION: forcing a failure.
[  508.715290][T27714] name failslab, interval 1, probability 0, space 0, times 0
[  508.727992][T27714] CPU: 0 UID: 0 PID: 27714 Comm: syz.5.8292 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  508.728022][T27714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  508.728040][T27714] Call Trace:
[  508.728047][T27714]  <TASK>
[  508.728113][T27714]  __dump_stack+0x1d/0x30
[  508.728133][T27714]  dump_stack_lvl+0xe8/0x140
[  508.728149][T27714]  dump_stack+0x15/0x1b
[  508.728188][T27714]  should_fail_ex+0x265/0x280
[  508.728287][T27714]  ? __se_sys_mount+0xef/0x2e0
[  508.728307][T27714]  should_failslab+0x8c/0xb0
[  508.728346][T27714]  __kmalloc_cache_noprof+0x4c/0x320
[  508.728372][T27714]  ? memdup_user+0x99/0xd0
[  508.728396][T27714]  __se_sys_mount+0xef/0x2e0
[  508.728414][T27714]  ? fput+0x8f/0xc0
[  508.728560][T27714]  ? ksys_write+0x192/0x1a0
[  508.728585][T27714]  __x64_sys_mount+0x67/0x80
[  508.728600][T27714]  x64_sys_call+0xd36/0x2fb0
[  508.728621][T27714]  do_syscall_64+0xd2/0x200
[  508.728640][T27714]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  508.728679][T27714]  ? clear_bhb_loop+0x40/0x90
[  508.728760][T27714]  ? clear_bhb_loop+0x40/0x90
[  508.728781][T27714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.728798][T27714] RIP: 0033:0x7f348600e929
[  508.728811][T27714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.728867][T27714] RSP: 002b:00007f3484677038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  508.728887][T27714] RAX: ffffffffffffffda RBX: 00007f3486235fa0 RCX: 00007f348600e929
[  508.728906][T27714] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000
[  508.728956][T27714] RBP: 00007f3484677090 R08: 0000200000000400 R09: 0000000000000000
[  508.728969][T27714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.728986][T27714] R13: 0000000000000000 R14: 00007f3486235fa0 R15: 00007ffe6f266838
[  508.729004][T27714]  </TASK>
[  508.947474][   T29] kauditd_printk_skb: 1026 callbacks suppressed
[  508.947551][   T29] audit: type=1400 audit(508.939:55328): avc:  denied  { map_create } for  pid=27721 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  508.972519][   T29] audit: type=1400 audit(508.939:55329): avc:  denied  { map_create } for  pid=27721 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  508.991237][   T29] audit: type=1400 audit(508.939:55330): avc:  denied  { prog_load } for  pid=27721 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.009850][   T29] audit: type=1400 audit(508.939:55331): avc:  denied  { prog_load } for  pid=27721 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.028474][   T29] audit: type=1400 audit(508.939:55332): avc:  denied  { prog_load } for  pid=27721 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.137372][   T29] audit: type=1400 audit(509.049:55333): avc:  denied  { write } for  pid=27703 comm="syz.6.8286" name="tcp6" dev="proc" ino=4026532701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  509.159652][   T29] audit: type=1400 audit(509.049:55334): avc:  denied  { prog_load } for  pid=27703 comm="syz.6.8286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.178294][   T29] audit: type=1400 audit(509.049:55335): avc:  denied  { prog_load } for  pid=27703 comm="syz.6.8286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.197009][   T29] audit: type=1400 audit(509.049:55336): avc:  denied  { load_policy } for  pid=27703 comm="syz.6.8286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0
[  509.216832][   T29] audit: type=1400 audit(509.059:55337): avc:  denied  { map_create } for  pid=27725 comm="syz.5.8296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  509.250138][T27731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27731 comm=syz.2.8298
[  509.263800][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8298'.
[  509.275477][T27731] netlink: 'syz.2.8298': attribute type 15 has an invalid length.
[  509.304535][T27744] FAULT_INJECTION: forcing a failure.
[  509.304535][T27744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.317702][T27744] CPU: 0 UID: 0 PID: 27744 Comm: syz.2.8303 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  509.317727][T27744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.317740][T27744] Call Trace:
[  509.317746][T27744]  <TASK>
[  509.317811][T27744]  __dump_stack+0x1d/0x30
[  509.317831][T27744]  dump_stack_lvl+0xe8/0x140
[  509.317851][T27744]  dump_stack+0x15/0x1b
[  509.317915][T27744]  should_fail_ex+0x265/0x280
[  509.317940][T27744]  should_fail+0xb/0x20
[  509.317964][T27744]  should_fail_usercopy+0x1a/0x20
[  509.318087][T27744]  _copy_to_user+0x20/0xa0
[  509.318108][T27744]  simple_read_from_buffer+0xb5/0x130
[  509.318170][T27744]  proc_fail_nth_read+0x100/0x140
[  509.318207][T27744]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  509.318239][T27744]  vfs_read+0x1a0/0x6f0
[  509.318275][T27744]  ? __rcu_read_unlock+0x4f/0x70
[  509.318298][T27744]  ? __fget_files+0x184/0x1c0
[  509.318320][T27744]  ksys_read+0xda/0x1a0
[  509.318379][T27744]  __x64_sys_read+0x40/0x50
[  509.318425][T27744]  x64_sys_call+0x2d77/0x2fb0
[  509.318519][T27744]  do_syscall_64+0xd2/0x200
[  509.318535][T27744]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.318555][T27744]  ? clear_bhb_loop+0x40/0x90
[  509.318637][T27744]  ? clear_bhb_loop+0x40/0x90
[  509.318725][T27744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.318745][T27744] RIP: 0033:0x7fc7854dd33c
[  509.318761][T27744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  509.318832][T27744] RSP: 002b:00007fc783b47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  509.318852][T27744] RAX: ffffffffffffffda RBX: 00007fc785705fa0 RCX: 00007fc7854dd33c
[  509.318883][T27744] RDX: 000000000000000f RSI: 00007fc783b470a0 RDI: 0000000000000008
[  509.318894][T27744] RBP: 00007fc783b47090 R08: 0000000000000000 R09: 0000000000000000
[  509.318904][T27744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.318914][T27744] R13: 0000000000000000 R14: 00007fc785705fa0 R15: 00007ffe5c272028
[  509.318988][T27744]  </TASK>
[  509.615351][T27758] lo speed is unknown, defaulting to 1000
[  509.673563][T27757] lo speed is unknown, defaulting to 1000
[  509.832831][T27777] FAULT_INJECTION: forcing a failure.
[  509.832831][T27777] name failslab, interval 1, probability 0, space 0, times 0
[  509.845505][T27777] CPU: 0 UID: 0 PID: 27777 Comm: syz.6.8313 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  509.845533][T27777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.845545][T27777] Call Trace:
[  509.845551][T27777]  <TASK>
[  509.845558][T27777]  __dump_stack+0x1d/0x30
[  509.845581][T27777]  dump_stack_lvl+0xe8/0x140
[  509.845722][T27777]  dump_stack+0x15/0x1b
[  509.845827][T27777]  should_fail_ex+0x265/0x280
[  509.845857][T27777]  ? alloc_pipe_info+0xae/0x350
[  509.845876][T27777]  should_failslab+0x8c/0xb0
[  509.845897][T27777]  __kmalloc_cache_noprof+0x4c/0x320
[  509.845959][T27777]  alloc_pipe_info+0xae/0x350
[  509.846050][T27777]  splice_direct_to_actor+0x592/0x680
[  509.846079][T27777]  ? kstrtouint_from_user+0x9f/0xf0
[  509.846103][T27777]  ? __pfx_direct_splice_actor+0x10/0x10
[  509.846172][T27777]  ? __rcu_read_unlock+0x4f/0x70
[  509.846195][T27777]  ? get_pid_task+0x96/0xd0
[  509.846215][T27777]  ? avc_policy_seqno+0x15/0x30
[  509.846244][T27777]  ? selinux_file_permission+0x1e4/0x320
[  509.846268][T27777]  do_splice_direct+0xda/0x150
[  509.846296][T27777]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  509.846338][T27777]  do_sendfile+0x380/0x650
[  509.846375][T27777]  __x64_sys_sendfile64+0x105/0x150
[  509.846399][T27777]  x64_sys_call+0xb39/0x2fb0
[  509.846416][T27777]  do_syscall_64+0xd2/0x200
[  509.846435][T27777]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.846461][T27777]  ? clear_bhb_loop+0x40/0x90
[  509.846539][T27777]  ? clear_bhb_loop+0x40/0x90
[  509.846556][T27777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.846574][T27777] RIP: 0033:0x7f6860ade929
[  509.846587][T27777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.846604][T27777] RSP: 002b:00007f685f126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  509.846625][T27777] RAX: ffffffffffffffda RBX: 00007f6860d06080 RCX: 00007f6860ade929
[  509.846639][T27777] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  509.846651][T27777] RBP: 00007f685f126090 R08: 0000000000000000 R09: 0000000000000000
[  509.846664][T27777] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[  509.846677][T27777] R13: 0000000000000000 R14: 00007f6860d06080 R15: 00007ffe8961dde8
[  509.846694][T27777]  </TASK>
[  511.240117][T27803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8324'.
[  511.256209][T27803] 9pnet_fd: Insufficient options for proto=fd
[  511.408079][T27799] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  511.419190][T27799] SELinux: failed to load policy
[  511.441058][T27797] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  511.451380][T27797] SELinux: failed to load policy
[  511.702287][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8331'.
[  511.809462][T27838] FAULT_INJECTION: forcing a failure.
[  511.809462][T27838] name failslab, interval 1, probability 0, space 0, times 0
[  511.822144][T27838] CPU: 0 UID: 0 PID: 27838 Comm: syz.6.8333 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  511.822206][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.822216][T27838] Call Trace:
[  511.822222][T27838]  <TASK>
[  511.822228][T27838]  __dump_stack+0x1d/0x30
[  511.822246][T27838]  dump_stack_lvl+0xe8/0x140
[  511.822264][T27838]  dump_stack+0x15/0x1b
[  511.822282][T27838]  should_fail_ex+0x265/0x280
[  511.822344][T27838]  should_failslab+0x8c/0xb0
[  511.822358][T27838]  kmem_cache_alloc_node_noprof+0x57/0x320
[  511.822386][T27838]  ? __alloc_skb+0x101/0x320
[  511.822413][T27838]  ? tcp_chrono_stop+0x19d/0x210
[  511.822438][T27838]  __alloc_skb+0x101/0x320
[  511.822488][T27838]  tcp_stream_alloc_skb+0x2d/0x1d0
[  511.822574][T27838]  tcp_connect+0xce9/0x2290
[  511.822587][T27838]  ? tcp_fastopen_defer_connect+0x69/0x1e0
[  511.822679][T27838]  tcp_v6_connect+0xb50/0xc10
[  511.822698][T27838]  __inet_stream_connect+0x169/0x7e0
[  511.822715][T27838]  ? tcp_sendmsg_fastopen+0x172/0x520
[  511.822767][T27838]  ? should_failslab+0x8c/0xb0
[  511.822816][T27838]  ? __kmalloc_cache_noprof+0x189/0x320
[  511.822832][T27838]  tcp_sendmsg_fastopen+0x43a/0x520
[  511.822847][T27838]  tcp_sendmsg_locked+0x27be/0x2cc0
[  511.822889][T27838]  ? mntput_no_expire+0x6f/0x3c0
[  511.822904][T27838]  ? mntput+0x4b/0x80
[  511.822950][T27838]  ? __rcu_read_unlock+0x4f/0x70
[  511.822962][T27838]  ? avc_has_perm_noaudit+0x1b1/0x200
[  511.823050][T27838]  ? avc_has_perm+0xd3/0x150
[  511.823094][T27838]  ? _raw_spin_unlock_bh+0x36/0x40
[  511.823146][T27838]  ? __pfx_tcp_sendmsg+0x10/0x10
[  511.823160][T27838]  tcp_sendmsg+0x2f/0x50
[  511.823173][T27838]  inet6_sendmsg+0x76/0xd0
[  511.823233][T27838]  __sock_sendmsg+0x8b/0x180
[  511.823249][T27838]  __sys_sendto+0x268/0x330
[  511.823269][T27838]  __x64_sys_sendto+0x76/0x90
[  511.823285][T27838]  x64_sys_call+0x2eb6/0x2fb0
[  511.823360][T27838]  do_syscall_64+0xd2/0x200
[  511.823375][T27838]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  511.823400][T27838]  ? clear_bhb_loop+0x40/0x90
[  511.823411][T27838]  ? clear_bhb_loop+0x40/0x90
[  511.823423][T27838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.823434][T27838] RIP: 0033:0x7f6860ade929
[  511.823444][T27838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.823464][T27838] RSP: 002b:00007f685f147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  511.823484][T27838] RAX: ffffffffffffffda RBX: 00007f6860d05fa0 RCX: 00007f6860ade929
[  511.823499][T27838] RDX: fffffffffffffea7 RSI: 0000200000f6f000 RDI: 0000000000000005
[  511.823519][T27838] RBP: 00007f685f147090 R08: 0000200000b63fe4 R09: 000000000000001c
[  511.823526][T27838] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001
[  511.823568][T27838] R13: 0000000000000000 R14: 00007f6860d05fa0 R15: 00007ffe8961dde8
[  511.823579][T27838]  </TASK>
[  512.389238][T27856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8340'.
[  512.665896][T27861] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  512.676165][T27861] SELinux: failed to load policy
[  512.762890][T27867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8342'.
[  512.817659][T27875] netlink: 'syz.5.8345': attribute type 39 has an invalid length.
[  513.127571][T27886] 9pnet_fd: Insufficient options for proto=fd
[  513.287577][T27894] FAULT_INJECTION: forcing a failure.
[  513.287577][T27894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.300699][T27894] CPU: 1 UID: 0 PID: 27894 Comm: syz.4.8351 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  513.300729][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  513.300742][T27894] Call Trace:
[  513.300749][T27894]  <TASK>
[  513.300757][T27894]  __dump_stack+0x1d/0x30
[  513.300779][T27894]  dump_stack_lvl+0xe8/0x140
[  513.300880][T27894]  dump_stack+0x15/0x1b
[  513.300898][T27894]  should_fail_ex+0x265/0x280
[  513.300992][T27894]  should_fail+0xb/0x20
[  513.301071][T27894]  should_fail_usercopy+0x1a/0x20
[  513.301099][T27894]  _copy_from_user+0x1c/0xb0
[  513.301226][T27894]  bpf_test_init+0xdf/0x160
[  513.301252][T27894]  bpf_prog_test_run_skb+0x144/0xbd0
[  513.301413][T27894]  ? __rcu_read_unlock+0x4f/0x70
[  513.301431][T27894]  ? __fget_files+0x184/0x1c0
[  513.301470][T27894]  ? __rcu_read_unlock+0x4f/0x70
[  513.301488][T27894]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  513.301590][T27894]  bpf_prog_test_run+0x22a/0x390
[  513.301606][T27894]  __sys_bpf+0x3dc/0x790
[  513.301635][T27894]  __x64_sys_bpf+0x41/0x50
[  513.301721][T27894]  x64_sys_call+0x2478/0x2fb0
[  513.301822][T27894]  do_syscall_64+0xd2/0x200
[  513.301904][T27894]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  513.301923][T27894]  ? clear_bhb_loop+0x40/0x90
[  513.301940][T27894]  ? clear_bhb_loop+0x40/0x90
[  513.301957][T27894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.301973][T27894] RIP: 0033:0x7f17cb21e929
[  513.302027][T27894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.302041][T27894] RSP: 002b:00007f17c9887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  513.302057][T27894] RAX: ffffffffffffffda RBX: 00007f17cb445fa0 RCX: 00007f17cb21e929
[  513.302067][T27894] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 000000000000000a
[  513.302124][T27894] RBP: 00007f17c9887090 R08: 0000000000000000 R09: 0000000000000000
[  513.302134][T27894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.302144][T27894] R13: 0000000000000000 R14: 00007f17cb445fa0 R15: 00007ffe3ee518d8
[  513.302159][T27894]  </TASK>
[  513.788424][T27913] lo speed is unknown, defaulting to 1000
[  514.110478][   T29] kauditd_printk_skb: 348 callbacks suppressed
[  514.110493][   T29] audit: type=1326 audit(514.109:55686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.140127][   T29] audit: type=1326 audit(514.129:55687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.163118][   T29] audit: type=1326 audit(514.129:55688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.186020][   T29] audit: type=1326 audit(514.129:55689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.208970][   T29] audit: type=1326 audit(514.129:55690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.231878][   T29] audit: type=1326 audit(514.129:55691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.244079][T27933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26368 sclass=netlink_route_socket pid=27933 comm=syz.5.8359
[  514.254828][   T29] audit: type=1326 audit(514.129:55692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.254855][   T29] audit: type=1400 audit(514.129:55693): avc:  denied  { setopt } for  pid=27927 comm="syz.5.8359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  514.309644][   T29] audit: type=1326 audit(514.129:55694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.332550][   T29] audit: type=1326 audit(514.129:55695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  514.694165][T27937] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  514.704478][T27937] SELinux: failed to load policy
[  514.899355][T27953] netlink: 'syz.0.8366': attribute type 39 has an invalid length.
[  515.082595][T27965] SELinux:  policydb version 1811 does not match my version range 15-34
[  515.091736][T27965] SELinux: failed to load policy
[  515.108632][T27965] SELinux:  policydb version -174798662 does not match my version range 15-34
[  515.118315][T27965] SELinux: failed to load policy
[  515.371737][T27969] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  515.382156][T27969] SELinux: failed to load policy
[  515.810781][T27998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8384'.
[  515.906762][T28024] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8393'.
[  516.001556][T28024] FAULT_INJECTION: forcing a failure.
[  516.001556][T28024] name failslab, interval 1, probability 0, space 0, times 0
[  516.014222][T28024] CPU: 0 UID: 0 PID: 28024 Comm: syz.6.8393 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  516.014248][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  516.014260][T28024] Call Trace:
[  516.014266][T28024]  <TASK>
[  516.014273][T28024]  __dump_stack+0x1d/0x30
[  516.014290][T28024]  dump_stack_lvl+0xe8/0x140
[  516.014305][T28024]  dump_stack+0x15/0x1b
[  516.014318][T28024]  should_fail_ex+0x265/0x280
[  516.014352][T28024]  should_failslab+0x8c/0xb0
[  516.014374][T28024]  kmem_cache_alloc_noprof+0x50/0x310
[  516.014398][T28024]  ? mas_alloc_nodes+0x265/0x520
[  516.014418][T28024]  mas_alloc_nodes+0x265/0x520
[  516.014434][T28024]  mas_preallocate+0x33e/0x520
[  516.014461][T28024]  __split_vma+0x240/0x650
[  516.014486][T28024]  vma_modify+0x21e/0xc80
[  516.014509][T28024]  vma_modify_policy+0x101/0x130
[  516.014534][T28024]  mbind_range+0x1b8/0x440
[  516.014551][T28024]  ? mas_find+0x4ea/0x610
[  516.014567][T28024]  __se_sys_mbind+0x648/0xac0
[  516.014595][T28024]  __x64_sys_mbind+0x78/0x90
[  516.014621][T28024]  x64_sys_call+0x14af/0x2fb0
[  516.014642][T28024]  do_syscall_64+0xd2/0x200
[  516.014657][T28024]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  516.014679][T28024]  ? clear_bhb_loop+0x40/0x90
[  516.014697][T28024]  ? clear_bhb_loop+0x40/0x90
[  516.014713][T28024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.014730][T28024] RIP: 0033:0x7f6860ade929
[  516.014742][T28024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  516.014756][T28024] RSP: 002b:00007f685f147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  516.014775][T28024] RAX: ffffffffffffffda RBX: 00007f6860d05fa0 RCX: 00007f6860ade929
[  516.014788][T28024] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000
[  516.014801][T28024] RBP: 00007f685f147090 R08: 0000000000000000 R09: 0000000000000002
[  516.014814][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.014826][T28024] R13: 0000000000000000 R14: 00007f6860d05fa0 R15: 00007ffe8961dde8
[  516.014844][T28024]  </TASK>
[  516.567162][T28057] lo speed is unknown, defaulting to 1000
[  517.039018][T28071] sctp: [Deprecated]: syz.0.8411 (pid 28071) Use of struct sctp_assoc_value in delayed_ack socket option.
[  517.039018][T28071] Use struct sctp_sack_info instead
[  517.296816][T28081] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  517.307191][T28081] SELinux: failed to load policy
[  517.591503][T28104] xt_hashlimit: max too large, truncated to 1048576
[  517.604867][T28094] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  517.618687][T28094] SELinux: failed to load policy
[  517.671723][T28111] pimreg: entered allmulticast mode
[  517.715721][T28111] netlink: 'syz.6.8422': attribute type 10 has an invalid length.
[  517.736696][T28111] team0: Port device dummy0 added
[  517.742422][T28117] netlink: 'syz.6.8422': attribute type 10 has an invalid length.
[  517.752967][T28117] team0: Port device dummy0 removed
[  517.761381][T28117] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  517.767189][T28119] FAULT_INJECTION: forcing a failure.
[  517.767189][T28119] name failslab, interval 1, probability 0, space 0, times 0
[  517.782554][T28119] CPU: 0 UID: 0 PID: 28119 Comm: syz.4.8425 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  517.782583][T28119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  517.782619][T28119] Call Trace:
[  517.782625][T28119]  <TASK>
[  517.782631][T28119]  __dump_stack+0x1d/0x30
[  517.782648][T28119]  dump_stack_lvl+0xe8/0x140
[  517.782665][T28119]  dump_stack+0x15/0x1b
[  517.782683][T28119]  should_fail_ex+0x265/0x280
[  517.782776][T28119]  should_failslab+0x8c/0xb0
[  517.782799][T28119]  __kvmalloc_node_noprof+0x123/0x4e0
[  517.782827][T28119]  ? io_alloc_cache_init+0x31/0xa0
[  517.782846][T28119]  io_alloc_cache_init+0x31/0xa0
[  517.782867][T28119]  io_ring_ctx_alloc+0x2f6/0x6a0
[  517.782895][T28119]  io_uring_create+0x10f/0x610
[  517.782920][T28119]  __se_sys_io_uring_setup+0x1f7/0x210
[  517.782980][T28119]  __x64_sys_io_uring_setup+0x31/0x40
[  517.783005][T28119]  x64_sys_call+0x184b/0x2fb0
[  517.783023][T28119]  do_syscall_64+0xd2/0x200
[  517.783038][T28119]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  517.783130][T28119]  ? clear_bhb_loop+0x40/0x90
[  517.783150][T28119]  ? clear_bhb_loop+0x40/0x90
[  517.783172][T28119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.783194][T28119] RIP: 0033:0x7f17cb21e929
[  517.783216][T28119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.783276][T28119] RSP: 002b:00007f17c9886fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  517.783294][T28119] RAX: ffffffffffffffda RBX: 00007f17cb445fa0 RCX: 00007f17cb21e929
[  517.783308][T28119] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00000000000012c4
[  517.783324][T28119] RBP: 0000200000000100 R08: 0000000000000000 R09: 0000000000000000
[  517.783336][T28119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.783347][T28119] R13: 0000000000000000 R14: 00000000000012c4 R15: 0000000000000000
[  517.783362][T28119]  </TASK>
[  517.783783][T28111] pimreg: left allmulticast mode
[  517.801302][T28119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8425'.
[  517.991543][T28119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8425'.
[  518.217787][T28133] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8429'.
[  518.227627][T28131] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8429'.
[  518.979588][T28146] xt_hashlimit: max too large, truncated to 1048576
[  519.004197][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8431'.
[  519.056754][T28153] FAULT_INJECTION: forcing a failure.
[  519.056754][T28153] name failslab, interval 1, probability 0, space 0, times 0
[  519.069467][T28153] CPU: 0 UID: 0 PID: 28153 Comm: syz.2.8435 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  519.069536][T28153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.069546][T28153] Call Trace:
[  519.069552][T28153]  <TASK>
[  519.069560][T28153]  __dump_stack+0x1d/0x30
[  519.069647][T28153]  dump_stack_lvl+0xe8/0x140
[  519.069667][T28153]  dump_stack+0x15/0x1b
[  519.069684][T28153]  should_fail_ex+0x265/0x280
[  519.069708][T28153]  should_failslab+0x8c/0xb0
[  519.069727][T28153]  __kmalloc_noprof+0xa5/0x3e0
[  519.069820][T28153]  ? usb_alloc_urb+0x42/0xc0
[  519.069848][T28153]  usb_alloc_urb+0x42/0xc0
[  519.069920][T28153]  alloc_async+0x41/0x90
[  519.069936][T28153]  proc_do_submiturb+0x76d/0x1d00
[  519.069960][T28153]  proc_submiturb+0x7b/0xa0
[  519.069992][T28153]  usbdev_ioctl+0xcc2/0x1710
[  519.070041][T28153]  ? __pfx_usbdev_ioctl+0x10/0x10
[  519.070099][T28153]  __se_sys_ioctl+0xce/0x140
[  519.070122][T28153]  __x64_sys_ioctl+0x43/0x50
[  519.070197][T28153]  x64_sys_call+0x19a8/0x2fb0
[  519.070217][T28153]  do_syscall_64+0xd2/0x200
[  519.070277][T28153]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  519.070303][T28153]  ? clear_bhb_loop+0x40/0x90
[  519.070324][T28153]  ? clear_bhb_loop+0x40/0x90
[  519.070347][T28153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.070430][T28153] RIP: 0033:0x7fc7854de929
[  519.070485][T28153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.070503][T28153] RSP: 002b:00007fc783b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.070521][T28153] RAX: ffffffffffffffda RBX: 00007fc785705fa0 RCX: 00007fc7854de929
[  519.070532][T28153] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004
[  519.070621][T28153] RBP: 00007fc783b47090 R08: 0000000000000000 R09: 0000000000000000
[  519.070631][T28153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.070641][T28153] R13: 0000000000000000 R14: 00007fc785705fa0 R15: 00007ffe5c272028
[  519.070656][T28153]  </TASK>
[  519.289347][T28151] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8434'.
[  519.289454][   T29] kauditd_printk_skb: 495 callbacks suppressed
[  519.289467][   T29] audit: type=1400 audit(519.289:56191): avc:  denied  { nlmsg_write } for  pid=28150 comm="syz.6.8434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  519.374553][   T29] audit: type=1400 audit(519.299:56192): avc:  denied  { listen } for  pid=28150 comm="syz.6.8434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  519.393862][   T29] audit: type=1400 audit(519.299:56193): avc:  denied  { accept } for  pid=28150 comm="syz.6.8434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  519.413233][   T29] audit: type=1400 audit(519.299:56194): avc:  denied  { read } for  pid=28150 comm="syz.6.8434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  519.432293][   T29] audit: type=1400 audit(519.369:56195): avc:  denied  { read write } for  pid=28163 comm="syz.2.8440" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  519.450981][T28164] Cannot find add_set index 0 as target
[  519.456014][   T29] audit: type=1400 audit(519.369:56196): avc:  denied  { open } for  pid=28163 comm="syz.2.8440" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  519.469356][T28164] SELinux: security_context_str_to_sid (��) failed with errno=-22
[  519.486170][   T29] audit: type=1400 audit(519.409:56197): avc:  denied  { create } for  pid=28163 comm="syz.2.8440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  519.513095][   T29] audit: type=1400 audit(519.409:56198): avc:  denied  { write } for  pid=28163 comm="syz.2.8440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  519.560539][   T29] audit: type=1326 audit(519.559:56199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28179 comm="syz.2.8442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7854de929 code=0x7ffc0000
[  519.583553][   T29] audit: type=1326 audit(519.559:56200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28179 comm="syz.2.8442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7854de929 code=0x7ffc0000
[  519.607740][T28166] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  519.618093][T28166] SELinux: failed to load policy
[  519.623192][T28158] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  519.630792][T28180] lo speed is unknown, defaulting to 1000
[  519.633566][T28158] SELinux: failed to load policy
[  519.712161][T28187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.766841][T28187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.819841][T28187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.973679][T28187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.041431][T28187] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.062806][T28187] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.072608][T28199] FAULT_INJECTION: forcing a failure.
[  520.072608][T28199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  520.085693][T28199] CPU: 1 UID: 0 PID: 28199 Comm: syz.4.8448 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  520.085717][T28199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  520.085727][T28199] Call Trace:
[  520.085732][T28199]  <TASK>
[  520.085768][T28199]  __dump_stack+0x1d/0x30
[  520.085790][T28199]  dump_stack_lvl+0xe8/0x140
[  520.085806][T28199]  dump_stack+0x15/0x1b
[  520.085820][T28199]  should_fail_ex+0x265/0x280
[  520.085872][T28199]  should_fail+0xb/0x20
[  520.085897][T28199]  should_fail_usercopy+0x1a/0x20
[  520.085923][T28199]  _copy_from_user+0x1c/0xb0
[  520.086000][T28199]  ___sys_sendmsg+0xc1/0x1d0
[  520.086101][T28199]  __x64_sys_sendmsg+0xd4/0x160
[  520.086130][T28199]  x64_sys_call+0x2999/0x2fb0
[  520.086151][T28199]  do_syscall_64+0xd2/0x200
[  520.086170][T28199]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  520.086266][T28199]  ? clear_bhb_loop+0x40/0x90
[  520.086352][T28199]  ? clear_bhb_loop+0x40/0x90
[  520.086371][T28199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.086393][T28199] RIP: 0033:0x7f17cb21e929
[  520.086409][T28199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  520.086426][T28199] RSP: 002b:00007f17c9887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  520.086480][T28199] RAX: ffffffffffffffda RBX: 00007f17cb445fa0 RCX: 00007f17cb21e929
[  520.086494][T28199] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  520.086507][T28199] RBP: 00007f17c9887090 R08: 0000000000000000 R09: 0000000000000000
[  520.086520][T28199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.086533][T28199] R13: 0000000000000000 R14: 00007f17cb445fa0 R15: 00007ffe3ee518d8
[  520.086596][T28199]  </TASK>
[  520.266530][T28187] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.283060][T28187] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.350407][T28203] geneve2: entered promiscuous mode
[  520.355655][T28203] geneve2: entered allmulticast mode
[  520.464733][T28218] xt_hashlimit: max too large, truncated to 1048576
[  520.472199][T28216] lo speed is unknown, defaulting to 1000
[  520.706671][T28226] ipvlan0: entered promiscuous mode
[  520.712887][T28226] bridge0: port 3(ipvlan0) entered blocking state
[  520.719462][T28226] bridge0: port 3(ipvlan0) entered disabled state
[  520.726066][T28226] ipvlan0: entered allmulticast mode
[  520.731505][T28226] bridge0: entered allmulticast mode
[  520.737278][T28226] ipvlan0: left allmulticast mode
[  520.742333][T28226] bridge0: left allmulticast mode
[  520.837252][T28227] lo speed is unknown, defaulting to 1000
[  520.930435][T28229] xt_hashlimit: max too large, truncated to 1048576
[  521.089342][T28236] FAULT_INJECTION: forcing a failure.
[  521.089342][T28236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.102540][T28236] CPU: 1 UID: 0 PID: 28236 Comm: syz.2.8462 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  521.102582][T28236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  521.102593][T28236] Call Trace:
[  521.102602][T28236]  <TASK>
[  521.102610][T28236]  __dump_stack+0x1d/0x30
[  521.102690][T28236]  dump_stack_lvl+0xe8/0x140
[  521.102706][T28236]  dump_stack+0x15/0x1b
[  521.102720][T28236]  should_fail_ex+0x265/0x280
[  521.102878][T28236]  should_fail+0xb/0x20
[  521.102977][T28236]  should_fail_usercopy+0x1a/0x20
[  521.103077][T28236]  strncpy_from_user+0x25/0x230
[  521.103100][T28236]  ? __kmalloc_cache_noprof+0x189/0x320
[  521.103141][T28236]  __se_sys_memfd_create+0x1ff/0x590
[  521.103181][T28236]  __x64_sys_memfd_create+0x31/0x40
[  521.103205][T28236]  x64_sys_call+0x122f/0x2fb0
[  521.103273][T28236]  do_syscall_64+0xd2/0x200
[  521.103292][T28236]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  521.103319][T28236]  ? clear_bhb_loop+0x40/0x90
[  521.103344][T28236]  ? clear_bhb_loop+0x40/0x90
[  521.103362][T28236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.103442][T28236] RIP: 0033:0x7fc7854de929
[  521.103458][T28236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.103475][T28236] RSP: 002b:00007fc783b46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  521.103495][T28236] RAX: ffffffffffffffda RBX: 000000000000045d RCX: 00007fc7854de929
[  521.103508][T28236] RDX: 00007fc783b46ef0 RSI: 0000000000000000 RDI: 00007fc7855614cc
[  521.103547][T28236] RBP: 0000200000000a00 R08: 00007fc783b46bb7 R09: 00007fc783b46e40
[  521.103560][T28236] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180
[  521.103651][T28236] R13: 00007fc783b46ef0 R14: 00007fc783b46eb0 R15: 0000200000000200
[  521.103667][T28236]  </TASK>
[  521.549865][T28253] xt_CT: You must specify a L4 protocol and not use inversions on it
[  521.562800][T28256] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  521.573340][T28256] SELinux: failed to load policy
[  522.089770][T28277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8474'.
[  522.605698][T28310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8488'.
[  522.616884][T28312] FAULT_INJECTION: forcing a failure.
[  522.616884][T28312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  522.630028][T28312] CPU: 1 UID: 0 PID: 28312 Comm: syz.2.8489 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  522.630056][T28312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  522.630068][T28312] Call Trace:
[  522.630075][T28312]  <TASK>
[  522.630082][T28312]  __dump_stack+0x1d/0x30
[  522.630103][T28312]  dump_stack_lvl+0xe8/0x140
[  522.630123][T28312]  dump_stack+0x15/0x1b
[  522.630164][T28312]  should_fail_ex+0x265/0x280
[  522.630248][T28312]  should_fail+0xb/0x20
[  522.630274][T28312]  should_fail_usercopy+0x1a/0x20
[  522.630369][T28312]  _copy_to_user+0x20/0xa0
[  522.630381][T28312]  simple_read_from_buffer+0xb5/0x130
[  522.630498][T28312]  proc_fail_nth_read+0x100/0x140
[  522.630517][T28312]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  522.630534][T28312]  vfs_read+0x1a0/0x6f0
[  522.630550][T28312]  ? __rcu_read_unlock+0x4f/0x70
[  522.630576][T28312]  ? __rcu_read_unlock+0x4f/0x70
[  522.630587][T28312]  ? __fget_files+0x184/0x1c0
[  522.630598][T28312]  ksys_read+0xda/0x1a0
[  522.630615][T28312]  __x64_sys_read+0x40/0x50
[  522.630660][T28312]  x64_sys_call+0x2d77/0x2fb0
[  522.630671][T28312]  do_syscall_64+0xd2/0x200
[  522.630692][T28312]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  522.630706][T28312]  ? clear_bhb_loop+0x40/0x90
[  522.630717][T28312]  ? clear_bhb_loop+0x40/0x90
[  522.630753][T28312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.630764][T28312] RIP: 0033:0x7fc7854dd33c
[  522.630774][T28312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  522.630784][T28312] RSP: 002b:00007fc783b47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  522.630796][T28312] RAX: ffffffffffffffda RBX: 00007fc785705fa0 RCX: 00007fc7854dd33c
[  522.630810][T28312] RDX: 000000000000000f RSI: 00007fc783b470a0 RDI: 0000000000000003
[  522.630823][T28312] RBP: 00007fc783b47090 R08: 0000000000000000 R09: 0000000000000000
[  522.630830][T28312] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001
[  522.630857][T28312] R13: 0000000000000000 R14: 00007fc785705fa0 R15: 00007ffe5c272028
[  522.630867][T28312]  </TASK>
[  522.632646][T28310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8488'.
[  523.308046][T28332] lo speed is unknown, defaulting to 1000
[  523.460489][T28346] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.467678][T28346] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.478460][T28346] bridge0: entered allmulticast mode
[  523.513718][T28346] bridge_slave_1: left allmulticast mode
[  523.519426][T28346] bridge_slave_1: left promiscuous mode
[  523.525056][T28346] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.532954][T28346] bridge_slave_0: left allmulticast mode
[  523.538704][T28346] bridge_slave_0: left promiscuous mode
[  523.544409][T28346] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.562493][T28355] xt_hashlimit: max too large, truncated to 1048576
[  523.863550][T28375] lo speed is unknown, defaulting to 1000
[  524.254401][T28388] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  524.264889][T28388] SELinux: failed to load policy
[  524.270072][T28385] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  524.283687][T28385] SELinux: failed to load policy
[  524.436173][T28399] xt_hashlimit: max too large, truncated to 1048576
[  524.446431][   T29] kauditd_printk_skb: 837 callbacks suppressed
[  524.446442][   T29] audit: type=1400 audit(524.439:57038): avc:  denied  { create } for  pid=28397 comm="syz.5.8518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  524.473885][   T29] audit: type=1400 audit(524.469:57039): avc:  denied  { module_request } for  pid=28397 comm="syz.5.8518" kmod="net-pf-2-proto-7-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  524.512426][T28403] FAULT_INJECTION: forcing a failure.
[  524.512426][T28403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  524.525511][T28403] CPU: 0 UID: 0 PID: 28403 Comm: syz.6.8520 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  524.525536][T28403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  524.525547][T28403] Call Trace:
[  524.525554][T28403]  <TASK>
[  524.525627][T28403]  __dump_stack+0x1d/0x30
[  524.525678][T28403]  dump_stack_lvl+0xe8/0x140
[  524.525697][T28403]  dump_stack+0x15/0x1b
[  524.525714][T28403]  should_fail_ex+0x265/0x280
[  524.525743][T28403]  should_fail+0xb/0x20
[  524.525780][T28403]  should_fail_usercopy+0x1a/0x20
[  524.525805][T28403]  _copy_from_user+0x1c/0xb0
[  524.525822][T28403]  vt_do_kdsk_ioctl+0x54/0x720
[  524.525867][T28403]  ? security_capable+0x83/0x90
[  524.525890][T28403]  vt_ioctl+0x8e8/0x1880
[  524.525913][T28403]  ? tty_jobctrl_ioctl+0x29e/0x810
[  524.525933][T28403]  tty_ioctl+0x7db/0xb80
[  524.525955][T28403]  ? __pfx_tty_ioctl+0x10/0x10
[  524.526028][T28403]  __se_sys_ioctl+0xce/0x140
[  524.526051][T28403]  __x64_sys_ioctl+0x43/0x50
[  524.526073][T28403]  x64_sys_call+0x19a8/0x2fb0
[  524.526130][T28403]  do_syscall_64+0xd2/0x200
[  524.526145][T28403]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  524.526166][T28403]  ? clear_bhb_loop+0x40/0x90
[  524.526183][T28403]  ? clear_bhb_loop+0x40/0x90
[  524.526255][T28403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.526341][T28403] RIP: 0033:0x7f6860ade929
[  524.526357][T28403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.526375][T28403] RSP: 002b:00007f685f147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  524.526534][T28403] RAX: ffffffffffffffda RBX: 00007f6860d05fa0 RCX: 00007f6860ade929
[  524.526546][T28403] RDX: 0000200000000580 RSI: 0000000000004b47 RDI: 0000000000000004
[  524.526556][T28403] RBP: 00007f685f147090 R08: 0000000000000000 R09: 0000000000000000
[  524.526568][T28403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.526581][T28403] R13: 0000000000000000 R14: 00007f6860d05fa0 R15: 00007ffe8961dde8
[  524.526600][T28403]  </TASK>
[  524.616883][   T29] audit: type=1400 audit(524.609:57040): avc:  denied  { create } for  pid=28406 comm="syz.0.8521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  524.622128][   T29] audit: type=1400 audit(524.619:57041): avc:  denied  { ioctl } for  pid=28408 comm="syz.5.8522" path="socket:[95832]" dev="sockfs" ino=95832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  524.631489][   T29] audit: type=1400 audit(524.629:57042): avc:  denied  { sys_module } for  pid=28408 comm="syz.5.8522" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  524.723966][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8522'.
[  524.727641][   T29] audit: type=1400 audit(524.659:57043): avc:  denied  { write } for  pid=28413 comm="syz.6.8523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  524.853178][T28414] IPv6: NLM_F_CREATE should be specified when creating new route
[  524.894332][   T29] audit: type=1400 audit(524.889:57044): avc:  denied  { create } for  pid=28420 comm="syz.0.8524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  524.955236][   T29] audit: type=1400 audit(524.949:57045): avc:  denied  { create } for  pid=28431 comm="syz.0.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  524.981402][   T29] audit: type=1400 audit(524.949:57046): avc:  denied  { bind } for  pid=28431 comm="syz.0.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  525.080724][   T29] audit: type=1400 audit(525.079:57047): avc:  denied  { create } for  pid=28438 comm="syz.6.8530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  525.268652][T28448] netlink: 'syz.2.8532': attribute type 3 has an invalid length.
[  525.319483][T28448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28448 comm=syz.2.8532
[  525.469912][T28449] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  525.586980][T28447] netlink: 'syz.6.8533': attribute type 10 has an invalid length.
[  525.597426][T28447] bond0: (slave dummy0): Releasing backup interface
[  525.610186][T28447] team0: Failed to send options change via netlink (err -105)
[  525.617734][T28447] team0: Port device dummy0 added
[  525.625174][T28447] netlink: 'syz.6.8533': attribute type 10 has an invalid length.
[  525.625623][T28447] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  525.627901][T28447] team0: Failed to send options change via netlink (err -105)
[  525.627935][T28447] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  525.628084][T28447] team0: Port device dummy0 removed
[  525.629954][T28447] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  525.762102][T28456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8531'.
[  525.774301][T28456] hsr_slave_0: left promiscuous mode
[  525.899728][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8537'.
[  525.928038][T28456] hsr_slave_1: left promiscuous mode
[  526.011550][T28474] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8538'.
[  526.035677][T28473] FAULT_INJECTION: forcing a failure.
[  526.035677][T28473] name failslab, interval 1, probability 0, space 0, times 0
[  526.048359][T28473] CPU: 1 UID: 0 PID: 28473 Comm: syz.5.8539 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  526.048389][T28473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.048401][T28473] Call Trace:
[  526.048408][T28473]  <TASK>
[  526.048415][T28473]  __dump_stack+0x1d/0x30
[  526.048434][T28473]  dump_stack_lvl+0xe8/0x140
[  526.048508][T28473]  dump_stack+0x15/0x1b
[  526.048522][T28473]  should_fail_ex+0x265/0x280
[  526.048553][T28473]  ? bpf_xdp_link_attach+0x1a5/0x5c0
[  526.048612][T28473]  should_failslab+0x8c/0xb0
[  526.048632][T28473]  __kmalloc_cache_noprof+0x4c/0x320
[  526.048656][T28473]  bpf_xdp_link_attach+0x1a5/0x5c0
[  526.048703][T28473]  link_create+0x4f2/0x6c0
[  526.048801][T28473]  __sys_bpf+0x4c7/0x790
[  526.048848][T28473]  __x64_sys_bpf+0x41/0x50
[  526.048871][T28473]  x64_sys_call+0x2478/0x2fb0
[  526.048893][T28473]  do_syscall_64+0xd2/0x200
[  526.048950][T28473]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  526.048971][T28473]  ? clear_bhb_loop+0x40/0x90
[  526.049005][T28473]  ? clear_bhb_loop+0x40/0x90
[  526.049023][T28473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.049040][T28473] RIP: 0033:0x7f348600e929
[  526.049055][T28473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.049140][T28473] RSP: 002b:00007f3484677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  526.049161][T28473] RAX: ffffffffffffffda RBX: 00007f3486235fa0 RCX: 00007f348600e929
[  526.049175][T28473] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 000000000000001c
[  526.049186][T28473] RBP: 00007f3484677090 R08: 0000000000000000 R09: 0000000000000000
[  526.049256][T28473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.049269][T28473] R13: 0000000000000000 R14: 00007f3486235fa0 R15: 00007ffe6f266838
[  526.049289][T28473]  </TASK>
[  526.051440][T28470] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8538'.
[  526.447705][T28484] xt_hashlimit: max too large, truncated to 1048576
[  526.524717][T28494] FAULT_INJECTION: forcing a failure.
[  526.524717][T28494] name failslab, interval 1, probability 0, space 0, times 0
[  526.537507][T28494] CPU: 0 UID: 0 PID: 28494 Comm: syz.4.8548 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  526.537585][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.537597][T28494] Call Trace:
[  526.537629][T28494]  <TASK>
[  526.537636][T28494]  __dump_stack+0x1d/0x30
[  526.537656][T28494]  dump_stack_lvl+0xe8/0x140
[  526.537675][T28494]  dump_stack+0x15/0x1b
[  526.537738][T28494]  should_fail_ex+0x265/0x280
[  526.537766][T28494]  ? bdi_split_work_to_wbs+0x2db/0x640
[  526.537789][T28494]  should_failslab+0x8c/0xb0
[  526.537812][T28494]  __kmalloc_cache_noprof+0x4c/0x320
[  526.537893][T28494]  bdi_split_work_to_wbs+0x2db/0x640
[  526.537922][T28494]  sync_inodes_sb+0xff/0x440
[  526.537943][T28494]  ? down_read+0x77/0xe0
[  526.538000][T28494]  sync_inodes_one_sb+0x3d/0x50
[  526.538042][T28494]  __iterate_supers+0x110/0x1f0
[  526.538067][T28494]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  526.538095][T28494]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  526.538138][T28494]  iterate_supers+0x1f/0x30
[  526.538158][T28494]  ksys_sync+0x5c/0xe0
[  526.538180][T28494]  __ia32_sys_sync+0xe/0x20
[  526.538270][T28494]  x64_sys_call+0x2e53/0x2fb0
[  526.538285][T28494]  do_syscall_64+0xd2/0x200
[  526.538325][T28494]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  526.538344][T28494]  ? clear_bhb_loop+0x40/0x90
[  526.538360][T28494]  ? clear_bhb_loop+0x40/0x90
[  526.538376][T28494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.538472][T28494] RIP: 0033:0x7f17cb21e929
[  526.538484][T28494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.538498][T28494] RSP: 002b:00007f17c9887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  526.538513][T28494] RAX: ffffffffffffffda RBX: 00007f17cb445fa0 RCX: 00007f17cb21e929
[  526.538523][T28494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  526.538533][T28494] RBP: 00007f17c9887090 R08: 0000000000000000 R09: 0000000000000000
[  526.538543][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.538606][T28494] R13: 0000000000000000 R14: 00007f17cb445fa0 R15: 00007ffe3ee518d8
[  526.538620][T28494]  </TASK>
[  526.609168][T28497] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  526.773949][T28497] SELinux: failed to load policy
[  526.783205][T28489] lo speed is unknown, defaulting to 1000
[  526.798044][T28486] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  526.816718][T28486] SELinux: failed to load policy
[  526.914595][T28511] FAULT_INJECTION: forcing a failure.
[  526.914595][T28511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.927785][T28511] CPU: 1 UID: 0 PID: 28511 Comm: syz.0.8552 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  526.927814][T28511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.927901][T28511] Call Trace:
[  526.927906][T28511]  <TASK>
[  526.927955][T28511]  __dump_stack+0x1d/0x30
[  526.927973][T28511]  dump_stack_lvl+0xe8/0x140
[  526.927990][T28511]  dump_stack+0x15/0x1b
[  526.928006][T28511]  should_fail_ex+0x265/0x280
[  526.928042][T28511]  should_fail+0xb/0x20
[  526.928089][T28511]  should_fail_usercopy+0x1a/0x20
[  526.928183][T28511]  _copy_from_user+0x1c/0xb0
[  526.928200][T28511]  ___sys_sendmsg+0xc1/0x1d0
[  526.928238][T28511]  __x64_sys_sendmsg+0xd4/0x160
[  526.928272][T28511]  x64_sys_call+0x2999/0x2fb0
[  526.928323][T28511]  do_syscall_64+0xd2/0x200
[  526.928341][T28511]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  526.928364][T28511]  ? clear_bhb_loop+0x40/0x90
[  526.928390][T28511]  ? clear_bhb_loop+0x40/0x90
[  526.928504][T28511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.928524][T28511] RIP: 0033:0x7fdb7c34e929
[  526.928539][T28511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.928557][T28511] RSP: 002b:00007fdb7a9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.928691][T28511] RAX: ffffffffffffffda RBX: 00007fdb7c575fa0 RCX: 00007fdb7c34e929
[  526.928770][T28511] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  526.928783][T28511] RBP: 00007fdb7a9b7090 R08: 0000000000000000 R09: 0000000000000000
[  526.928796][T28511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.928808][T28511] R13: 0000000000000000 R14: 00007fdb7c575fa0 R15: 00007ffc00a6f2a8
[  526.928827][T28511]  </TASK>
[  527.197001][T28514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8554'.
[  527.290842][T28526] netlink: 'syz.4.8557': attribute type 3 has an invalid length.
[  527.300921][T28526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28526 comm=syz.4.8557
[  527.487799][T28528] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  527.822227][T28548] xt_hashlimit: max too large, truncated to 1048576
[  527.850655][T28549] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8563'.
[  527.861504][T28544] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8563'.
[  527.919485][T28551] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  527.962884][T28555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8568'.
[  528.101056][T28546] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  528.111414][T28546] SELinux: failed to load policy
[  528.132544][T28566] lo speed is unknown, defaulting to 1000
[  528.226648][T28581] xt_hashlimit: max too large, truncated to 1048576
[  528.386632][T28592] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  528.397837][T28592] SELinux: failed to load policy
[  528.897686][T28609] pim6reg1: entered promiscuous mode
[  528.903119][T28609] pim6reg1: entered allmulticast mode
[  528.985350][T28621] netlink: 'syz.2.8593': attribute type 3 has an invalid length.
[  529.007519][T28621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28621 comm=syz.2.8593
[  529.073663][T28621] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  529.096197][T28624] lo speed is unknown, defaulting to 1000
[  529.158340][T28631] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  529.168766][T28631] SELinux: failed to load policy
[  529.230679][T28643] netlink: 'syz.6.8598': attribute type 3 has an invalid length.
[  529.239735][T28624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8594'.
[  529.250207][T28643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28643 comm=syz.6.8598
[  529.340158][T28650] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  529.363204][T28651] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  529.464075][T28667] netlink: 'syz.0.8606': attribute type 3 has an invalid length.
[  529.467326][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  529.467339][   T29] audit: type=1326 audit(529.459:57323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28653 comm="syz.5.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  529.480356][T28667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28667 comm=syz.0.8606
[  529.501123][   T29] audit: type=1326 audit(529.459:57324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28653 comm="syz.5.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  529.501162][   T29] audit: type=1326 audit(529.459:57325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28653 comm="syz.5.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  529.521415][T28666] lo speed is unknown, defaulting to 1000
[  529.569412][T28667] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  529.580842][   T29] audit: type=1326 audit(529.579:57326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28653 comm="syz.5.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f348600e929 code=0x7ffc0000
[  529.623155][   T29] audit: type=1326 audit(529.579:57327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.8603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdb7c34e929 code=0x7ffc0000
[  529.654273][T28674] 9pnet: Could not find request transport: f
[  529.716631][T28681] lo speed is unknown, defaulting to 1000
[  529.802261][   T29] audit: type=1400 audit(529.799:57328): avc:  denied  { create } for  pid=28683 comm="syz.0.8611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  529.861813][T28686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8612'.
[  530.018729][T28692] lo speed is unknown, defaulting to 1000
[  530.055716][T28694] lo speed is unknown, defaulting to 1000
[  530.100698][   T29] audit: type=1400 audit(530.099:57329): avc:  denied  { create } for  pid=28696 comm="syz.0.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  530.120468][   T29] audit: type=1400 audit(530.099:57330): avc:  denied  { write } for  pid=28696 comm="syz.0.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  530.139994][   T29] audit: type=1400 audit(530.099:57331): avc:  denied  { read } for  pid=28696 comm="syz.0.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  530.172091][   T29] audit: type=1400 audit(530.159:57332): avc:  denied  { execute } for  pid=28696 comm="syz.0.8616" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=96657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  530.248151][T28703] netlink: 'syz.4.8618': attribute type 3 has an invalid length.
[  530.292289][T28706] 9pnet: Could not find request transport: f
[  530.301560][T28710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28710 comm=syz.4.8618
[  530.350844][T28703] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  530.421020][T28717] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  530.942265][T28739] lo speed is unknown, defaulting to 1000
[  530.993166][T28742] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  531.003433][T28742] SELinux: failed to load policy
[  531.071396][T28746] 9pnet: Could not find request transport: f
[  531.112957][T28751] xt_hashlimit: max too large, truncated to 1048576
[  531.399002][T28766] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8638'.
[  531.410211][T28760] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8638'.
[  531.424307][T28767] netlink: 'syz.6.8641': attribute type 3 has an invalid length.
[  531.433403][T28764] lo speed is unknown, defaulting to 1000
[  531.447268][T28767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28767 comm=syz.6.8641
[  531.508013][T28767] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  531.582241][T28780] 9pnet: Could not find request transport: f
[  531.586013][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8646'.
[  531.735431][T28788] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  531.764563][T28800] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  531.792638][T28800] SELinux: failed to load policy
[  531.850445][T28810] netlink: 'syz.2.8657': attribute type 3 has an invalid length.
[  531.860913][T28808] lo speed is unknown, defaulting to 1000
[  531.860972][T28811] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8654'.
[  531.867556][T28810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28810 comm=syz.2.8657
[  531.890161][T28802] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8654'.
[  531.932479][T28810] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  531.963865][T28817] 9pnet: Could not find request transport: f
[  532.001955][T28826] FAULT_INJECTION: forcing a failure.
[  532.001955][T28826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  532.015187][T28826] CPU: 0 UID: 0 PID: 28826 Comm: syz.2.8662 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  532.015214][T28826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  532.015227][T28826] Call Trace:
[  532.015234][T28826]  <TASK>
[  532.015240][T28826]  __dump_stack+0x1d/0x30
[  532.015332][T28826]  dump_stack_lvl+0xe8/0x140
[  532.015353][T28826]  dump_stack+0x15/0x1b
[  532.015370][T28826]  should_fail_ex+0x265/0x280
[  532.015443][T28826]  should_fail+0xb/0x20
[  532.015465][T28826]  should_fail_usercopy+0x1a/0x20
[  532.015540][T28826]  strncpy_from_user+0x25/0x230
[  532.015616][T28826]  ? kmem_cache_alloc_noprof+0x186/0x310
[  532.015638][T28826]  ? getname_flags+0x80/0x3b0
[  532.015738][T28826]  getname_flags+0xae/0x3b0
[  532.015826][T28826]  __x64_sys_unlinkat+0x70/0xb0
[  532.015857][T28826]  x64_sys_call+0x2438/0x2fb0
[  532.015887][T28826]  do_syscall_64+0xd2/0x200
[  532.015905][T28826]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  532.016002][T28826]  ? clear_bhb_loop+0x40/0x90
[  532.016023][T28826]  ? clear_bhb_loop+0x40/0x90
[  532.016044][T28826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.016066][T28826] RIP: 0033:0x7fc7854de929
[  532.016119][T28826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.016136][T28826] RSP: 002b:00007fc783b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  532.016155][T28826] RAX: ffffffffffffffda RBX: 00007fc785705fa0 RCX: 00007fc7854de929
[  532.016227][T28826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  532.016238][T28826] RBP: 00007fc783b47090 R08: 0000000000000000 R09: 0000000000000000
[  532.016250][T28826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.016262][T28826] R13: 0000000000000001 R14: 00007fc785705fa0 R15: 00007ffe5c272028
[  532.016279][T28826]  </TASK>
[  532.311561][T28837] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  532.345403][T28840] SELinux:  policydb version 1811 does not match my version range 15-34
[  532.353893][T28840] SELinux: failed to load policy
[  532.370904][T28840] SELinux:  policydb version -174798662 does not match my version range 15-34
[  532.380177][T28840] SELinux: failed to load policy
[  532.403947][T28843] lo speed is unknown, defaulting to 1000
[  532.404025][T28845] netlink: 'syz.6.8670': attribute type 3 has an invalid length.
[  532.421373][T28845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28845 comm=syz.6.8670
[  532.454336][T28830] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  532.464974][T28830] SELinux: failed to load policy
[  532.465226][T28845] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  532.514938][T28852] lo speed is unknown, defaulting to 1000
[  532.582903][T28869] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8673'.
[  532.593014][T28857] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8673'.
[  532.662907][T28853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8671'.
[  532.694256][T28875] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  532.705285][T28875] SELinux: failed to load policy
[  532.729940][T28884] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  532.763659][T28893] netlink: 'syz.6.8682': attribute type 3 has an invalid length.
[  532.771953][T28893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28893 comm=syz.6.8682
[  532.822154][T28893] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  532.843399][T28899] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  532.899284][T28903] lo speed is unknown, defaulting to 1000
[  532.915933][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8687'.
[  533.013930][T28930] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  533.033136][T28932] netlink: 'syz.5.8694': attribute type 3 has an invalid length.
[  533.050290][T28932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28932 comm=syz.5.8694
[  533.080126][T28932] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  533.104124][T28901] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  533.115575][T28901] SELinux: failed to load policy
[  533.126152][T28939] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  533.191640][T28949] xt_hashlimit: max too large, truncated to 1048576
[  533.307867][T28946] sctp: [Deprecated]: syz.4.8698 (pid 28946) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.307867][T28946] Use struct sctp_sack_info instead
[  533.393819][T28960] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  533.414372][T28960] SELinux: failed to load policy
[  533.442834][T28977] netlink: 'syz.4.8707': attribute type 3 has an invalid length.
[  533.451014][T28977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=28977 comm=syz.4.8707
[  533.499935][T28977] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  533.534541][T28983] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  533.571833][T28985] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  533.591476][T28989] xt_hashlimit: max too large, truncated to 1048576
[  533.606561][T28985] SELinux: failed to load policy
[  533.631258][T28991] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  533.764181][T29006] FAULT_INJECTION: forcing a failure.
[  533.764181][T29006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  533.777410][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.5.8720 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  533.777482][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  533.777494][T29006] Call Trace:
[  533.777500][T29006]  <TASK>
[  533.777507][T29006]  __dump_stack+0x1d/0x30
[  533.777538][T29006]  dump_stack_lvl+0xe8/0x140
[  533.777554][T29006]  dump_stack+0x15/0x1b
[  533.777571][T29006]  should_fail_ex+0x265/0x280
[  533.777601][T29006]  should_fail+0xb/0x20
[  533.777638][T29006]  should_fail_usercopy+0x1a/0x20
[  533.777724][T29006]  strncpy_from_user+0x25/0x230
[  533.777748][T29006]  ? kmem_cache_alloc_noprof+0x186/0x310
[  533.777795][T29006]  ? getname_flags+0x80/0x3b0
[  533.777814][T29006]  getname_flags+0xae/0x3b0
[  533.777888][T29006]  __x64_sys_execve+0x42/0x70
[  533.777918][T29006]  x64_sys_call+0x13ab/0x2fb0
[  533.777936][T29006]  do_syscall_64+0xd2/0x200
[  533.777987][T29006]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  533.778094][T29006]  ? clear_bhb_loop+0x40/0x90
[  533.778116][T29006]  ? clear_bhb_loop+0x40/0x90
[  533.778199][T29006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.778221][T29006] RIP: 0033:0x7f348600e929
[  533.778237][T29006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.778252][T29006] RSP: 002b:00007f3484677038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  533.778270][T29006] RAX: ffffffffffffffda RBX: 00007f3486235fa0 RCX: 00007f348600e929
[  533.778296][T29006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  533.778334][T29006] RBP: 00007f3484677090 R08: 0000000000000000 R09: 0000000000000000
[  533.778344][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.778354][T29006] R13: 0000000000000000 R14: 00007f3486235fa0 R15: 00007ffe6f266838
[  533.778370][T29006]  </TASK>
[  534.208928][T29014] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  534.264858][T29019] xt_hashlimit: max too large, truncated to 1048576
[  534.411785][T29029] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  534.422683][T29029] SELinux: failed to load policy
[  534.482836][   T29] kauditd_printk_skb: 827 callbacks suppressed
[  534.482850][   T29] audit: type=1404 audit(534.479:58160): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  534.504630][   T29] audit: type=1404 audit(534.499:58161): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  534.537574][   T29] audit: type=1326 audit(534.509:58162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.6.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  534.560546][   T29] audit: type=1326 audit(534.509:58163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.6.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  534.583419][   T29] audit: type=1400 audit(534.509:58164): avc:  denied  { create } for  pid=29032 comm="syz.6.8729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  534.602645][   T29] audit: type=1326 audit(534.509:58165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.6.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  534.625892][   T29] audit: type=1326 audit(534.509:58166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.6.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  534.648855][   T29] audit: type=1326 audit(534.509:58167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.6.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  534.672014][   T29] audit: type=1400 audit(534.509:58168): avc:  denied  { prog_load } for  pid=29032 comm="syz.6.8729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  534.690603][   T29] audit: type=1400 audit(534.509:58169): avc:  denied  { bpf } for  pid=29032 comm="syz.6.8729" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  534.700237][T29023] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  534.894355][T29055] __nla_validate_parse: 3 callbacks suppressed
[  534.894367][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'.
[  534.909449][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'.
[  534.953317][T29064] netlink: 'syz.6.8739': attribute type 3 has an invalid length.
[  534.961999][T29064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29064 comm=syz.6.8739
[  534.966304][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8737'.
[  535.002059][T29064] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  535.104062][T29075] lo speed is unknown, defaulting to 1000
[  535.224583][T29061] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  535.624510][T29089] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  535.745664][T29094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.809853][T29094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.910018][T29094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.974001][T29094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.008164][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8750'.
[  536.032611][T29094] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.049426][T29094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.079117][T29094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.099787][T29094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.100146][T29132] 9pnet: Could not find request transport: f
[  536.162285][T29145] xt_hashlimit: max too large, truncated to 1048576
[  536.466591][T29185] xt_hashlimit: max too large, truncated to 1048576
[  536.558009][T29193] netlink: 'syz.6.8764': attribute type 3 has an invalid length.
[  536.585157][T29193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29193 comm=syz.6.8764
[  536.726825][T29193] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  536.827721][T29213] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.868647][T29213] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.928536][T29213] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.988729][T29213] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.033095][T29213] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.044878][T29213] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.058831][T29213] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.070191][T29213] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.139648][T29241] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  537.151277][T29241] sel_write_load: 3 callbacks suppressed
[  537.151291][T29241] SELinux: failed to load policy
[  537.280416][T29264] netlink: 'syz.2.8788': attribute type 3 has an invalid length.
[  537.288872][T29264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29264 comm=syz.2.8788
[  537.315987][T29264] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  537.347189][T29268] lo speed is unknown, defaulting to 1000
[  537.407651][T29271] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  537.446467][T29273] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  537.456957][T29273] SELinux: failed to load policy
[  537.549650][T29278] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8792'.
[  537.559346][T29275] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8792'.
[  537.578293][T29277] block device autoloading is deprecated and will be removed.
[  537.727805][T29281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.736374][T29281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.973685][T29299] lo speed is unknown, defaulting to 1000
[  537.980030][T29317] netlink: 'syz.4.8810': attribute type 3 has an invalid length.
[  537.989181][T29317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29317 comm=syz.4.8810
[  538.092324][T29323] FAULT_INJECTION: forcing a failure.
[  538.092324][T29323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.105450][T29323] CPU: 1 UID: 0 PID: 29323 Comm: syz.5.8805 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  538.105495][T29323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  538.105506][T29323] Call Trace:
[  538.105512][T29323]  <TASK>
[  538.105519][T29323]  __dump_stack+0x1d/0x30
[  538.105539][T29323]  dump_stack_lvl+0xe8/0x140
[  538.105615][T29323]  dump_stack+0x15/0x1b
[  538.105632][T29323]  should_fail_ex+0x265/0x280
[  538.105697][T29323]  should_fail+0xb/0x20
[  538.105741][T29323]  should_fail_usercopy+0x1a/0x20
[  538.105769][T29323]  _copy_from_user+0x1c/0xb0
[  538.105787][T29323]  proc_ioctl_default+0x43/0xa0
[  538.105862][T29323]  usbdev_ioctl+0xe97/0x1710
[  538.105941][T29323]  ? __pfx_usbdev_ioctl+0x10/0x10
[  538.105970][T29323]  __se_sys_ioctl+0xce/0x140
[  538.105998][T29323]  __x64_sys_ioctl+0x43/0x50
[  538.106025][T29323]  x64_sys_call+0x19a8/0x2fb0
[  538.106117][T29323]  do_syscall_64+0xd2/0x200
[  538.106133][T29323]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  538.106158][T29323]  ? clear_bhb_loop+0x40/0x90
[  538.106243][T29323]  ? clear_bhb_loop+0x40/0x90
[  538.106265][T29323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.106323][T29323] RIP: 0033:0x7f348600e929
[  538.106339][T29323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.106447][T29323] RSP: 002b:00007f3484635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  538.106467][T29323] RAX: ffffffffffffffda RBX: 00007f3486236160 RCX: 00007f348600e929
[  538.106481][T29323] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000009
[  538.106491][T29323] RBP: 00007f3484635090 R08: 0000000000000000 R09: 0000000000000000
[  538.106559][T29323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.106647][T29323] R13: 0000000000000000 R14: 00007f3486236160 R15: 00007ffe6f266838
[  538.106662][T29323]  </TASK>
[  538.296422][T29323] SELinux: syz.5.8805 (29323) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  538.465829][T29334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.520331][T29334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.583889][T29334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.619780][T29334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.702297][T29334] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.759662][T29334] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.780161][T29334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.797477][T29334] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.890432][T29361] loop4: detected capacity change from 0 to 2048
[  538.905565][T29361] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  539.065896][T29376] loop4: detected capacity change from 0 to 8192
[  539.567122][T29453] netlink: 'syz.6.8829': attribute type 3 has an invalid length.
[  539.590514][T29453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29453 comm=syz.6.8829
[  539.654821][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  539.654835][   T29] audit: type=1404 audit(539.649:58738): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  539.677130][   T29] audit: type=1400 audit(539.659:58739): avc:  denied  { prog_load } for  pid=29467 comm="syz.6.8832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.695822][   T29] audit: type=1400 audit(539.659:58740): avc:  denied  { prog_load } for  pid=29467 comm="syz.6.8832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.715755][   T29] audit: type=1400 audit(539.699:58741): avc:  denied  { open } for  pid=29469 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  539.734709][   T29] audit: type=1400 audit(539.699:58742): avc:  denied  { map_create } for  pid=29469 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.753481][   T29] audit: type=1400 audit(539.699:58743): avc:  denied  { prog_load } for  pid=29469 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.772122][   T29] audit: type=1400 audit(539.699:58744): avc:  denied  { prog_load } for  pid=29469 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.790780][   T29] audit: type=1400 audit(539.699:58745): avc:  denied  { prog_load } for  pid=29469 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  539.809422][   T29] audit: type=1400 audit(539.699:58746): avc:  denied  { read } for  pid=29469 comm="syz.6.8833" dev="nsfs" ino=4026532406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  539.830180][   T29] audit: type=1404 audit(539.709:58747): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  539.929260][T29482] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  539.950833][T29482] SELinux: failed to load policy
[  540.031491][T29493] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  540.041851][T29493] SELinux: failed to load policy
[  540.118089][T29500] lo speed is unknown, defaulting to 1000
[  540.649379][T29519] program syz.6.8847 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  540.669907][T29521] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  540.680526][T29521] SELinux: failed to load policy
[  540.745503][T29525] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  540.755801][T29525] SELinux: failed to load policy
[  540.770464][T29527] netlink: 'syz.6.8851': attribute type 3 has an invalid length.
[  540.780246][T29527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29527 comm=syz.6.8851
[  540.859962][T29537] 9pnet: Could not find request transport: f
[  540.914582][T29543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.946129][T29535] hub 8-0:1.0: USB hub found
[  540.950935][T29535] hub 8-0:1.0: 8 ports detected
[  540.960100][T29535] SELinux: syz.0.8855 (29535) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  541.048215][T29553] lo speed is unknown, defaulting to 1000
[  541.074730][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.083268][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.095921][T29555] loop4: detected capacity change from 0 to 512
[  541.146165][T29543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.178469][T29555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.201628][T29553] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.8862: iget: bad i_size value: 2533274857506816
[  541.236929][T20564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.273068][T29543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.337951][T29571] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  541.349182][T29571] SELinux: failed to load policy
[  541.379942][T29543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.465719][T29543] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.489080][T29543] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.500350][T29543] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.511514][T29543] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.566840][T29582] xt_hashlimit: max too large, truncated to 1048576
[  541.909959][T29600] lo speed is unknown, defaulting to 1000
[  541.942168][T29595] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  541.953185][T29595] SELinux: failed to load policy
[  542.176711][T29616] loop4: detected capacity change from 0 to 2048
[  542.183406][T29616] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  542.197724][T29616] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  542.528651][T29640] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8887'.
[  542.546304][T29629] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8887'.
[  542.698541][T29646] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  542.713267][T29646] SELinux: failed to load policy
[  542.840640][T29667] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  542.874427][T29670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.938987][T29670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.998827][T29670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.028360][T29660] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  543.038677][T29660] SELinux: failed to load policy
[  543.048796][T29670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.094627][T29670] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.107323][T29670] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.119804][T29670] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.131241][T29670] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.214134][T29695] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  543.231784][T29695] SELinux: failed to load policy
[  543.353805][T29716] xt_hashlimit: max too large, truncated to 1048576
[  543.405877][T29720] netlink: 'syz.5.8913': attribute type 3 has an invalid length.
[  543.432158][T29720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=29720 comm=syz.5.8913
[  543.832766][T29737] lo speed is unknown, defaulting to 1000
[  543.969672][T29744] lo speed is unknown, defaulting to 1000
[  544.130403][T29735] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  544.154956][T29735] SELinux: failed to load policy
[  544.160758][T29760] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  544.171289][T29760] SELinux: failed to load policy
[  544.178525][T29766] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.229198][T29766] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.309008][T29766] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.389042][T29766] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.443495][T29766] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.455071][T29766] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.465301][T29766] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.475966][T29766] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.535865][T29780] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  544.664349][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8936'.
[  544.732580][   T29] kauditd_printk_skb: 596 callbacks suppressed
[  544.732605][   T29] audit: type=1326 audit(544.729:59344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  544.755028][T29802] audit: audit_backlog=65 > audit_backlog_limit=64
[  544.762703][   T29] audit: type=1326 audit(544.729:59345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  544.768298][T29802] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64
[  544.791233][   T29] audit: type=1326 audit(544.729:59346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  544.798919][T29802] audit: backlog limit exceeded
[  544.799700][T29802] audit: audit_backlog=65 > audit_backlog_limit=64
[  544.821744][   T29] audit: type=1326 audit(544.729:59347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  544.821767][   T29] audit: type=1326 audit(544.729:59348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  544.821788][   T29] audit: type=1326 audit(544.729:59349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6860ade929 code=0x7ffc0000
[  545.157559][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8951'.
[  545.166573][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8951'.
[  545.187979][T29808] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  545.201737][T29808] SELinux: failed to load policy
[  545.257701][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8949'.
[  545.295656][T29850] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8955'.
[  545.307601][T29841] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8955'.
[  545.377787][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8960'.
[  545.723345][T29893] FAULT_INJECTION: forcing a failure.
[  545.723345][T29893] name failslab, interval 1, probability 0, space 0, times 0
[  545.736047][T29893] CPU: 0 UID: 0 PID: 29893 Comm: syz.6.8973 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  545.736075][T29893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  545.736085][T29893] Call Trace:
[  545.736092][T29893]  <TASK>
[  545.736177][T29893]  __dump_stack+0x1d/0x30
[  545.736195][T29893]  dump_stack_lvl+0xe8/0x140
[  545.736211][T29893]  dump_stack+0x15/0x1b
[  545.736225][T29893]  should_fail_ex+0x265/0x280
[  545.736325][T29893]  should_failslab+0x8c/0xb0
[  545.736345][T29893]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  545.736370][T29893]  ? sidtab_sid2str_get+0xa0/0x130
[  545.736396][T29893]  kmemdup_noprof+0x2b/0x70
[  545.736495][T29893]  sidtab_sid2str_get+0xa0/0x130
[  545.736519][T29893]  security_sid_to_context_core+0x1eb/0x2e0
[  545.736541][T29893]  security_sid_to_context+0x27/0x40
[  545.736558][T29893]  avc_audit_post_callback+0x10f/0x520
[  545.736636][T29893]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  545.736670][T29893]  common_lsm_audit+0x1bb/0x230
[  545.736685][T29893]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  545.736748][T29893]  slow_avc_audit+0x104/0x140
[  545.736770][T29893]  avc_has_perm+0x128/0x150
[  545.736791][T29893]  selinux_socket_sendmsg+0x175/0x1b0
[  545.736875][T29893]  security_socket_sendmsg+0x48/0x80
[  545.736899][T29893]  __sock_sendmsg+0x30/0x180
[  545.736950][T29893]  ____sys_sendmsg+0x31e/0x4e0
[  545.736976][T29893]  ___sys_sendmsg+0x17b/0x1d0
[  545.737010][T29893]  __x64_sys_sendmsg+0xd4/0x160
[  545.737044][T29893]  x64_sys_call+0x2999/0x2fb0
[  545.737062][T29893]  do_syscall_64+0xd2/0x200
[  545.737152][T29893]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  545.737171][T29893]  ? clear_bhb_loop+0x40/0x90
[  545.737254][T29893]  ? clear_bhb_loop+0x40/0x90
[  545.737271][T29893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.737287][T29893] RIP: 0033:0x7f6860ade929
[  545.737322][T29893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.737337][T29893] RSP: 002b:00007f685f147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.737397][T29893] RAX: ffffffffffffffda RBX: 00007f6860d05fa0 RCX: 00007f6860ade929
[  545.737408][T29893] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  545.737485][T29893] RBP: 00007f685f147090 R08: 0000000000000000 R09: 0000000000000000
[  545.737495][T29893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.737505][T29893] R13: 0000000000000000 R14: 00007f6860d05fa0 R15: 00007ffe8961dde8
[  545.737519][T29893]  </TASK>
[  545.989657][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8973'.
[  546.038024][T29898] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  546.147728][T29882] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  546.158767][T29882] SELinux: failed to load policy
[  546.196214][T29908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.250134][T29908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.289021][T29908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.328754][T29908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.382827][T29908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.393180][T29908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.403548][T29908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.414101][T29908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.459680][T29932] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  546.469956][T29932] SELinux: failed to load policy
[  546.475711][T29912] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  546.486194][T29912] SELinux: failed to load policy
[  547.101523][T29962] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.138863][T29962] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.189544][T29962] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.202537][T29974] lo speed is unknown, defaulting to 1000
[  547.233367][T29962] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.268388][T29976] lo speed is unknown, defaulting to 1000
[  547.312423][T29982] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  547.330240][T29962] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.339172][T29982] SELinux: failed to load policy
[  547.349662][T29962] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.421247][T29962] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.434363][T29962] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.563141][T29990] __nla_validate_parse: 10 callbacks suppressed
[  547.563200][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9009'.
[  547.833672][T30007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.842170][T30007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.930274][T30017] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.954330][T30019] lo speed is unknown, defaulting to 1000
[  548.000007][T30017] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.150305][T30017] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.396194][T30017] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.452805][T30033] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  548.634005][T30017] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.646483][T30017] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.660275][T30017] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.673349][T30017] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.794602][T30064] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  548.810347][T30062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9033'.
[  549.817816][   T29] kauditd_printk_skb: 481 callbacks suppressed
[  549.817830][   T29] audit: type=1400 audit(549.809:59820): avc:  denied  { mounton } for  pid=30220 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  549.951751][T30220] lo speed is unknown, defaulting to 1000
[  550.017025][   T29] audit: type=1400 audit(550.009:59821): avc:  denied  { bind } for  pid=30244 comm="syz.5.9054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  550.036464][   T29] audit: type=1400 audit(550.009:59822): avc:  denied  { listen } for  pid=30244 comm="syz.5.9054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  550.056035][   T29] audit: type=1400 audit(550.009:59823): avc:  denied  { getopt } for  pid=30244 comm="syz.5.9054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  550.076197][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9053'.
[  550.101752][T30220] chnl_net:caif_netlink_parms(): no params data found
[  550.125516][T30249] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  550.139720][T30249] SELinux: failed to load policy
[  550.165840][T30220] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.172931][T30220] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.180949][T30220] bridge_slave_0: entered allmulticast mode
[  550.187639][T30220] bridge_slave_0: entered promiscuous mode
[  550.194759][T30220] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.201914][T30220] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.209442][T30220] bridge_slave_1: entered allmulticast mode
[  550.215887][T30220] bridge_slave_1: entered promiscuous mode
[  550.234670][T30220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.245241][T30220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.273418][T30220] team0: Port device team_slave_0 added
[  550.284553][T30220] team0: Port device team_slave_1 added
[  550.290373][   T29] audit: type=1400 audit(550.289:59824): avc:  denied  { allowed } for  pid=30274 comm="syz.5.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  550.310540][   T29] audit: type=1400 audit(550.289:59825): avc:  denied  { create } for  pid=30274 comm="syz.5.9057" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  550.331412][   T29] audit: type=1400 audit(550.289:59826): avc:  denied  { map } for  pid=30274 comm="syz.5.9057" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  550.355356][   T29] audit: type=1400 audit(550.289:59827): avc:  denied  { read write } for  pid=30274 comm="syz.5.9057" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  550.401851][T30220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.408847][T30220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.434825][T30220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.448339][T30220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.455302][T30220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.481404][T30220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.516061][T30220] hsr_slave_0: entered promiscuous mode
[  550.522310][T30220] hsr_slave_1: entered promiscuous mode
[  550.530311][T30220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  550.538091][T30220] Cannot create hsr debugfs directory
[  550.552936][T30300] lo speed is unknown, defaulting to 1000
[  550.637511][   T29] audit: type=1400 audit(550.629:59828): avc:  denied  { ioctl } for  pid=30318 comm="syz.5.9059" path="socket:[102758]" dev="sockfs" ino=102758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  550.693335][   T29] audit: type=1400 audit(550.679:59829): avc:  denied  { kexec_image_load } for  pid=30318 comm="syz.5.9059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  550.715288][T30220] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.765646][T30336] xt_hashlimit: max too large, truncated to 1048576
[  550.772974][T30220] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.833475][T30332] lo speed is unknown, defaulting to 1000
[  550.849527][T30220] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.899950][T30220] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.979728][   T12] bridge_slave_1: left allmulticast mode
[  550.985391][   T12] bridge_slave_1: left promiscuous mode
[  550.991075][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.003799][   T12] bridge_slave_0: left allmulticast mode
[  551.009501][   T12] bridge_slave_0: left promiscuous mode
[  551.015236][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.100387][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.110007][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.119708][   T12] bond0 (unregistering): Released all slaves
[  551.140739][T30362] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  551.151461][T30362] SELinux: failed to load policy
[  551.160073][T30220] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  551.169132][T30220] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  551.179434][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.186893][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.196476][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.203911][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.214197][   T12] veth1_macvtap: left promiscuous mode
[  551.219966][T30386] xt_hashlimit: max too large, truncated to 1048576
[  551.227534][   T12] veth0_macvtap: left promiscuous mode
[  551.289256][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9074'.
[  551.313652][T30220] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  551.331121][T30365] SELinux:  policydb magic number 0x726d7664 does not match expected magic number 0xf97cff8c
[  551.343342][T30220] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  551.348509][T30365] SELinux: failed to load policy
[  551.390548][T30220] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.402099][T30220] 8021q: adding VLAN 0 to HW filter on device team0
[  551.421121][  T171] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.428342][  T171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.452559][  T171] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.459657][  T171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.480100][T30220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  551.490565][T30220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  551.512739][T30425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.520417][T30425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.528694][T30425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.536181][T30425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.558034][T30414] lo speed is unknown, defaulting to 1000
[  551.612587][T30422] lo speed is unknown, defaulting to 1000
[  551.695423][T30220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.875150][T30220] veth0_vlan: entered promiscuous mode
[  551.895175][T30220] veth1_vlan: entered promiscuous mode
[  551.956945][T30220] veth0_macvtap: entered promiscuous mode
[  551.973660][T30220] veth1_macvtap: entered promiscuous mode
[  552.000822][T30220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.012910][T30220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.029273][T30220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.038023][T30220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.046782][T30220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.055578][T30220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.148178][T30500] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  552.152995][T30501] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  552.162099][T30500] SELinux: failed to load policy
[  552.184534][T30475] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  552.194973][T30475] SELinux: failed to load policy
[  552.336312][T30518] lo speed is unknown, defaulting to 1000
[  552.490330][T30529] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.9093'.
[  552.530504][T30522] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.9093'.
[  552.769148][T30533] FAULT_INJECTION: forcing a failure.
[  552.769148][T30533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.782435][T30533] CPU: 0 UID: 0 PID: 30533 Comm: syz.0.9096 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  552.782547][T30533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.782558][T30533] Call Trace:
[  552.782564][T30533]  <TASK>
[  552.782570][T30533]  __dump_stack+0x1d/0x30
[  552.782589][T30533]  dump_stack_lvl+0xe8/0x140
[  552.782625][T30533]  dump_stack+0x15/0x1b
[  552.782638][T30533]  should_fail_ex+0x265/0x280
[  552.782704][T30533]  should_fail+0xb/0x20
[  552.782725][T30533]  should_fail_usercopy+0x1a/0x20
[  552.782755][T30533]  _copy_from_iter+0xcf/0xe40
[  552.782814][T30533]  ? __build_skb_around+0x1a0/0x200
[  552.782948][T30533]  ? __alloc_skb+0x223/0x320
[  552.782977][T30533]  netlink_sendmsg+0x471/0x6b0
[  552.782998][T30533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  552.783018][T30533]  __sock_sendmsg+0x145/0x180
[  552.783074][T30533]  ____sys_sendmsg+0x31e/0x4e0
[  552.783175][T30533]  ___sys_sendmsg+0x17b/0x1d0
[  552.783216][T30533]  __x64_sys_sendmsg+0xd4/0x160
[  552.783246][T30533]  x64_sys_call+0x2999/0x2fb0
[  552.783263][T30533]  do_syscall_64+0xd2/0x200
[  552.783293][T30533]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  552.783324][T30533]  ? clear_bhb_loop+0x40/0x90
[  552.783347][T30533]  ? clear_bhb_loop+0x40/0x90
[  552.783388][T30533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.783405][T30533] RIP: 0033:0x7f083f21e929
[  552.783418][T30533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.783462][T30533] RSP: 002b:00007f083d887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  552.783481][T30533] RAX: ffffffffffffffda RBX: 00007f083f445fa0 RCX: 00007f083f21e929
[  552.783495][T30533] RDX: 0000000020008000 RSI: 0000200000000380 RDI: 0000000000000003
[  552.783508][T30533] RBP: 00007f083d887090 R08: 0000000000000000 R09: 0000000000000000
[  552.783519][T30533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.783593][T30533] R13: 0000000000000000 R14: 00007f083f445fa0 R15: 00007ffe60358538
[  552.783609][T30533]  </TASK>
[  553.131496][T30540] SELinux: security_context_str_to_sid (�=S|1r��W�i��M!O�j�4~�1c3F��fX���5��0�����X2�k�c��m?���'�w��C��) failed with errno=-22
[  553.159516][ T1064] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  553.254844][T30552] 9pnet_fd: Insufficient options for proto=fd
[  553.536946][ T1064] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  553.629874][T30560] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  553.923770][T30589] xt_hashlimit: max too large, truncated to 1048576
[  553.959567][T30597] FAULT_INJECTION: forcing a failure.
[  553.959567][T30597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.972738][T30597] CPU: 1 UID: 0 PID: 30597 Comm: syz.0.9119 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  553.972795][T30597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.972805][T30597] Call Trace:
[  553.972810][T30597]  <TASK>
[  553.972816][T30597]  __dump_stack+0x1d/0x30
[  553.972834][T30597]  dump_stack_lvl+0xe8/0x140
[  553.972851][T30597]  dump_stack+0x15/0x1b
[  553.972935][T30597]  should_fail_ex+0x265/0x280
[  553.972969][T30597]  should_fail+0xb/0x20
[  553.973019][T30597]  should_fail_usercopy+0x1a/0x20
[  553.973048][T30597]  _copy_from_user+0x1c/0xb0
[  553.973114][T30597]  __copy_msghdr+0x244/0x300
[  553.973143][T30597]  ___sys_sendmsg+0x109/0x1d0
[  553.973251][T30597]  __sys_sendmmsg+0x178/0x300
[  553.973274][T30597]  __x64_sys_sendmmsg+0x57/0x70
[  553.973351][T30597]  x64_sys_call+0x2f2f/0x2fb0
[  553.973371][T30597]  do_syscall_64+0xd2/0x200
[  553.973389][T30597]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  553.973447][T30597]  ? clear_bhb_loop+0x40/0x90
[  553.973507][T30597]  ? clear_bhb_loop+0x40/0x90
[  553.973527][T30597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.973544][T30597] RIP: 0033:0x7f083f21e929
[  553.973557][T30597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.973617][T30597] RSP: 002b:00007f083d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  553.973632][T30597] RAX: ffffffffffffffda RBX: 00007f083f445fa0 RCX: 00007f083f21e929
[  553.973643][T30597] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003
[  553.973653][T30597] RBP: 00007f083d887090 R08: 0000000000000000 R09: 0000000000000000
[  553.973665][T30597] R10: 0000000034000811 R11: 0000000000000246 R12: 0000000000000001
[  553.973678][T30597] R13: 0000000000000000 R14: 00007f083f445fa0 R15: 00007ffe60358538
[  553.973748][T30597]  </TASK>
[  554.411410][T30633] ==================================================================
[  554.419497][T30633] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission
[  554.428424][T30633] 
[  554.430729][T30633] write to 0xffff88810537a320 of 4 bytes by task 30634 on cpu 1:
[  554.438421][T30633]  selinux_inode_permission+0x31b/0x620
[  554.443950][T30633]  security_inode_permission+0x6d/0xb0
[  554.449394][T30633]  inode_permission+0x106/0x310
[  554.454225][T30633]  link_path_walk+0x162/0x900
[  554.458888][T30633]  path_openat+0x1de/0x2170
[  554.463382][T30633]  do_filp_open+0x109/0x230
[  554.467870][T30633]  do_sys_openat2+0xa6/0x110
[  554.472445][T30633]  __x64_sys_openat+0xf2/0x120
[  554.477197][T30633]  x64_sys_call+0x1af/0x2fb0
[  554.481784][T30633]  do_syscall_64+0xd2/0x200
[  554.486267][T30633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.492143][T30633] 
[  554.494460][T30633] read to 0xffff88810537a320 of 4 bytes by task 30633 on cpu 0:
[  554.502075][T30633]  selinux_inode_permission+0x2a7/0x620
[  554.507618][T30633]  security_inode_permission+0x6d/0xb0
[  554.513076][T30633]  inode_permission+0x106/0x310
[  554.517921][T30633]  link_path_walk+0x162/0x900
[  554.522588][T30633]  path_openat+0x1de/0x2170
[  554.527086][T30633]  do_filp_open+0x109/0x230
[  554.531581][T30633]  do_sys_openat2+0xa6/0x110
[  554.536164][T30633]  __x64_sys_openat+0xf2/0x120
[  554.540925][T30633]  x64_sys_call+0x1af/0x2fb0
[  554.545506][T30633]  do_syscall_64+0xd2/0x200
[  554.549994][T30633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.555876][T30633] 
[  554.558190][T30633] value changed: 0x00000000 -> 0x00000001
[  554.563889][T30633] 
[  554.566203][T30633] Reported by Kernel Concurrency Sanitizer on:
[  554.572337][T30633] CPU: 0 UID: 0 PID: 30633 Comm: syz.0.9132 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[  554.584822][T30633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.594868][T30633] ==================================================================
[  554.605905][T30616] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  554.625152][T30616] SELinux: failed to load policy