last executing test programs:

22.880673205s ago: executing program 4 (id=1551):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496cb7207", 0xa}], 0x2}, 0x20040030)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=@delchain={0x1b8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xb4, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0xb2d8, 0x18000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

22.690875867s ago: executing program 4 (id=1556):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=@getchain={0x3c, 0x66, 0x23, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffe0, 0x9}, {0x5, 0x4}}, [{0x8, 0xb, 0xfffff102}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{}], 0x8, 0xd, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4092}, 0x18)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
flistxattr(r6, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0xc, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @loopback, 0x10000008}}}, 0x108)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4001}, 0x80)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440))
fremovexattr(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='osx'])
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20004880)

22.564822399s ago: executing program 4 (id=1559):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000000e7ffffff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
syz_clone3(&(0x7f0000002a80)={0x20000100, 0x0, &(0x7f0000001900), &(0x7f0000001940), {0x20}, &(0x7f0000001980)=""/173, 0xad, &(0x7f0000001a40)=""/4096, &(0x7f0000002a40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6, {r1}}, 0x58)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
setresuid(0x0, r2, 0x0)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
fstat(r1, 0x0)
fstat(r1, &(0x7f0000002b80))
r3 = syz_clone(0x40000080, 0x0, 0xfffffccf, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0))
ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={0x0})
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x2)
ptrace(0x4208, r4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000005340))
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x200)
sendto$inet(r5, &(0x7f00000002c0)="f0", 0x1, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)

22.382520783s ago: executing program 4 (id=1564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000580)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

22.239446865s ago: executing program 4 (id=1568):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
pipe2$9p(&(0x7f0000000000), 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000000ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c000100020000000400000010000480"], 0xd0}}, 0x0)

21.944497089s ago: executing program 4 (id=1574):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600f53e034b0b00000000000003003e0292761a93ffffffe9b501", @ANYRESDEC, @ANYRES32], 0x7c8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r4, 0x407, 0x7000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x120, r7, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x101, 0x2a, [@perr={0x84, 0xfb, {0x0, 0xf, [{{0x0, 0x1}, @broadcast, 0x7d47af3e, @value, 0x27}, {{0x0, 0x1}, @device_a, 0x69d2, @value=@broadcast, 0x36}, {{}, @device_b, 0x3, @void, 0x24}, {{}, @device_b, 0xffffffff, @void, 0x3a}, {{}, @device_a, 0x6, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x6}, {{0x0, 0x1}, @device_a, 0x6b, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x3a}, {{}, @broadcast, 0x4, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x26}, {{0x0, 0x1}, @broadcast, 0x7ff, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x400, @value, 0x11}, {{}, @device_a, 0xc000000, @void, 0x1b}, {{}, @device_a, 0x7985, @void, 0x2}]}}]}]}, 0x120}}, 0x40)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040), 0x20a000e, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r6, @ANYBLOB=',~fdnO=', @ANYRESHEX, @ANYRES64=r3, @ANYRESHEX=0x0, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESDEC])
creat(&(0x7f0000000300)='./file0\x00', 0x20)

21.88928076s ago: executing program 32 (id=1574):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600f53e034b0b00000000000003003e0292761a93ffffffe9b501", @ANYRESDEC, @ANYRES32], 0x7c8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r4, 0x407, 0x7000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x120, r7, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x101, 0x2a, [@perr={0x84, 0xfb, {0x0, 0xf, [{{0x0, 0x1}, @broadcast, 0x7d47af3e, @value, 0x27}, {{0x0, 0x1}, @device_a, 0x69d2, @value=@broadcast, 0x36}, {{}, @device_b, 0x3, @void, 0x24}, {{}, @device_b, 0xffffffff, @void, 0x3a}, {{}, @device_a, 0x6, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x6}, {{0x0, 0x1}, @device_a, 0x6b, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x3a}, {{}, @broadcast, 0x4, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x26}, {{0x0, 0x1}, @broadcast, 0x7ff, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x400, @value, 0x11}, {{}, @device_a, 0xc000000, @void, 0x1b}, {{}, @device_a, 0x7985, @void, 0x2}]}}]}]}, 0x120}}, 0x40)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040), 0x20a000e, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r6, @ANYBLOB=',~fdnO=', @ANYRESHEX, @ANYRES64=r3, @ANYRESHEX=0x0, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESDEC])
creat(&(0x7f0000000300)='./file0\x00', 0x20)

2.760764965s ago: executing program 3 (id=1936):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7})
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r1 = socket$inet(0x2, 0x2, 0x1)
sync_file_range(r1, 0x101, 0x8000, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008"], 0x174}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x4000001)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f00000003c0)=0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18)

2.591699499s ago: executing program 3 (id=1940):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x8000000003e, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x6c}}, 0x0)

2.443149181s ago: executing program 3 (id=1945):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x1c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r2)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b703000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10)
fadvise64(0xffffffffffffffff, 0x10, 0x2, 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

2.390199682s ago: executing program 5 (id=1947):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f00000005c0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x6b}}, @common=@icmp6={{0x28}, {0xb, "52e1"}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r7 = dup(r6)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
stat(&(0x7f0000001c40)='./file0\x00', 0x0)

2.256158584s ago: executing program 5 (id=1948):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {0x0, 0x7}, [@common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
sendmsg$nl_route_sched(r1, 0x0, 0x40000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x8, 0xef, 0x1ff, {{0x20, 0x4, 0x2, 0x17, 0x80, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x2c, 0x0, [{0x2, 0x7, "f003777d13"}, {0x7, 0xb, "98d444f933137873dd"}, {0x1, 0x3, "85"}, {0x0, 0x5, "355fdd"}, {0x5, 0xc, "af58f43fdbdde4fc4401"}]}, @lsrr={0x83, 0x17, 0x86, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback]}, @ssrr={0x89, 0x1b, 0xfe, [@broadcast, @multicast1, @private=0xa010101, @broadcast, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x2e, 0x0, 0x7, [0xffffffff, 0x5]}]}}}}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r3, @ANYRES32], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
creat(0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1)
io_setup(0x1ff, &(0x7f0000001540))

2.078351006s ago: executing program 5 (id=1952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getcwd(&(0x7f0000000180)=""/29, 0x1d)
r1 = dup3(r0, r0, 0x80000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic={0x4, 0x6, 0x2, 0xff, 0x912}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0xffffffffffffffff, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x4, 0x9, 0xe}, {0x1, 0x4, 0x7}, {0x4, 0x2, 0xd, 0x7}, {0x3, 0x3, 0x7, 0x2}, {0x4, 0x4, 0x7, 0x3}], 0x10, 0x7}, 0x94)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000940)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x154009, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0766646e6f3dd435a4a8cb65574583df90da8ab1a84d2ffff86e1d15a2200f03c81e9e41c544e669855f8370f72ba5bf97534c4bc3264385719dfc6ee438261cfd1ed52ecfb496ef42d38fef2858779c81847d3a4f23590c704a6ddb7dd828ba24e8d701bf84457b54439b215b2686e6533168dbd5e97843df9d4f3ecb6bc8cfae1e0766d761bd0ece43174a1ae75069f8f579574c76ce1f491b19aabf5250f9b1278283b8bef0fcb7537c3f57ad8b80d67b990c669ea2e925eabc05a79e26f4748c808699cbcbe5142ac53fdcc182cfcc0566523e7982448cf77f053e864c387db85e014a5a2ef853387cc830e388cc74bb645a5f12656893210a957103c24a0f28f31817368b6a3939867cb3661fda9b183c21248cdede5392aa865fcc6f01f7a83517344889a2af08630d7861621437d958d8f4fa7265abc2c22af60a9f152b4eb7abaf9ac103841e23b6dac2d46ceff525", @ANYRESHEX=r2, @ANYBLOB=',directio,debug=0x000000000000dcc0,uname=&\\[]\',posixacl,loose,cache=none,version=9p2000.L,access=client,fowner<', @ANYRESDEC=r3, @ANYBLOB=',\x00'])
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x10040, 0x40)
mknodat$null(r4, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x18)
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000303000000fddbdf252c0000000c0099000400000027000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40)
pipe2$9p(&(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[], 0x15)
socket(0xa, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0)
r11 = dup(r10)
write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0xdfdeac0c63329694, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r9, @ANYRES64, @ANYRES8=r11])

1.89931928s ago: executing program 5 (id=1955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000680)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@nouser_xattr}, {@orlov}, {@grpid}], [{@fowner_gt={'fowner>', 0xee00}}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRES8=r1, @ANYBLOB="7b6b3c54e569ede07be5cb8a6e77c3d453b0b2e98410d1cb10edb2eb4a31020f74dbc8c35bfaefd58a2140636b098823340f442ad901060117db3ad67ddf08020a36be1146dca0f04198a482535987534080d78ecf62923dce9318018934739c87fad4bae8d61d43bbe2e79735ffa8b4941653cdf54dcd892071abd284627b1413de642a9109298da02863dbd802063f61420f05d443", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc9ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x8, 0x800008, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioperm(0x1, 0x2, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010001fff0000eb00000000000000e8f1", @ANYRES32=0x0, @ANYBLOB="0004000000000000200012800b0001006272696467650000100002800a001400aaaaaaaaaa170000"], 0x40}}, 0x0)
r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r5)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xa)
mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,privport'])
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000f2ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r6)

1.513377475s ago: executing program 3 (id=1962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x8006, 0x0, 0x0, 0xffff9e7b}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x118, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}]}}, @TCA_U32_SEL={0xc4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x40, 0x80}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0x80, 0x1, 0x6}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x49f, 0x7, 0x81, 0xb}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x0, 0x2, 0x1}, {0xaa4, 0x406, 0x2, 0x127c}]}}]}}]}, 0x118}}, 0x24040084)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180020000e3734fccdbd5000fdc897050800030002000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x48011)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
syz_create_resource$binfmt(&(0x7f00000001c0)='./file2\x00')
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x10f042, 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)

1.27296865s ago: executing program 1 (id=1971):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496cb7207", 0xa}], 0x2}, 0x20040030)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=@delchain={0x1b8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xb4, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0xb2d8, 0x18000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.23407039s ago: executing program 1 (id=1974):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=@getchain={0x3c, 0x66, 0x23, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffe0, 0x9}, {0x5, 0x4}}, [{0x8, 0xb, 0xfffff102}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{}], 0x8, 0xd, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4092}, 0x18)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
flistxattr(r6, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4001}, 0x80)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440))
fremovexattr(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='osx'])
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20004880)

1.174567201s ago: executing program 1 (id=1977):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000880)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x25}}, {@session={'session', 0x3d, 0x2000000062}}, {@block={'block', 0x3d, 0x800}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@gid}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0x1, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
acct(0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000900)=""/184, 0xb8) (fail_nth: 13)

896.990566ms ago: executing program 1 (id=1980):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
symlink(0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x40000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r3, 0x2)
dup3(r3, r2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x2, 0xa1}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
recvmsg$can_raw(r6, &(0x7f0000000180)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/134, 0x86}, {&(0x7f0000001a00)=""/245, 0xf5}], 0x6, &(0x7f0000001b00)=""/243, 0xf3}, 0x21a0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

769.245488ms ago: executing program 1 (id=1981):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496cb7207", 0xa}], 0x2}, 0x20040030)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=@delchain={0x1b8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xb4, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0xb2d8, 0x18000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

750.698348ms ago: executing program 1 (id=1983):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000efffffff2f009ed700000000000018120100", @ANYRES32=r4, @ANYRES16=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xf}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

576.010061ms ago: executing program 2 (id=1988):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="070000000000000000000500000010000380080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x3c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2e4442, 0x1ff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@rand_addr=0x64010102, @multicast1, @multicast2}, 0xfffffe0c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0xfffffffffffffe31, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x5c, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000f8ffffffb703000008000000b7040000000000008500000059000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)

488.053442ms ago: executing program 2 (id=1989):
io_setup(0x1ff, &(0x7f0000001540)=<r0=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30}, {0x6}]}, 0x10)
io_getevents(r0, 0x1, 0x0, 0x0, 0x0)

486.481832ms ago: executing program 5 (id=1990):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00')
getdents64(r1, 0xffffffffffffffff, 0x43)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYBLOB="a3e63ac84774d67d0ad259aa90926dba0ba6e7c1549ed27a455f393a3137a69163e928108516571c919416ceee9533f36cc6c2ae4d58992207c5981d04935598f5bad9f5b6449e6c295a9126ea345f03148abd84783d2be9255ac196d2f360ea85759e958a9ef77c32834b250071d2e236a399d76d903d5919a60914a39d5c534b6ef2558a60261b5e724bcdd6542831eb0665a4119582a53f89511ef527d516196053ae112691d81a2dc2ce9532c3", @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

368.437974ms ago: executing program 0 (id=1991):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0xd5b2, 0x8, {"7e4a0900000092457506c7ae00"}, 0x20b, 0x7}, @ib={0x1b, 0x9, 0x100, {"2fc01bfb57ab99fee50e456b6aecefd6"}, 0x9, 0x0, 0x400}}}, 0x118)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000000ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600f53e034b0b00000000000003003e0292761a93ffffffe9b501", @ANYRESDEC, @ANYRES32=r2], 0x7c8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r7, 0x407, 0x7000000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x120, r10, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x101, 0x2a, [@perr={0x84, 0xfb, {0x0, 0xf, [{{0x0, 0x1}, @broadcast, 0x7d47af3e, @value, 0x27}, {{0x0, 0x1}, @device_a, 0x69d2, @value=@broadcast, 0x36}, {{}, @device_b, 0x3, @void, 0x24}, {{}, @device_b, 0xffffffff, @void, 0x3a}, {{}, @device_a, 0x6, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x6}, {{0x0, 0x1}, @device_a, 0x6b, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x3a}, {{}, @broadcast, 0x4, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x26}, {{0x0, 0x1}, @broadcast, 0x7ff, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x400, @value, 0x11}, {{}, @device_a, 0xc000000, @void, 0x1b}, {{}, @device_a, 0x7985, @void, 0x2}]}}]}]}, 0x120}}, 0x40)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040), 0x20a000e, &(0x7f00000005c0)=ANY=[@ANYRES8=r4, @ANYRESHEX=r9, @ANYBLOB=',~fdnO=', @ANYRESHEX=r2, @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES64=r3, @ANYRES16, @ANYRESDEC, @ANYRESDEC=r3])
creat(&(0x7f0000000300)='./file0\x00', 0x20)

367.992734ms ago: executing program 5 (id=1992):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x17, 0xa, 0x204, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4804)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
sync()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0)

216.468386ms ago: executing program 2 (id=1993):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x29, 0x2e, &(0x7f0000000040)=0x1, 0x4)

198.059167ms ago: executing program 0 (id=1994):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496cb7207", 0xa}], 0x2}, 0x20040030)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=@delchain={0x1b8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xb4, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0xb2d8, 0x18000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

162.602147ms ago: executing program 2 (id=1995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r2, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {0x0}], 0x2)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010101}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x19)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fcntl$setlease(0xffffffffffffffff, 0x400, 0x3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_clone3(&(0x7f0000000800)={0x0, &(0x7f0000000300), &(0x7f0000000440), &(0x7f0000000600)=<r6=>0x0, {0xb}, &(0x7f0000000640)=""/77, 0x4d, &(0x7f00000006c0)=""/249, &(0x7f00000007c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r3}}, 0x58)
getpgrp(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x100000000000}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r8, 0x0, 0x2)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="6ef85fa1a831a669fc521fdd6c5f55c7a5560004f146fba7c86d24382b67", @ANYRESHEX=r4, @ANYBLOB=',\x00'])

162.042287ms ago: executing program 0 (id=1996):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000001300)=ANY=[], 0x1, 0x65e, &(0x7f00000007c0)="$eJzs3V9v29b9x/EPZdmW/fshKLahCII0Pk1WwME8RZIbB0Z2MY2ibHaSKJD0YAMDiqyxiyByuiUZ0Pgm883+AN0T2F1vdrEHsWHXexa7HFBsdwV2o4H/ZNn660R2uuz9EloekV/yfA+p8ICWeCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDLrpVKZUsNt7Wza0aza77XHLM82dq8bieF2xPrlazoPxUKuprMuvqdk8XvRv+7qevJu+sqRJOCjv7v3Xfufzufy9Yfk9Cr0Hk3+OzF0eMHnc7+0xkn8g2g3BRBW07LDTy3Wd1yjBt4ZnNjo3Rnux6Yuttwgr0gdJrG9p1c6Plm1b5typub6//vFPe8ndZWrdpwspn3vl8plTbMR4vp4b/zUTGwt91Gw21txTHR4ijmnvnip0mIU20ac/Cos78+KckoqDxNUGVSUKVUqZTLlUp54+7m3XulUn5gRukMDUTM/EOL/zKzO3kDrykX9f9/t6SGCmppR7syQ1+2avLlqTlieSrr/z+444ytt7//z3r5qyeLrynu/28k726M6v9H5GJkrGiFYUusEfNf7fVML3Skx3qgjjra19PZbHdldhle7GtLykuuAnly1VRVW3Jk0jlGm9rQhkr6WNuqK5BRXa4achRoT4FCOWrGx8SXo6pCefJltCpbt2VU1qY2tS4jR0XtydOOWtpSTVV93e12D/Qo3u/rY3JUFlSeJqiSzljq+5xkn6VR/f/PXiaf00n9fxRB//82y85f08QAb1w3vf4/p5WLyQYAAAAAAFwEK/7ruxV/d/+epK7qbsMpvem0AAAAAADADMXf/F+PJvNR6T1ZI67/u5efGwAAAAAAmA0rvsfOkrSsFb2TzEzuhJrmRwBzF50fAAAAAAB4ffH3/zcWpG489tqKrN5IKNwEAAAAAADAW+K3fWPs57MxdrvZ1/o5SUF70frzP1/Kn7eO27vftQ6r0ZLqYRoz8AuAsH7NupIO1BtPFiTF72znupWOD5wOgmklA/tKXx3k1MtDw8b6tfwzCSzMZX++mJTARj59py/0fhLzflrvw6Oc4iVJLct1t+EUba9xv6xq9UoudHbDXz55lOtv58Gjzn7xk886D+NcjqNZx4dRHi9PpZOblMvzeLyF+J6LYS1eUj2r8net5rIV11vK2j+n6mGuv6Lp2v9r3Uxibi4n0+Wj7AjE7S9E7S8X40PWa/3n8egQ1kkW5bMtH3YgRmRRiLO4lcTcWr2VTLL80iy+NydViqePwedS9Ak4yaLSn8XkfWH9a2BfTMgi2hfrURZ/jTY0Iov182UxcEQA4E05OOmF4kHMB8fYP9vvvspZ7mDck3xyUe/+w9O1PP9DN7nhcE7Kp99NjK2loOiMvprELCg+seavDTmjl9J+paARZ/TSa/RuUV1/OnkGUpr2QBb/7na798txvb8/06t+Ga3w5ch6g0ZlLtqFd54f/jweAD/y6f6n+08qlfWN0oel0t2K5uNmpBP6HgDAEJOfsTMxwvqwd1X98B8fJKVTPd63ej8pKOoTfaaOHmote4TAyvCtLqfr/ErS2uBVaxS7JJ2O3VdZayOv6uK+tC+20oudT/fF0pkrwJPY9Qs+CgAAXK6bE/rhafr/tey6e/Xa0Ovu5b6fFK4NPCF4VGz5kvcEAAD/Oxz/K2s5/I3l+2774/LmZrkabjvG9+wfG9+tbTnGbYWOb29XW1uOafte6Nlew7R9Lbo1JzDBTrvt+aGpe75pe4G7Gz/53aSPfg+cZrUVunbQbjjVwDG21wqrdmhqbmCb9s6PGm6w7fjxykHbsd26a1dD12uZwNvxbadoTOA4fYFuzWmFbt2Nii3T9t1m1d8zP/EaO03H1JzA9t126CUbzOpyW3XPb8abLap77gcdAgDwNnr24ujxg05n/+mYwrEmx6SFhWEbfNNtBAAAp9FLAwAAAAAAAAAAAAAAAAAAAADwzTfN/X/nKswPu1lQ6s35xZWptmNp1omdp5B79dX/NiZmqTcn2/39Mccj1vr6L0nsRbRUSSE/JmZhSKpTFJak6W8bnUHhBwdJmiNjooVDFy32Gpif/T+HqPDkjydzCv27pdvtdsevvqiBYzFlpXlJTxde4xBc8okIwKX7TwAAAP//9SQ7Ow==")

94.774558ms ago: executing program 0 (id=1997):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x40000000000, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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")

94.428178ms ago: executing program 2 (id=1998):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x800006dc, 0x5, 0xfffffff9, 0xffff, 0xb, "10f720db7cd997451fa550e401630d00"})
r2 = syz_open_pts(0xffffffffffffffff, 0x80000)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000140))
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xa)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x60110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xd}, 0x1108, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
eventfd(0x1)
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0)

67.106488ms ago: executing program 0 (id=1999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x8d, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x58, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x6400, 0x400, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000540)=@sr0, r4, &(0x7f00000006c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/crypto\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0)
read$hiddev(r5, &(0x7f0000001100)=""/234, 0xea)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM(0x4e, 0x3, &(0x7f00002d6000/0x4000)=nil)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000000000eb4c7ad7274ae9"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)

66.780339ms ago: executing program 3 (id=2000):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x104000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x2e, &(0x7f0000000040)=0x1, 0x4)

600.56µs ago: executing program 2 (id=2001):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x1c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r2)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10)
fadvise64(0xffffffffffffffff, 0x10, 0x2, 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

207.06µs ago: executing program 0 (id=2002):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x9, 0x6, 0x31, 0x10007, 0xc, "b21b516a79760675521d52964e421437d4e1c0"})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="431431a86448770e22a9c8095e0b7e5025a86f40fcb97874089622c09e3fb09857d8d7f8a888e1be00df62e2e7497f1247d0f7521b3b2f87963844d0c247288d99ee9a1f00658cf5f06e93f785492697b28fef2490324aec7ef2cfe9809d87d8bba2ddb986b7ea1e66b1d9b5d9ac63e9eb81d3e286b8b5a58f05000000c076f4e936952567f992f9ae2b59a7e54c9d6c5a95c3254316946ebfbac0025309c01975", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="9d00b337fcaf2a02cf5fa2a077617b99361976dda383cc9fe8aaa9422a3608c96767428bdf6dd6a92010906b08b58569d212148dbf75bb6c27a8390338797bd5bfb6f2f42a47e8b681d79619742174578a62765e63821bf415948cfcd28122bcc6b658e8d820999db4691512", @ANYRES32=r1, @ANYBLOB="62cd584b4cff713735890a96d62b4ffead1c6438b14192f4839b8a34bdafa65f3fd0df886f85bfad10cd475dfe010d6dc945dc5a7610b54e4f1c1dc956e64b33b8f93eb6d3ed96bbf870ffedaa7f9d787d7e5ab98e02ffe8afd72f8900fe14813c16995c3767ce755cdb1480d9f89d247d7337495a5895bfa98913edd039ed12827bb47105fe5809fe3dcb80a40e991304e7296ccafc6af9e2c179e9e51f8c7f15b83f29777e7abb8efddb00000000000000804866b7783602caf57e7985d5"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0xfffffffd)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000851)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10008040}, 0x24040080)
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r7 = epoll_create1(0x0)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x90000001})
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2)

0s ago: executing program 3 (id=2003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
epoll_create1(0x80000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)

kernel console output (not intermixed with test programs):

.065799][   T29] audit: type=1400 audit(1753150055.989:87933): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   66.093304][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   66.093322][ T3034] audit: audit_lost=9680 audit_rate_limit=0 audit_backlog_limit=64
[   66.093338][ T3034] audit: backlog limit exceeded
[   66.093471][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   66.093484][ T3034] audit: audit_lost=9681 audit_rate_limit=0 audit_backlog_limit=64
[   66.093500][ T3034] audit: backlog limit exceeded
[   66.093628][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   66.093640][ T3034] audit: audit_lost=9682 audit_rate_limit=0 audit_backlog_limit=64
[   66.093652][ T3034] audit: backlog limit exceeded
[   66.325426][ T5639] xt_CT: No such helper "pptp"
[   66.375638][ T5644] lo speed is unknown, defaulting to 1000
[   66.471687][ T5659] netlink: 'syz.3.908': attribute type 4 has an invalid length.
[   66.823529][ T5693] lo speed is unknown, defaulting to 1000
[   66.975362][ T5705] FAULT_INJECTION: forcing a failure.
[   66.975362][ T5705] name failslab, interval 1, probability 0, space 0, times 0
[   66.988156][ T5705] CPU: 1 UID: 0 PID: 5705 Comm: syz.0.927 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   66.988189][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   66.988204][ T5705] Call Trace:
[   66.988210][ T5705]  <TASK>
[   66.988218][ T5705]  __dump_stack+0x1d/0x30
[   66.988239][ T5705]  dump_stack_lvl+0xe8/0x140
[   66.988258][ T5705]  dump_stack+0x15/0x1b
[   66.988291][ T5705]  should_fail_ex+0x265/0x280
[   66.988395][ T5705]  ? audit_log_d_path+0x8d/0x150
[   66.988435][ T5705]  should_failslab+0x8c/0xb0
[   66.988534][ T5705]  __kmalloc_cache_noprof+0x4c/0x320
[   66.988561][ T5705]  audit_log_d_path+0x8d/0x150
[   66.988596][ T5705]  audit_log_d_path_exe+0x42/0x70
[   66.988635][ T5705]  audit_log_task+0x1e9/0x250
[   66.988752][ T5705]  audit_seccomp+0x61/0x100
[   66.988784][ T5705]  ? __seccomp_filter+0x68c/0x10d0
[   66.988833][ T5705]  __seccomp_filter+0x69d/0x10d0
[   66.988889][ T5705]  ? mnt_put_write_access+0x48/0x60
[   66.988926][ T5705]  ? touch_atime+0x2a8/0x340
[   66.988959][ T5705]  __secure_computing+0x82/0x150
[   66.988986][ T5705]  syscall_trace_enter+0xcf/0x1e0
[   66.989016][ T5705]  do_syscall_64+0xac/0x200
[   66.989054][ T5705]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   66.989139][ T5705]  ? clear_bhb_loop+0x40/0x90
[   66.989168][ T5705]  ? clear_bhb_loop+0x40/0x90
[   66.989269][ T5705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.989289][ T5705] RIP: 0033:0x7f0ca21bd3bc
[   66.989307][ T5705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   66.989344][ T5705] RSP: 002b:00007f0ca0827030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.989367][ T5705] RAX: ffffffffffffffda RBX: 00007f0ca23e5fa0 RCX: 00007f0ca21bd3bc
[   66.989383][ T5705] RDX: 000000000000000f RSI: 00007f0ca08270a0 RDI: 0000000000000004
[   66.989397][ T5705] RBP: 00007f0ca0827090 R08: 0000000000000000 R09: 0000000000000000
[   66.989412][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   66.989427][ T5705] R13: 0000000000000000 R14: 00007f0ca23e5fa0 R15: 00007ffc5f4ebf78
[   66.989449][ T5705]  </TASK>
[   67.385620][ T5734] __nla_validate_parse: 8 callbacks suppressed
[   67.385667][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[   67.418720][ T5734] lo speed is unknown, defaulting to 1000
[   67.529724][ T5749] netlink: 'syz.2.943': attribute type 4 has an invalid length.
[   67.870532][ T5762] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) !
[   68.137462][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'.
[   68.177369][ T5776] lo speed is unknown, defaulting to 1000
[   68.410978][ T5785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.958'.
[   68.986770][ T5803] FAULT_INJECTION: forcing a failure.
[   68.986770][ T5803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.000017][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.0.966 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   69.000044][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.000056][ T5803] Call Trace:
[   69.000062][ T5803]  <TASK>
[   69.000070][ T5803]  __dump_stack+0x1d/0x30
[   69.000120][ T5803]  dump_stack_lvl+0xe8/0x140
[   69.000139][ T5803]  dump_stack+0x15/0x1b
[   69.000221][ T5803]  should_fail_ex+0x265/0x280
[   69.000256][ T5803]  should_fail+0xb/0x20
[   69.000328][ T5803]  should_fail_usercopy+0x1a/0x20
[   69.000368][ T5803]  _copy_from_user+0x1c/0xb0
[   69.000387][ T5803]  do_tcp_setsockopt+0x41c/0x1670
[   69.000419][ T5803]  ? selinux_socket_setsockopt+0x1ad/0x1e0
[   69.000488][ T5803]  tcp_setsockopt+0x51/0xb0
[   69.000517][ T5803]  sock_common_setsockopt+0x69/0x80
[   69.000551][ T5803]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   69.000579][ T5803]  __sys_setsockopt+0x184/0x200
[   69.000618][ T5803]  __x64_sys_setsockopt+0x64/0x80
[   69.000717][ T5803]  x64_sys_call+0x2bd5/0x2fb0
[   69.000758][ T5803]  do_syscall_64+0xd2/0x200
[   69.000781][ T5803]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.000808][ T5803]  ? clear_bhb_loop+0x40/0x90
[   69.000828][ T5803]  ? clear_bhb_loop+0x40/0x90
[   69.000850][ T5803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.000936][ T5803] RIP: 0033:0x7f0ca21be9a9
[   69.000954][ T5803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.000973][ T5803] RSP: 002b:00007f0ca0827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   69.000991][ T5803] RAX: ffffffffffffffda RBX: 00007f0ca23e5fa0 RCX: 00007f0ca21be9a9
[   69.001003][ T5803] RDX: 000000000000002e RSI: 0000000000000006 RDI: 0000000000000003
[   69.001015][ T5803] RBP: 00007f0ca0827090 R08: 0000000000000004 R09: 0000000000000000
[   69.001070][ T5803] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   69.001082][ T5803] R13: 0000000000000000 R14: 00007f0ca23e5fa0 R15: 00007ffc5f4ebf78
[   69.001104][ T5803]  </TASK>
[   69.282697][ T5808] netlink: 'syz.0.967': attribute type 4 has an invalid length.
[   69.322662][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[   69.370455][ T5810] lo speed is unknown, defaulting to 1000
[   69.479669][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'.
[   70.042495][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[   70.116489][ T5841] lo speed is unknown, defaulting to 1000
[   70.978619][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[   71.022166][ T5868] FAULT_INJECTION: forcing a failure.
[   71.022166][ T5868] name failslab, interval 1, probability 0, space 0, times 0
[   71.035000][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.4.992 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   71.035032][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.035069][ T5868] Call Trace:
[   71.035092][ T5868]  <TASK>
[   71.035155][ T5868]  __dump_stack+0x1d/0x30
[   71.035182][ T5868]  dump_stack_lvl+0xe8/0x140
[   71.035207][ T5868]  dump_stack+0x15/0x1b
[   71.035228][ T5868]  should_fail_ex+0x265/0x280
[   71.035306][ T5868]  should_failslab+0x8c/0xb0
[   71.035334][ T5868]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   71.035368][ T5868]  ? proc_alloc_inode+0x34/0x90
[   71.035413][ T5868]  ? __pfx_proc_alloc_inode+0x10/0x10
[   71.035433][ T5868]  proc_alloc_inode+0x34/0x90
[   71.035451][ T5868]  alloc_inode+0x3d/0x170
[   71.035577][ T5868]  new_inode+0x1d/0xe0
[   71.035663][ T5868]  proc_pid_make_inode+0x1f/0xd0
[   71.035696][ T5868]  proc_ns_dir_lookup+0x486/0x560
[   71.035742][ T5868]  ? __pfx_proc_ns_dir_lookup+0x10/0x10
[   71.035849][ T5868]  path_openat+0xcf0/0x2170
[   71.035906][ T5868]  do_filp_open+0x109/0x230
[   71.035945][ T5868]  ? __pfx_kfree_link+0x10/0x10
[   71.035985][ T5868]  do_sys_openat2+0xa6/0x110
[   71.036073][ T5868]  __x64_sys_openat+0xf2/0x120
[   71.036163][ T5868]  x64_sys_call+0x1af/0x2fb0
[   71.036191][ T5868]  do_syscall_64+0xd2/0x200
[   71.036233][ T5868]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.036302][ T5868]  ? clear_bhb_loop+0x40/0x90
[   71.036322][ T5868]  ? clear_bhb_loop+0x40/0x90
[   71.036351][ T5868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.036378][ T5868] RIP: 0033:0x7fd13aaad310
[   71.036491][ T5868] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[   71.036512][ T5868] RSP: 002b:00007fd13910ef70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[   71.036535][ T5868] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd13aaad310
[   71.036629][ T5868] RDX: 0000000000000000 RSI: 00007fd13ab30e81 RDI: 00000000ffffff9c
[   71.036641][ T5868] RBP: 00007fd13ab30e81 R08: 0000000000000000 R09: 0000000000000000
[   71.036654][ T5868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[   71.036670][ T5868] R13: 0000000000000000 R14: 00007fd13acd5fa0 R15: 00007ffe6c4e8848
[   71.036693][ T5868]  </TASK>
[   71.079843][ T5870] audit_log_start: 21344 callbacks suppressed
[   71.079930][ T5870] audit: audit_backlog=65 > audit_backlog_limit=64
[   71.083161][   T29] audit: type=1400 audit(1753150060.959:105411): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.087797][ T5870] audit: audit_lost=10972 audit_rate_limit=0 audit_backlog_limit=64
[   71.092380][   T29] audit: type=1400 audit(1753150060.959:105412): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.099633][ T5870] audit: backlog limit exceeded
[   71.102988][   T29] audit: type=1400 audit(1753150060.959:105413): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.109639][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   71.113079][   T29] audit: type=1400 audit(1753150060.959:105414): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.117492][ T3034] audit: audit_lost=10973 audit_rate_limit=0 audit_backlog_limit=64
[   71.121407][   T29] audit: type=1400 audit(1753150060.959:105415): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.294283][ T5874] ÿ: renamed from bond_slave_0 (while UP)
[   71.435627][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'.
[   71.436722][ T5878] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[   71.447529][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'.
[   71.533880][ T5876] lo speed is unknown, defaulting to 1000
[   71.693798][ T5895] ALSA: seq fatal error: cannot create timer (-22)
[   71.717333][ T5893] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1002'.
[   72.019344][ T5909] lo speed is unknown, defaulting to 1000
[   72.114098][ T5912] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.221264][ T5921] lo speed is unknown, defaulting to 1000
[   72.465778][ T5933] lo speed is unknown, defaulting to 1000
[   72.712146][ T5942] netlink: 'syz.4.1020': attribute type 4 has an invalid length.
[   73.056616][ T5956] __nla_validate_parse: 2 callbacks suppressed
[   73.056631][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[   73.086591][ T5956] lo speed is unknown, defaulting to 1000
[   73.280709][ T5965] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   73.288994][ T5965] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   73.683914][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[   73.746669][ T5985] lo speed is unknown, defaulting to 1000
[   73.895397][ T5986] lo: entered promiscuous mode
[   73.913718][ T5986] tunl0: entered promiscuous mode
[   73.930068][ T5986] gre0: entered promiscuous mode
[   73.947958][ T5986] gretap0: entered promiscuous mode
[   73.985508][ T5986] erspan0: entered promiscuous mode
[   74.009583][ T5986] ip_vti0: entered promiscuous mode
[   74.035654][ T5986] ip6_vti0: entered promiscuous mode
[   74.054030][ T5986] sit0: entered promiscuous mode
[   74.067602][ T5986] ip6tnl0: entered promiscuous mode
[   74.076648][ T5986] ip6gre0: entered promiscuous mode
[   74.083292][ T5986] syz_tun: entered promiscuous mode
[   74.090018][ T5986] ip6gretap0: entered promiscuous mode
[   74.097273][ T5986] bridge0: entered promiscuous mode
[   74.105641][ T5986] vcan0: entered promiscuous mode
[   74.111486][ T5986] team0: entered promiscuous mode
[   74.117211][ T5986] team_slave_0: entered promiscuous mode
[   74.122983][ T5986] team_slave_1: entered promiscuous mode
[   74.129830][ T5986] dummy0: entered promiscuous mode
[   74.150831][ T5986] nlmon0: entered promiscuous mode
[   74.158368][ T5986] 1ªX¹¦À: entered promiscuous mode
[   74.165563][ T5986] 1ªX¹¦À: left allmulticast mode
[   74.170550][ T5986] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[   74.187078][   T10] lo speed is unknown, defaulting to 1000
[   74.192833][   T10] syz0: Port: 1 Link ACTIVE
[   74.296192][ T6011] netlink: 'syz.1.1046': attribute type 4 has an invalid length.
[   74.811067][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'.
[   74.835859][ T6027] lo speed is unknown, defaulting to 1000
[   75.011472][ T6036] netlink: '+}[@': attribute type 39 has an invalid length.
[   75.041096][ T6036] veth1_macvtap: left promiscuous mode
[   75.187907][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'.
[   75.450997][ T6061] FAULT_INJECTION: forcing a failure.
[   75.450997][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.466195][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.2.1069 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   75.466247][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.466298][ T6061] Call Trace:
[   75.466305][ T6061]  <TASK>
[   75.466314][ T6061]  __dump_stack+0x1d/0x30
[   75.466340][ T6061]  dump_stack_lvl+0xe8/0x140
[   75.466389][ T6061]  dump_stack+0x15/0x1b
[   75.466410][ T6061]  should_fail_ex+0x265/0x280
[   75.466487][ T6061]  should_fail+0xb/0x20
[   75.466513][ T6061]  should_fail_usercopy+0x1a/0x20
[   75.466543][ T6061]  _copy_from_user+0x1c/0xb0
[   75.466568][ T6061]  ___sys_recvmsg+0xaa/0x370
[   75.466651][ T6061]  ? _parse_integer+0x27/0x40
[   75.466693][ T6061]  do_recvmmsg+0x1ef/0x540
[   75.466723][ T6061]  ? get_timespec64+0xc9/0x100
[   75.466748][ T6061]  __x64_sys_recvmmsg+0xfb/0x170
[   75.466845][ T6061]  x64_sys_call+0x1c6a/0x2fb0
[   75.466932][ T6061]  do_syscall_64+0xd2/0x200
[   75.466955][ T6061]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   75.466979][ T6061]  ? clear_bhb_loop+0x40/0x90
[   75.467064][ T6061]  ? clear_bhb_loop+0x40/0x90
[   75.467158][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.467262][ T6061] RIP: 0033:0x7f507a68e9a9
[   75.467277][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.467294][ T6061] RSP: 002b:00007f5078cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   75.467310][ T6061] RAX: ffffffffffffffda RBX: 00007f507a8b5fa0 RCX: 00007f507a68e9a9
[   75.467376][ T6061] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[   75.467388][ T6061] RBP: 00007f5078cf7090 R08: 0000200000003700 R09: 0000000000000000
[   75.467483][ T6061] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[   75.467496][ T6061] R13: 0000000000000000 R14: 00007f507a8b5fa0 R15: 00007fff81b0cfd8
[   75.467516][ T6061]  </TASK>
[   75.487277][ T6066] SELinux: syz.4.1071 (6066) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   75.514538][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[   75.524177][ T6069] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[   75.547046][ T6068] lo speed is unknown, defaulting to 1000
[   75.562694][ T3383] lo speed is unknown, defaulting to 1000
[   75.706174][ T3383] syz0: Port: 1 Link DOWN
[   75.863303][ T6090] FAULT_INJECTION: forcing a failure.
[   75.863303][ T6090] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   75.876641][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.4.1079 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   75.876672][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.876685][ T6090] Call Trace:
[   75.876693][ T6090]  <TASK>
[   75.876761][ T6090]  __dump_stack+0x1d/0x30
[   75.876783][ T6090]  dump_stack_lvl+0xe8/0x140
[   75.876801][ T6090]  dump_stack+0x15/0x1b
[   75.876856][ T6090]  should_fail_ex+0x265/0x280
[   75.876891][ T6090]  should_fail_alloc_page+0xf2/0x100
[   75.876919][ T6090]  __alloc_frozen_pages_noprof+0xff/0x360
[   75.876954][ T6090]  alloc_pages_mpol+0xb3/0x250
[   75.877043][ T6090]  vma_alloc_folio_noprof+0x1aa/0x300
[   75.877097][ T6090]  handle_mm_fault+0xec2/0x2be0
[   75.877123][ T6090]  ? mas_walk+0xf2/0x120
[   75.877188][ T6090]  do_user_addr_fault+0x636/0x1090
[   75.877222][ T6090]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   75.877258][ T6090]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   75.877360][ T6090]  exc_page_fault+0x62/0xa0
[   75.877394][ T6090]  asm_exc_page_fault+0x26/0x30
[   75.877415][ T6090] RIP: 0033:0x7fd13a970ca3
[   75.877433][ T6090] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   75.877481][ T6090] RSP: 002b:00007fd13910e4a0 EFLAGS: 00010206
[   75.877499][ T6090] RAX: 000000000000a001 RBX: 00007fd13910e540 RCX: 00007fd130cef000
[   75.877513][ T6090] RDX: 00007fd13910e6e0 RSI: 0000000000000005 RDI: 00007fd13910e5e0
[   75.877527][ T6090] RBP: 00000000000000ef R08: 0000000000000008 R09: 00000000000000a4
[   75.877541][ T6090] R10: 00000000000000be R11: 00007fd13910e540 R12: 0000000000000001
[   75.877554][ T6090] R13: 00007fd13ab4c860 R14: 000000000000004e R15: 00007fd13910e5e0
[   75.877575][ T6090]  </TASK>
[   75.877628][ T6090] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   76.086139][   T29] kauditd_printk_skb: 19158 callbacks suppressed
[   76.086152][   T29] audit: type=1400 audit(1753150066.009:121057): avc:  denied  { create } for  pid=6093 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   76.116715][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   76.123288][ T3034] audit: audit_lost=12146 audit_rate_limit=0 audit_backlog_limit=64
[   76.131501][ T3034] audit: backlog limit exceeded
[   76.136927][   T29] audit: type=1326 audit(1753150066.009:121058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca21be9a9 code=0x7ffc0000
[   76.160577][   T29] audit: type=1326 audit(1753150066.009:121059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ca21be9a9 code=0x7ffc0000
[   76.184195][   T29] audit: type=1400 audit(1753150066.009:121060): avc:  denied  { map_create } for  pid=6093 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   76.203559][   T29] audit: type=1326 audit(1753150066.009:121061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca21be9a9 code=0x7ffc0000
[   76.227227][   T29] audit: type=1326 audit(1753150066.009:121062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ca21be9a9 code=0x7ffc0000
[   76.250822][   T29] audit: type=1400 audit(1753150066.009:121063): avc:  denied  { prog_load } for  pid=6093 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   76.335885][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'.
[   76.441705][ T6103] lo speed is unknown, defaulting to 1000
[   76.598854][ T6124] netlink: 'syz.4.1094': attribute type 4 has an invalid length.
[   76.961868][ T6139] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1099'.
[   77.346803][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[   77.389992][ T6157] lo speed is unknown, defaulting to 1000
[   77.856766][ T6189] netlink: 'syz.2.1119': attribute type 4 has an invalid length.
[   77.974627][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'.
[   78.021263][ T6195] lo speed is unknown, defaulting to 1000
[   78.529136][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[   78.767926][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[   78.826514][ T6226] lo speed is unknown, defaulting to 1000
[   78.985709][ T6242] netlink: 'syz.1.1142': attribute type 6 has an invalid length.
[   79.178661][ T6246] netlink: 'syz.1.1144': attribute type 21 has an invalid length.
[   79.202317][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[   79.214413][ T6253] netlink: 'syz.0.1145': attribute type 4 has an invalid length.
[   79.315712][ T6261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6261 comm=syz.3.1148
[   79.338845][ T6261] sit0: left promiscuous mode
[   79.491733][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'.
[   79.538373][ T6272] lo speed is unknown, defaulting to 1000
[   80.076960][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'.
[   80.113935][ T6307] lo speed is unknown, defaulting to 1000
[   80.221814][ T6322] ip6gre1: entered promiscuous mode
[   80.333887][ T6328] netlink: 'syz.2.1173': attribute type 4 has an invalid length.
[   80.430145][ T6342] gretap0: left promiscuous mode
[   80.492068][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'.
[   80.501147][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'.
[   80.513003][ T6348] FAULT_INJECTION: forcing a failure.
[   80.513003][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.527544][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.0.1183 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   80.527570][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   80.527585][ T6348] Call Trace:
[   80.527593][ T6348]  <TASK>
[   80.527602][ T6348]  __dump_stack+0x1d/0x30
[   80.527688][ T6348]  dump_stack_lvl+0xe8/0x140
[   80.527746][ T6348]  dump_stack+0x15/0x1b
[   80.527838][ T6348]  should_fail_ex+0x265/0x280
[   80.527866][ T6348]  should_fail+0xb/0x20
[   80.527952][ T6348]  should_fail_usercopy+0x1a/0x20
[   80.528033][ T6348]  _copy_from_user+0x1c/0xb0
[   80.528059][ T6348]  set_selection_user+0x4a/0xe0
[   80.528168][ T6348]  tioclinux+0x347/0x460
[   80.528199][ T6348]  vt_ioctl+0x75f/0x1880
[   80.528259][ T6348]  ? tty_jobctrl_ioctl+0x29e/0x810
[   80.528289][ T6348]  tty_ioctl+0x7de/0xb80
[   80.528317][ T6348]  ? __pfx_tty_ioctl+0x10/0x10
[   80.528398][ T6348]  __se_sys_ioctl+0xcb/0x140
[   80.528465][ T6348]  __x64_sys_ioctl+0x43/0x50
[   80.528493][ T6348]  x64_sys_call+0x19a8/0x2fb0
[   80.528518][ T6348]  do_syscall_64+0xd2/0x200
[   80.528539][ T6348]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   80.528611][ T6348]  ? clear_bhb_loop+0x40/0x90
[   80.528631][ T6348]  ? clear_bhb_loop+0x40/0x90
[   80.528713][ T6348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.528737][ T6348] RIP: 0033:0x7f0ca21be9a9
[   80.528755][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.528775][ T6348] RSP: 002b:00007f0ca0827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.528796][ T6348] RAX: ffffffffffffffda RBX: 00007f0ca23e5fa0 RCX: 00007f0ca21be9a9
[   80.528810][ T6348] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004
[   80.528917][ T6348] RBP: 00007f0ca0827090 R08: 0000000000000000 R09: 0000000000000000
[   80.528931][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.528946][ T6348] R13: 0000000000000000 R14: 00007f0ca23e5fa0 R15: 00007ffc5f4ebf78
[   80.528968][ T6348]  </TASK>
[   80.551756][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'.
[   80.557561][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'.
[   80.770730][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'.
[   80.826230][ T6352] lo speed is unknown, defaulting to 1000
[   80.920009][ T6363] SELinux: syz.1.1188 (6363) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   81.093317][   T29] kauditd_printk_skb: 25833 callbacks suppressed
[   81.093374][   T29] audit: type=1400 audit(1753150071.009:137135): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   81.134011][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   81.134114][ T3314] audit: audit_backlog=65 > audit_backlog_limit=64
[   81.140603][ T3034] audit: audit_lost=15401 audit_rate_limit=0 audit_backlog_limit=64
[   81.140616][ T3034] audit: backlog limit exceeded
[   81.140660][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   81.140673][ T3034] audit: audit_lost=15402 audit_rate_limit=0 audit_backlog_limit=64
[   81.140687][ T3034] audit: backlog limit exceeded
[   81.155793][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   81.157264][ T3314] audit: audit_lost=15403 audit_rate_limit=0 audit_backlog_limit=64
[   81.176501][ T6380] gretap0: left promiscuous mode
[   81.311749][ T6394] lo speed is unknown, defaulting to 1000
[   81.432854][ T6407] lo speed is unknown, defaulting to 1000
[   81.494164][ T6413] lo speed is unknown, defaulting to 1000
[   81.546277][ T6418] netlink: 'syz.4.1208': attribute type 4 has an invalid length.
[   81.555435][ T6416] netlink: 'syz.1.1210': attribute type 4 has an invalid length.
[   81.849291][ T6439] FAULT_INJECTION: forcing a failure.
[   81.849291][ T6439] name failslab, interval 1, probability 0, space 0, times 0
[   81.862070][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.1.1219 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   81.862099][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   81.862147][ T6439] Call Trace:
[   81.862153][ T6439]  <TASK>
[   81.862159][ T6439]  __dump_stack+0x1d/0x30
[   81.862178][ T6439]  dump_stack_lvl+0xe8/0x140
[   81.862195][ T6439]  dump_stack+0x15/0x1b
[   81.862246][ T6439]  should_fail_ex+0x265/0x280
[   81.862327][ T6439]  should_failslab+0x8c/0xb0
[   81.862348][ T6439]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   81.862376][ T6439]  ? sidtab_sid2str_get+0xa0/0x130
[   81.862430][ T6439]  kmemdup_noprof+0x2b/0x70
[   81.862451][ T6439]  sidtab_sid2str_get+0xa0/0x130
[   81.862491][ T6439]  security_sid_to_context_core+0x1eb/0x2e0
[   81.862546][ T6439]  security_sid_to_context+0x27/0x40
[   81.862573][ T6439]  avc_audit_post_callback+0x9d/0x520
[   81.862602][ T6439]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   81.862668][ T6439]  common_lsm_audit+0x1bb/0x230
[   81.862686][ T6439]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   81.862714][ T6439]  slow_avc_audit+0x104/0x140
[   81.862749][ T6439]  avc_has_perm+0x128/0x150
[   81.862795][ T6439]  selinux_inode_init_security_anon+0x1f3/0x2b0
[   81.862902][ T6439]  security_inode_init_security_anon+0x4a/0x90
[   81.862940][ T6439]  anon_inode_make_secure_inode+0x9e/0xf0
[   81.862973][ T6439]  __se_sys_memfd_secret+0xd4/0x240
[   81.863064][ T6439]  __x64_sys_memfd_secret+0x1f/0x30
[   81.863098][ T6439]  x64_sys_call+0x2b30/0x2fb0
[   81.863125][ T6439]  do_syscall_64+0xd2/0x200
[   81.863145][ T6439]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   81.863252][ T6439]  ? clear_bhb_loop+0x40/0x90
[   81.863289][ T6439]  ? clear_bhb_loop+0x40/0x90
[   81.863315][ T6439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.863338][ T6439] RIP: 0033:0x7fae7670e9a9
[   81.863356][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.863403][ T6439] RSP: 002b:00007fae74d6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[   81.863424][ T6439] RAX: ffffffffffffffda RBX: 00007fae76935fa0 RCX: 00007fae7670e9a9
[   81.863435][ T6439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   81.863448][ T6439] RBP: 00007fae74d6f090 R08: 0000000000000000 R09: 0000000000000000
[   81.863462][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   81.863476][ T6439] R13: 0000000000000000 R14: 00007fae76935fa0 R15: 00007fff87579408
[   81.863498][ T6439]  </TASK>
[   82.038813][ T6442] lo speed is unknown, defaulting to 1000
[   82.477772][ T6467] xt_CT: No such helper "pptp"
[   82.501752][   T23] IPVS: starting estimator thread 0...
[   82.581439][ T6480] lo speed is unknown, defaulting to 1000
[   82.593199][ T6474] IPVS: using max 2400 ests per chain, 120000 per kthread
[   82.607631][ T6483] netlink: 'syz.4.1236': attribute type 4 has an invalid length.
[   83.008737][ T6518] lo speed is unknown, defaulting to 1000
[   83.307255][ T6530] SELinux: syz.2.1256 (6530) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   83.619954][ T6545] __nla_validate_parse: 135 callbacks suppressed
[   83.619971][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'.
[   83.747250][ T6545] lo speed is unknown, defaulting to 1000
[   83.967745][ T6574] netlink: 'syz.2.1268': attribute type 4 has an invalid length.
[   84.223366][ T6595] FAULT_INJECTION: forcing a failure.
[   84.223366][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.236521][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.4.1283 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   84.236551][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   84.236566][ T6595] Call Trace:
[   84.236574][ T6595]  <TASK>
[   84.236583][ T6595]  __dump_stack+0x1d/0x30
[   84.236663][ T6595]  dump_stack_lvl+0xe8/0x140
[   84.236688][ T6595]  dump_stack+0x15/0x1b
[   84.236708][ T6595]  should_fail_ex+0x265/0x280
[   84.236816][ T6595]  should_fail+0xb/0x20
[   84.236850][ T6595]  should_fail_usercopy+0x1a/0x20
[   84.236880][ T6595]  _copy_from_user+0x1c/0xb0
[   84.236902][ T6595]  ___sys_recvmsg+0xaa/0x370
[   84.236993][ T6595]  ? _parse_integer+0x27/0x40
[   84.237034][ T6595]  do_recvmmsg+0x1ef/0x540
[   84.237122][ T6595]  ? fput+0x8f/0xc0
[   84.237150][ T6595]  __x64_sys_recvmmsg+0xe5/0x170
[   84.237172][ T6595]  x64_sys_call+0x1c6a/0x2fb0
[   84.237194][ T6595]  do_syscall_64+0xd2/0x200
[   84.237230][ T6595]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.237323][ T6595]  ? clear_bhb_loop+0x40/0x90
[   84.237347][ T6595]  ? clear_bhb_loop+0x40/0x90
[   84.237426][ T6595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.237488][ T6595] RIP: 0033:0x7fd13aaae9a9
[   84.237506][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.237523][ T6595] RSP: 002b:00007fd13910f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   84.237541][ T6595] RAX: ffffffffffffffda RBX: 00007fd13acd5fa0 RCX: 00007fd13aaae9a9
[   84.237552][ T6595] RDX: 00000000040002c1 RSI: 0000200000003bc0 RDI: 0000000000000003
[   84.237588][ T6595] RBP: 00007fd13910f090 R08: 0000000000000000 R09: 0000000000000000
[   84.237603][ T6595] R10: 000000002000a002 R11: 0000000000000246 R12: 0000000000000001
[   84.237628][ T6595] R13: 0000000000000000 R14: 00007fd13acd5fa0 R15: 00007ffe6c4e8848
[   84.237703][ T6595]  </TASK>
[   84.469092][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'.
[   84.505000][ T6603] lo speed is unknown, defaulting to 1000
[   84.553428][ T6611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   84.618220][ T6619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6619 comm=+}[@
[   84.650411][ T6611] lo speed is unknown, defaulting to 1000
[   85.018468][ T6647] serio: Serial port ptm0
[   85.060945][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'.
[   85.065835][ T6651] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1304'.
[   85.122093][ T6650] lo speed is unknown, defaulting to 1000
[   85.327854][ T6661] netlink: 'syz.1.1308': attribute type 4 has an invalid length.
[   85.432807][ T6663] netlink: 'syz.0.1309': attribute type 21 has an invalid length.
[   85.442162][ T6663] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1309'.
[   85.458991][ T6663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6663 comm=syz.0.1309
[   85.937618][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'.
[   85.979986][ T6685] lo speed is unknown, defaulting to 1000
[   86.091424][ T6687] lo speed is unknown, defaulting to 1000
[   86.113218][   T29] kauditd_printk_skb: 28453 callbacks suppressed
[   86.113236][   T29] audit: type=1400 audit(1753150076.029:158014): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.113358][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   86.119615][   T29] audit: type=1400 audit(1753150076.029:158015): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.140834][ T3034] audit: audit_lost=17929 audit_rate_limit=0 audit_backlog_limit=64
[   86.140853][ T3034] audit: backlog limit exceeded
[   86.185752][   T29] audit: type=1400 audit(1753150076.029:158016): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.209437][   T29] audit: type=1400 audit(1753150076.029:158017): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.230911][   T29] audit: type=1400 audit(1753150076.029:158018): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.243286][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   86.254919][   T29] audit: type=1400 audit(1753150076.029:158019): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   86.390976][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'.
[   86.400729][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'.
[   86.411112][ T6701] netlink: 'syz.4.1323': attribute type 6 has an invalid length.
[   86.447452][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9066 sclass=netlink_route_socket pid=6714 comm=syz.0.1328
[   86.528674][ T6713] serio: Serial port ptm0
[   86.548530][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'.
[   86.573829][ T6723] lo speed is unknown, defaulting to 1000
[   86.574241][ T6709] Falling back ldisc for ttyS3.
[   86.988195][ T6734] lo speed is unknown, defaulting to 1000
[   87.170883][ T6745] FAULT_INJECTION: forcing a failure.
[   87.170883][ T6745] name failslab, interval 1, probability 0, space 0, times 0
[   87.185719][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.4.1341 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   87.185762][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   87.185774][ T6745] Call Trace:
[   87.185780][ T6745]  <TASK>
[   87.185786][ T6745]  __dump_stack+0x1d/0x30
[   87.185809][ T6745]  dump_stack_lvl+0xe8/0x140
[   87.185846][ T6745]  dump_stack+0x15/0x1b
[   87.185865][ T6745]  should_fail_ex+0x265/0x280
[   87.185898][ T6745]  should_failslab+0x8c/0xb0
[   87.185964][ T6745]  __kmalloc_noprof+0xa5/0x3e0
[   87.185992][ T6745]  ? shmem_initxattrs+0x1c2/0x350
[   87.186066][ T6745]  shmem_initxattrs+0x1c2/0x350
[   87.186087][ T6745]  security_inode_init_security+0x259/0x330
[   87.186189][ T6745]  ? __pfx_shmem_initxattrs+0x10/0x10
[   87.186213][ T6745]  shmem_mknod+0xad/0x180
[   87.186236][ T6745]  shmem_create+0x34/0x50
[   87.186257][ T6745]  ? __pfx_shmem_create+0x10/0x10
[   87.186276][ T6745]  path_openat+0x1105/0x2170
[   87.186356][ T6745]  do_filp_open+0x109/0x230
[   87.186394][ T6745]  do_sys_openat2+0xa6/0x110
[   87.186420][ T6745]  __x64_sys_creat+0x65/0x90
[   87.186452][ T6745]  x64_sys_call+0x114d/0x2fb0
[   87.186516][ T6745]  do_syscall_64+0xd2/0x200
[   87.186536][ T6745]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   87.186568][ T6745]  ? clear_bhb_loop+0x40/0x90
[   87.186593][ T6745]  ? clear_bhb_loop+0x40/0x90
[   87.186698][ T6745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.186720][ T6745] RIP: 0033:0x7fd13aaae9a9
[   87.186734][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.186751][ T6745] RSP: 002b:00007fd13910f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   87.186819][ T6745] RAX: ffffffffffffffda RBX: 00007fd13acd5fa0 RCX: 00007fd13aaae9a9
[   87.186834][ T6745] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000300
[   87.186849][ T6745] RBP: 00007fd13910f090 R08: 0000000000000000 R09: 0000000000000000
[   87.186864][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   87.186879][ T6745] R13: 0000000000000000 R14: 00007fd13acd5fa0 R15: 00007ffe6c4e8848
[   87.186901][ T6745]  </TASK>
[   87.736446][ T6770] netlink: 'syz.3.1352': attribute type 2 has an invalid length.
[   87.777948][ T6772] lo speed is unknown, defaulting to 1000
[   87.895841][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'.
[   88.044364][ T6786] lo speed is unknown, defaulting to 1000
[   88.291521][ T6808] hsr_slave_0: left promiscuous mode
[   88.301385][ T6808] hsr_slave_1: left promiscuous mode
[   88.538453][ T6835] lo speed is unknown, defaulting to 1000
[   88.611667][ T6838] lo speed is unknown, defaulting to 1000
[   88.760341][ T6860] gtp0: entered promiscuous mode
[   88.861796][ T6868] __nla_validate_parse: 4 callbacks suppressed
[   88.861810][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'.
[   88.967814][ T6877] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1396'.
[   89.045629][ T6880] xt_CT: No such helper "pptp"
[   89.059228][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'.
[   89.100629][ T6888] lo speed is unknown, defaulting to 1000
[   89.214860][ T6895] lo speed is unknown, defaulting to 1000
[   89.348583][ T6905] lo speed is unknown, defaulting to 1000
[   89.467379][ T6912] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1407'.
[   89.518327][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'.
[   89.617231][ T6926] FAULT_INJECTION: forcing a failure.
[   89.617231][ T6926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.630478][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.4.1415 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   89.630512][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   89.630527][ T6926] Call Trace:
[   89.630534][ T6926]  <TASK>
[   89.630543][ T6926]  __dump_stack+0x1d/0x30
[   89.630587][ T6926]  dump_stack_lvl+0xe8/0x140
[   89.630655][ T6926]  dump_stack+0x15/0x1b
[   89.630673][ T6926]  should_fail_ex+0x265/0x280
[   89.630716][ T6926]  should_fail+0xb/0x20
[   89.630749][ T6926]  should_fail_usercopy+0x1a/0x20
[   89.630877][ T6926]  _copy_to_user+0x20/0xa0
[   89.630969][ T6926]  simple_read_from_buffer+0xb5/0x130
[   89.631046][ T6926]  proc_fail_nth_read+0x100/0x140
[   89.631157][ T6926]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   89.631199][ T6926]  vfs_read+0x19d/0x6f0
[   89.631226][ T6926]  ? __rcu_read_unlock+0x4f/0x70
[   89.631302][ T6926]  ? __fget_files+0x184/0x1c0
[   89.631327][ T6926]  ksys_read+0xda/0x1a0
[   89.631413][ T6926]  __x64_sys_read+0x40/0x50
[   89.631444][ T6926]  x64_sys_call+0x2d77/0x2fb0
[   89.631572][ T6926]  do_syscall_64+0xd2/0x200
[   89.631597][ T6926]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   89.631625][ T6926]  ? clear_bhb_loop+0x40/0x90
[   89.631690][ T6926]  ? clear_bhb_loop+0x40/0x90
[   89.631711][ T6926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.631733][ T6926] RIP: 0033:0x7fd13aaad3bc
[   89.631751][ T6926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   89.631774][ T6926] RSP: 002b:00007fd13910f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   89.631792][ T6926] RAX: ffffffffffffffda RBX: 00007fd13acd5fa0 RCX: 00007fd13aaad3bc
[   89.631810][ T6926] RDX: 000000000000000f RSI: 00007fd13910f0a0 RDI: 0000000000000004
[   89.631825][ T6926] RBP: 00007fd13910f090 R08: 0000000000000000 R09: 0000000000000000
[   89.631841][ T6926] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   89.631863][ T6926] R13: 0000000000000000 R14: 00007fd13acd5fa0 R15: 00007ffe6c4e8848
[   89.631886][ T6926]  </TASK>
[   89.879769][ T6937] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1419'.
[   90.129825][ T6968] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1432'.
[   90.350186][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[   90.390066][ T7004] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1445'.
[   90.476802][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'.
[   90.522118][ T7011] lo speed is unknown, defaulting to 1000
[   90.989446][ T7036] lo speed is unknown, defaulting to 1000
[   91.050850][ T7042] netlink: 'syz.2.1462': attribute type 4 has an invalid length.
[   91.125158][   T29] kauditd_printk_skb: 21662 callbacks suppressed
[   91.125175][   T29] audit: type=1400 audit(1753150081.049:179308): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.152895][   T29] audit: type=1400 audit(1753150081.049:179309): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.176053][   T29] audit: type=1400 audit(1753150081.049:179310): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.192304][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   91.197385][   T29] audit: type=1400 audit(1753150081.049:179311): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.203880][ T3034] audit: audit_lost=18055 audit_rate_limit=0 audit_backlog_limit=64
[   91.203898][ T3034] audit: backlog limit exceeded
[   91.208923][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[   91.227024][   T29] audit: type=1400 audit(1753150081.049:179312): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.227052][   T29] audit: type=1400 audit(1753150081.049:179313): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   91.385859][ T7055] netlink: 'syz.1.1465': attribute type 4 has an invalid length.
[   91.611171][ T7068] lo speed is unknown, defaulting to 1000
[   91.755958][ T7077] netlink: 'syz.4.1477': attribute type 4 has an invalid length.
[   92.064076][ T7108] netlink: 'syz.0.1490': attribute type 10 has an invalid length.
[   92.076206][ T7108] bridge0: port 3(team0) entered blocking state
[   92.082564][ T7108] bridge0: port 3(team0) entered disabled state
[   92.093979][ T7108] team0: entered allmulticast mode
[   92.105233][ T7108] team_slave_0: entered allmulticast mode
[   92.111004][ T7108] team_slave_1: entered allmulticast mode
[   92.128125][ T7108] team0: entered promiscuous mode
[   92.145941][ T7108] team_slave_0: entered promiscuous mode
[   92.151743][ T7108] team_slave_1: entered promiscuous mode
[   92.167143][ T7108] bridge0: port 3(team0) entered blocking state
[   92.173547][ T7108] bridge0: port 3(team0) entered forwarding state
[   92.225676][ T7114] lo speed is unknown, defaulting to 1000
[   92.419922][ T7130] netlink: 'syz.1.1493': attribute type 4 has an invalid length.
[   92.512876][ T7138] FAULT_INJECTION: forcing a failure.
[   92.512876][ T7138] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   92.526213][ T7138] CPU: 1 UID: 0 PID: 7138 Comm: syz.3.1501 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   92.526266][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   92.526281][ T7138] Call Trace:
[   92.526289][ T7138]  <TASK>
[   92.526298][ T7138]  __dump_stack+0x1d/0x30
[   92.526322][ T7138]  dump_stack_lvl+0xe8/0x140
[   92.526345][ T7138]  dump_stack+0x15/0x1b
[   92.526367][ T7138]  should_fail_ex+0x265/0x280
[   92.526405][ T7138]  should_fail_alloc_page+0xf2/0x100
[   92.526434][ T7138]  __alloc_frozen_pages_noprof+0xff/0x360
[   92.526486][ T7138]  alloc_pages_mpol+0xb3/0x250
[   92.526514][ T7138]  vma_alloc_folio_noprof+0x1aa/0x300
[   92.526582][ T7138]  handle_mm_fault+0xec2/0x2be0
[   92.526618][ T7138]  ? mas_walk+0xf2/0x120
[   92.526706][ T7138]  do_user_addr_fault+0x636/0x1090
[   92.526747][ T7138]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   92.526821][ T7138]  exc_page_fault+0x62/0xa0
[   92.526854][ T7138]  asm_exc_page_fault+0x26/0x30
[   92.526887][ T7138] RIP: 0033:0x7fd99b180ca3
[   92.526907][ T7138] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   92.526929][ T7138] RSP: 002b:00007fd9999264a0 EFLAGS: 00010202
[   92.526948][ T7138] RAX: 0000000000010000 RBX: 00007fd999926540 RCX: 00007fd991507000
[   92.526961][ T7138] RDX: 00007fd9999266e0 RSI: 0000000000000001 RDI: 00007fd9999265e0
[   92.526974][ T7138] RBP: 0000000000000050 R08: 0000000000000006 R09: 000000000000001e
[   92.527058][ T7138] R10: 0000000000000024 R11: 00007fd999926540 R12: 0000000000000001
[   92.527071][ T7138] R13: 00007fd99b35c860 R14: 0000000000000001 R15: 00007fd9999265e0
[   92.527096][ T7138]  </TASK>
[   92.527107][ T7138] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   92.904943][ T7157] lo speed is unknown, defaulting to 1000
[   93.160550][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.168868][ T7175] batadv_slave_0: entered promiscuous mode
[   93.174903][ T7175] batadv_slave_0: entered allmulticast mode
[   93.239703][ T7182] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.254275][ T7182] loop3: detected capacity change from 0 to 128
[   93.261106][ T7182] msdos: Unknown parameter '¯‡È…’�û@'
[   93.282076][ T7169] loop1: detected capacity change from 0 to 1024
[   93.289191][ T7169] EXT4-fs: Ignoring removed nobh option
[   93.294893][ T7169] EXT4-fs: Ignoring removed bh option
[   93.342618][ T7187] lo speed is unknown, defaulting to 1000
[   93.354023][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.449293][ T7193] netlink: 'syz.4.1522': attribute type 1 has an invalid length.
[   93.562722][ T7207] loop4: detected capacity change from 0 to 1756
[   93.675249][ T7217] loop2: detected capacity change from 0 to 256
[   93.689520][ T7217] FAT-fs (loop2): Directory bread(block 64) failed
[   93.710071][ T7217] FAT-fs (loop2): Directory bread(block 65) failed
[   93.711939][ T7223] netlink: 'syz.3.1533': attribute type 1 has an invalid length.
[   93.735230][ T7217] FAT-fs (loop2): Directory bread(block 66) failed
[   93.739342][ T7221] lo speed is unknown, defaulting to 1000
[   93.743328][ T7217] FAT-fs (loop2): Directory bread(block 67) failed
[   93.761210][ T7217] FAT-fs (loop2): Directory bread(block 68) failed
[   93.769409][ T7217] FAT-fs (loop2): Directory bread(block 69) failed
[   93.780299][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv1
[   93.781450][ T7217] FAT-fs (loop2): Directory bread(block 70) failed
[   93.791184][ T7224] bond0: (slave batadv1): Enslaving as a backup interface with an up link
[   93.794573][ T7217] FAT-fs (loop2): Directory bread(block 71) failed
[   93.809120][ T7217] FAT-fs (loop2): Directory bread(block 72) failed
[   93.815719][ T7217] FAT-fs (loop2): Directory bread(block 73) failed
[   93.846737][ T7223] bond0 (unregistering): (slave batadv1): Releasing backup interface
[   93.857988][ T7223] bond0 (unregistering): Released all slaves
[   93.888577][ T7232] __nla_validate_parse: 27 callbacks suppressed
[   93.888594][ T7232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1537'.
[   93.904350][ T7232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1537'.
[   93.924537][ T7233] netlink: 'syz.4.1536': attribute type 1 has an invalid length.
[   93.976982][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.027877][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'.
[   94.037025][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'.
[   94.047873][ T7235] netlink: 'syz.0.1539': attribute type 142 has an invalid length.
[   94.063594][ T7244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1541'.
[   94.073446][ T7238] netlink: 'syz.3.1540': attribute type 10 has an invalid length.
[   94.183693][ T7251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1543'.
[   94.229877][ T7258] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1545'.
[   94.234509][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'.
[   94.301413][ T7257] lo speed is unknown, defaulting to 1000
[   94.454821][ T7275] loop2: detected capacity change from 0 to 2048
[   94.477619][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.522778][ T7261] loop0: detected capacity change from 0 to 1024
[   94.535802][ T7261] EXT4-fs: Ignoring removed nobh option
[   94.541558][ T7261] EXT4-fs: Ignoring removed bh option
[   94.558249][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'.
[   94.569419][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'.
[   94.585374][ T7261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.613664][ T7289] loop4: detected capacity change from 0 to 2048
[   94.628304][ T7289] EXT4-fs (loop4): failed to initialize system zone (-117)
[   94.635878][ T7289] EXT4-fs (loop4): mount failed
[   94.636360][ T7295] SELinux: failed to load policy
[   94.668017][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.793402][ T7303] lo speed is unknown, defaulting to 1000
[   94.900877][ T7312] loop4: detected capacity change from 0 to 512
[   94.911909][ T7312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.928832][ T7312] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1564: invalid indirect mapped block 4294967295 (level 1)
[   94.952770][ T7312] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1564: invalid indirect mapped block 4294967295 (level 1)
[   94.971737][ T7312] EXT4-fs (loop4): 2 truncates cleaned up
[   94.978801][ T7312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.998646][ T7312] EXT4-fs error (device loop4): ext4_check_dx_root:2203: inode #2: comm syz.4.1564: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[   95.035020][ T3312] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[   95.047551][ T3312] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[   95.078102][ T7325] loop2: detected capacity change from 0 to 512
[   95.095881][ T7325] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   95.118341][ T7325] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1569: invalid indirect mapped block 2683928664 (level 1)
[   95.134123][ T7325] EXT4-fs (loop2): Remounting filesystem read-only
[   95.143890][ T7325] EXT4-fs (loop2): 1 truncate cleaned up
[   95.150166][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.198870][ T7329] loop1: detected capacity change from 0 to 2048
[   95.201857][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.217663][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.219826][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.240790][ T7329] EXT4-fs (loop1): failed to initialize system zone (-117)
[   95.249938][ T7329] EXT4-fs (loop1): mount failed
[   95.306224][ T7337] lo speed is unknown, defaulting to 1000
[   95.308938][ T7334] loop2: detected capacity change from 0 to 2048
[   95.369079][ T7334] EXT4-fs (loop2): failed to initialize system zone (-117)
[   95.406350][ T7334] EXT4-fs (loop2): mount failed
[   95.488576][ T7352] FAULT_INJECTION: forcing a failure.
[   95.488576][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.501731][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.0.1579 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   95.501757][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   95.501793][ T7352] Call Trace:
[   95.501801][ T7352]  <TASK>
[   95.501810][ T7352]  __dump_stack+0x1d/0x30
[   95.501835][ T7352]  dump_stack_lvl+0xe8/0x140
[   95.501859][ T7352]  dump_stack+0x15/0x1b
[   95.501879][ T7352]  should_fail_ex+0x265/0x280
[   95.501916][ T7352]  should_fail+0xb/0x20
[   95.501950][ T7352]  should_fail_usercopy+0x1a/0x20
[   95.501980][ T7352]  _copy_to_user+0x20/0xa0
[   95.502059][ T7352]  simple_read_from_buffer+0xb5/0x130
[   95.502097][ T7352]  proc_fail_nth_read+0x100/0x140
[   95.502140][ T7352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   95.502210][ T7352]  vfs_read+0x19d/0x6f0
[   95.502238][ T7352]  ? __rcu_read_unlock+0x4f/0x70
[   95.502262][ T7352]  ? __fget_files+0x184/0x1c0
[   95.502296][ T7352]  ksys_read+0xda/0x1a0
[   95.502351][ T7352]  __x64_sys_read+0x40/0x50
[   95.502386][ T7352]  x64_sys_call+0x2d77/0x2fb0
[   95.502413][ T7352]  do_syscall_64+0xd2/0x200
[   95.502437][ T7352]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   95.502500][ T7352]  ? clear_bhb_loop+0x40/0x90
[   95.502521][ T7352]  ? clear_bhb_loop+0x40/0x90
[   95.502604][ T7352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.502632][ T7352] RIP: 0033:0x7f0ca21bd3bc
[   95.502649][ T7352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   95.502666][ T7352] RSP: 002b:00007f0ca0827030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.502684][ T7352] RAX: ffffffffffffffda RBX: 00007f0ca23e5fa0 RCX: 00007f0ca21bd3bc
[   95.502695][ T7352] RDX: 000000000000000f RSI: 00007f0ca08270a0 RDI: 0000000000000005
[   95.502710][ T7352] RBP: 00007f0ca0827090 R08: 0000000000000000 R09: 0000000000000000
[   95.502737][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.502752][ T7352] R13: 0000000000000000 R14: 00007f0ca23e5fa0 R15: 00007ffc5f4ebf78
[   95.502775][ T7352]  </TASK>
[   95.735387][ T7351] loop1: detected capacity change from 0 to 512
[   95.801467][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   95.849358][ T7351] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.880140][ T7346] lo speed is unknown, defaulting to 1000
[   95.924344][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   95.986936][ T7382] lo speed is unknown, defaulting to 1000
[   95.992577][ T7363] loop0: detected capacity change from 0 to 1024
[   96.002574][ T7346] chnl_net:caif_netlink_parms(): no params data found
[   96.006024][ T7363] EXT4-fs: Ignoring removed nobh option
[   96.015068][ T7363] EXT4-fs: Ignoring removed bh option
[   96.030536][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.117871][ T7397] loop2: detected capacity change from 0 to 2048
[   96.135819][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.143093][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.158575][ T7346] bridge_slave_0: entered allmulticast mode
[   96.173970][ T7397] EXT4-fs (loop2): failed to initialize system zone (-117)
[   96.188944][ T7346] bridge_slave_0: entered promiscuous mode
[   96.196676][ T7397] EXT4-fs (loop2): mount failed
[   96.205057][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.212239][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.221251][ T7346] bridge_slave_1: entered allmulticast mode
[   96.228682][ T7346] bridge_slave_1: entered promiscuous mode
[   96.282801][   T29] kauditd_printk_skb: 7595 callbacks suppressed
[   96.282818][   T29] audit: type=1400 audit(1753150086.199:184744): avc:  denied  { read } for  pid=7401 comm="syz.2.1591" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   96.314555][   T29] audit: type=1400 audit(1753150086.199:184745): avc:  denied  { open } for  pid=7401 comm="syz.2.1591" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   96.345784][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.366291][   T29] audit: type=1326 audit(1753150086.289:184746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[   96.389803][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.392473][   T29] audit: type=1326 audit(1753150086.309:184747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[   96.434553][ T7346] team0: Port device team_slave_0 added
[   96.441615][ T7346] team0: Port device team_slave_1 added
[   96.457647][   T29] audit: type=1400 audit(1753150086.379:184748): avc:  denied  { mounton } for  pid=7401 comm="syz.2.1591" path="/332/file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   96.482550][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.491413][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.519628][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.531358][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.538467][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.566438][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.579760][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.607364][ T7346] hsr_slave_0: entered promiscuous mode
[   96.617670][ T7408] validate_nla: 3 callbacks suppressed
[   96.617687][ T7408] netlink: 'syz.0.1592': attribute type 21 has an invalid length.
[   96.619426][ T7346] hsr_slave_1: entered promiscuous mode
[   96.638886][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.646683][ T7346] Cannot create hsr debugfs directory
[   96.699948][   T29] audit: type=1400 audit(1753150086.619:184749): avc:  denied  { map } for  pid=7410 comm="syz.3.1593" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.727361][   T29] audit: type=1400 audit(1753150086.619:184750): avc:  denied  { read write } for  pid=7410 comm="syz.3.1593" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.789726][   T29] audit: type=1400 audit(1753150086.649:184751): avc:  denied  { ioctl } for  pid=7410 comm="syz.3.1593" path="socket:[19091]" dev="sockfs" ino=19091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.817895][   T29] audit: type=1400 audit(1753150086.679:184752): avc:  denied  { bind } for  pid=7407 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.849635][   T29] audit: type=1326 audit(1753150086.769:184753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[   96.929573][ T7346] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.952831][ T7346] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.981593][ T7346] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.010800][ T7346] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.015834][ T7431] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[   97.051808][ T7430] lo speed is unknown, defaulting to 1000
[   97.173460][ T7442] loop2: detected capacity change from 0 to 164
[   97.193231][ T3441] bridge_slave_1: left allmulticast mode
[   97.195804][ T7442] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   97.199112][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.217042][ T7439] loop1: detected capacity change from 0 to 1024
[   97.227400][ T3441] bridge_slave_0: left allmulticast mode
[   97.233341][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.270149][ T7439] EXT4-fs: Ignoring removed orlov option
[   97.276005][ T7439] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.299947][ T7448] loop0: detected capacity change from 0 to 2048
[   97.320083][ T7439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.352961][ T7448] EXT4-fs (loop0): failed to initialize system zone (-117)
[   97.378982][ T7463] loop3: detected capacity change from 0 to 2048
[   97.382961][ T7448] EXT4-fs (loop0): mount failed
[   97.445047][ T7455] netlink: 'syz.2.1601': attribute type 10 has an invalid length.
[   97.500350][ T7477] loop0: detected capacity change from 0 to 2048
[   97.518234][ T7477] EXT4-fs (loop0): failed to initialize system zone (-117)
[   97.525595][ T7477] EXT4-fs (loop0): mount failed
[   97.549426][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.576644][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.589722][ T3441] bond0 (unregistering): Released all slaves
[   97.601255][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.651218][ T7490] loop3: detected capacity change from 0 to 1024
[   97.658070][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.668966][ T7490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.681906][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.689782][ T7490] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.721705][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.796405][ T7497] xt_CT: No such helper "pptp"
[   97.823495][ T3441] team0 (unregistering): Port device team_slave_1 removed
[   97.839448][ T3441] team0 (unregistering): Port device team_slave_0 removed
[   97.865030][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.920277][ T7346] 8021q: adding VLAN 0 to HW filter on device team0
[   97.939612][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.946910][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.971799][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.978938][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.041132][ T7508] lo speed is unknown, defaulting to 1000
[   98.103346][ T7519] netlink: 'syz.1.1611': attribute type 1 has an invalid length.
[   98.176648][ T7532] loop3: detected capacity change from 0 to 128
[   98.200648][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.209998][ T7532] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ'
[   98.339444][ T7549] loop1: detected capacity change from 0 to 2048
[   98.365087][ T7549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.448151][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.536783][ T7588] SELinux: syz.1.1623 (7588) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   98.587685][ T7555] loop2: detected capacity change from 0 to 1024
[   98.589126][ T7594] loop0: detected capacity change from 0 to 512
[   98.608836][ T7555] EXT4-fs: Ignoring removed nobh option
[   98.614513][ T7555] EXT4-fs: Ignoring removed bh option
[   98.675203][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.707562][ T7346] veth0_vlan: entered promiscuous mode
[   98.715798][ T7594] EXT4-fs: inline encryption not supported
[   98.729045][ T7346] veth1_vlan: entered promiscuous mode
[   98.745447][ T7346] veth0_macvtap: entered promiscuous mode
[   98.752999][ T7346] veth1_macvtap: entered promiscuous mode
[   98.764296][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.808534][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.827499][ T7346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.838259][ T7346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.847054][ T7346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.855838][ T7346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.867466][ T7594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.880607][ T7594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   98.895821][ T7594] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   98.931780][ T7594] EXT4-fs (loop0): 1 truncate cleaned up
[   98.936974][ T7609] lo speed is unknown, defaulting to 1000
[   98.938921][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.016742][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.047261][ T7621] netlink: 'syz.3.1627': attribute type 1 has an invalid length.
[   99.100133][ T7624] __nla_validate_parse: 21 callbacks suppressed
[   99.100153][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'.
[   99.182136][ T7632] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1631'.
[   99.242162][ T7643] __vm_enough_memory: pid: 7643, comm: syz.5.1635, bytes: 21199916441600 not enough memory for the allocation
[   99.271451][ T7642] loop1: detected capacity change from 0 to 2048
[   99.305370][ T7643] loop5: detected capacity change from 0 to 512
[   99.310974][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.325318][ T7643] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   99.350926][ T7642] EXT4-fs (loop1): failed to initialize system zone (-117)
[   99.358476][ T7642] EXT4-fs (loop1): mount failed
[   99.370140][ T7643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[   99.426957][ T7643] System zones: 1-12
[   99.458412][ T7643] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1635: missing EA_INODE flag
[   99.480398][ T7643] EXT4-fs (loop5): Remounting filesystem read-only
[   99.481850][ T7661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.487482][ T7643] EXT4-fs (loop5): 1 orphan inode deleted
[   99.506649][ T7643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.526956][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'.
[   99.538811][ T7346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.550049][ T7661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.618441][ T7661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.646027][ T7679] loop5: detected capacity change from 0 to 2048
[   99.677477][ T7677] lo speed is unknown, defaulting to 1000
[   99.690587][ T7679] EXT4-fs (loop5): failed to initialize system zone (-117)
[   99.718981][ T7679] EXT4-fs (loop5): mount failed
[   99.829840][ T7661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.866523][ T7703] loop1: detected capacity change from 0 to 2048
[   99.896083][ T7703] EXT4-fs (loop1): failed to initialize system zone (-117)
[   99.916685][ T7703] EXT4-fs (loop1): mount failed
[   99.928850][ T7661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.996132][ T7661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.016835][ T7661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.042703][ T7661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.055622][ T7713] loop5: detected capacity change from 0 to 2048
[  100.064909][ T7719] netlink: 'syz.0.1647': attribute type 1 has an invalid length.
[  100.081207][ T7717] loop1: detected capacity change from 0 to 2048
[  100.145804][ T7713] EXT4-fs (loop5): failed to initialize system zone (-117)
[  100.168999][ T7717] EXT4-fs (loop1): failed to initialize system zone (-117)
[  100.190946][ T7717] EXT4-fs (loop1): mount failed
[  100.204419][ T7713] EXT4-fs (loop5): mount failed
[  100.357824][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'.
[  100.361237][ T7743] netlink: 'syz.3.1654': attribute type 22 has an invalid length.
[  100.376611][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'.
[  100.424792][ T7750] lo speed is unknown, defaulting to 1000
[  100.430441][ T7758] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) !
[  100.462289][ T7761] loop0: detected capacity change from 0 to 512
[  100.501217][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.530714][ T7745] loop1: detected capacity change from 0 to 1024
[  100.551155][ T7761] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.563974][ T7761] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1657: iget: bad i_size value: 2533274857506816
[  100.572024][ T7745] EXT4-fs: Ignoring removed nobh option
[  100.583486][ T7745] EXT4-fs: Ignoring removed bh option
[  100.587596][ T7771] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1660'.
[  100.668691][ T7745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.759691][ T7795] sd 0:0:1:0: device reset
[  100.976317][ T7822] netlink: 'syz.2.1666': attribute type 1 has an invalid length.
[  101.076662][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'.
[  101.099774][ T7831] lo speed is unknown, defaulting to 1000
[  101.105146][ T7833] loop2: detected capacity change from 0 to 1164
[  101.206419][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.236043][ T7840] loop1: detected capacity change from 0 to 2048
[  101.265324][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.285271][ T7840] EXT4-fs (loop1): failed to initialize system zone (-117)
[  101.288458][ T7843] loop5: detected capacity change from 0 to 2048
[  101.292524][ T7840] EXT4-fs (loop1): mount failed
[  101.334079][ T7843] EXT4-fs (loop5): failed to initialize system zone (-117)
[  101.344827][ T7843] EXT4-fs (loop5): mount failed
[  101.402321][ T7851] loop1: detected capacity change from 0 to 2048
[  101.426935][ T7849] tipc: Started in network mode
[  101.431892][ T7849] tipc: Node identity 8ef07a7f03cf, cluster identity 4711
[  101.439186][ T7849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.440076][ T7851] EXT4-fs (loop1): failed to initialize system zone (-117)
[  101.446468][ T7853] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1677'.
[  101.451443][   T29] kauditd_printk_skb: 435 callbacks suppressed
[  101.451457][   T29] audit: type=1400 audit(1753150091.369:185189): avc:  denied  { create } for  pid=7848 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.457873][ T7851] EXT4-fs (loop1): mount failed
[  101.497055][ T7848] tipc: Resetting bearer <eth:syzkaller0>
[  101.502905][   T29] audit: type=1400 audit(1753150091.389:185190): avc:  denied  { ioctl } for  pid=7848 comm="syz.0.1674" path="socket:[21816]" dev="sockfs" ino=21816 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.586295][ T7848] tipc: Disabling bearer <eth:syzkaller0>
[  101.604831][ T7862] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.614526][ T7862] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.622831][ T7862] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.631172][ T7862] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.644320][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1682'.
[  101.667912][ T7870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.679850][ T7868] lo speed is unknown, defaulting to 1000
[  101.706119][ T7869] netlink: 'syz.1.1681': attribute type 1 has an invalid length.
[  101.785159][   T29] audit: type=1400 audit(1753150091.699:185191): avc:  denied  { getopt } for  pid=7861 comm="syz.3.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.825887][ T7878] loop1: detected capacity change from 0 to 1024
[  101.838891][   T29] audit: type=1326 audit(1753150091.759:185192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.842040][ T7878] EXT4-fs: Ignoring removed nobh option
[  101.862632][   T29] audit: type=1326 audit(1753150091.759:185193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.862670][   T29] audit: type=1326 audit(1753150091.759:185194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.862702][   T29] audit: type=1326 audit(1753150091.759:185195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.862730][   T29] audit: type=1326 audit(1753150091.759:185196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.868814][   T29] audit: type=1326 audit(1753150091.759:185197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.897091][ T7878] EXT4-fs: Ignoring removed bh option
[  101.916802][   T29] audit: type=1326 audit(1753150091.759:185198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ae35e9a9 code=0x7ffc0000
[  101.972428][ T7875] loop0: detected capacity change from 0 to 1024
[  102.035041][ T7875] EXT4-fs: Ignoring removed nobh option
[  102.040714][ T7875] EXT4-fs: Ignoring removed bh option
[  102.049341][ T7878] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[  102.108406][ T7878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.123394][ T7875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.142390][ T7886] loop2: detected capacity change from 0 to 2048
[  102.171272][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.182154][ T7886] EXT4-fs (loop2): failed to initialize system zone (-117)
[  102.189733][ T7886] EXT4-fs (loop2): mount failed
[  102.261701][   T10] hid (null): invalid report_size 100792583
[  102.269094][   T10] hid (null): unknown global tag 0xad
[  102.274533][   T10] hid (null): global environment stack underflow
[  102.280900][   T10] hid (null): invalid report_size 60226
[  102.309965][ T7910] loop1: detected capacity change from 0 to 512
[  102.310192][   T10] hid-generic 0009:0005:0006.0001: invalid report_size 100792583
[  102.325398][   T10] hid-generic 0009:0005:0006.0001: item 0 4 1 7 parsing failed
[  102.328841][ T7910] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  102.334141][   T10] hid-generic 0009:0005:0006.0001: probe with driver hid-generic failed with error -22
[  102.340924][ T7910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  102.358938][ T7910] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.367520][ T7910] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.1695: iget: bad i_size value: 12154761577498
[  102.381015][ T7910] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1695: couldn't read orphan inode 13 (err -117)
[  102.394510][ T7910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  102.426213][ T7913] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1697'.
[  102.535086][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.563835][ T7923] loop5: detected capacity change from 0 to 2048
[  102.601597][ T7923] EXT4-fs (loop5): failed to initialize system zone (-117)
[  102.609020][ T7923] EXT4-fs (loop5): mount failed
[  102.664565][ T7932] loop5: detected capacity change from 0 to 2048
[  102.697600][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.697625][ T7932] EXT4-fs (loop5): failed to initialize system zone (-117)
[  102.697660][ T7932] EXT4-fs (loop5): mount failed
[  102.740542][ T7939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.753954][ T7942] FAULT_INJECTION: forcing a failure.
[  102.753954][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.767178][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.1.1709 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  102.767213][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.767228][ T7942] Call Trace:
[  102.767235][ T7942]  <TASK>
[  102.767244][ T7942]  __dump_stack+0x1d/0x30
[  102.767286][ T7942]  dump_stack_lvl+0xe8/0x140
[  102.767305][ T7942]  dump_stack+0x15/0x1b
[  102.767321][ T7942]  should_fail_ex+0x265/0x280
[  102.767401][ T7942]  should_fail+0xb/0x20
[  102.767435][ T7942]  should_fail_usercopy+0x1a/0x20
[  102.767471][ T7942]  _copy_to_iter+0x24b/0xe30
[  102.767541][ T7942]  seq_read_iter+0x76a/0x940
[  102.767599][ T7942]  seq_read+0x1f7/0x240
[  102.767704][ T7942]  ? __pfx_seq_read+0x10/0x10
[  102.767735][ T7942]  proc_reg_read+0x128/0x1c0
[  102.767762][ T7942]  ? __pfx_proc_reg_read+0x10/0x10
[  102.767788][ T7942]  vfs_readv+0x3fb/0x690
[  102.767893][ T7942]  __x64_sys_preadv+0xfd/0x1c0
[  102.767913][ T7942]  x64_sys_call+0x1503/0x2fb0
[  102.767934][ T7942]  do_syscall_64+0xd2/0x200
[  102.768018][ T7942]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  102.768043][ T7942]  ? clear_bhb_loop+0x40/0x90
[  102.768064][ T7942]  ? clear_bhb_loop+0x40/0x90
[  102.768167][ T7942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.768192][ T7942] RIP: 0033:0x7fae7670e9a9
[  102.768206][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.768223][ T7942] RSP: 002b:00007fae74d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  102.768303][ T7942] RAX: ffffffffffffffda RBX: 00007fae76935fa0 RCX: 00007fae7670e9a9
[  102.768319][ T7942] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003
[  102.768334][ T7942] RBP: 00007fae74d6f090 R08: 0000000000000000 R09: 0000000000000000
[  102.768373][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.768388][ T7942] R13: 0000000000000000 R14: 00007fae76935fa0 R15: 00007fff87579408
[  102.768411][ T7942]  </TASK>
[  102.986061][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.996843][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.031061][ T7939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.101407][ T7963] netlink: 'syz.5.1712': attribute type 1 has an invalid length.
[  103.112249][ T7950] loop0: detected capacity change from 0 to 8192
[  103.145668][ T7939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.185203][ T5201]  loop0: p3 p4 < >
[  103.191502][ T5201] loop0: p3 start 18548 is beyond EOD, truncated
[  103.214057][ T7950]  loop0: p3 p4 < >
[  103.214584][ T7939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.218088][ T7950] loop0: p3 start 18548 is beyond EOD, truncated
[  103.407771][ T7939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.424156][ T7939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.439261][ T7939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.456423][ T7939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.632200][ T7994] lo speed is unknown, defaulting to 1000
[  103.735071][ T8000] loop0: detected capacity change from 0 to 2048
[  103.749751][ T8000] EXT4-fs (loop0): blocks per group (262144) and clusters per group (16384) inconsistent
[  103.758940][ T7992] lo speed is unknown, defaulting to 1000
[  103.856720][ T8003] loop1: detected capacity change from 0 to 2048
[  103.885474][ T8003] EXT4-fs (loop1): failed to initialize system zone (-117)
[  103.895166][ T8003] EXT4-fs (loop1): mount failed
[  103.910707][ T8007] loop0: detected capacity change from 0 to 2048
[  103.928803][ T8007] EXT4-fs (loop0): failed to initialize system zone (-117)
[  103.936871][ T8003] netlink: 'syz.1.1726': attribute type 39 has an invalid length.
[  103.944895][ T8007] EXT4-fs (loop0): mount failed
[  104.091352][ T8013] loop0: detected capacity change from 0 to 2048
[  104.105405][ T8013] EXT4-fs (loop0): failed to initialize system zone (-117)
[  104.113885][ T8013] EXT4-fs (loop0): mount failed
[  104.168416][ T8017] loop0: detected capacity change from 0 to 2048
[  104.196170][ T8017] EXT4-fs (loop0): failed to initialize system zone (-117)
[  104.204143][ T8017] EXT4-fs (loop0): mount failed
[  104.344822][ T8041] __nla_validate_parse: 5 callbacks suppressed
[  104.344841][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'.
[  104.358649][ T8041] lo speed is unknown, defaulting to 1000
[  104.447552][ T8050] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  104.541340][ T8053] infiniband syz!: set active
[  104.541356][ T8053] infiniband syz!: added team_slave_0
[  104.547726][ T8062] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1743'.
[  104.568629][ T8053] RDS/IB: syz!: added
[  104.568660][ T8053] smc: adding ib device syz! with port count 1
[  104.568675][ T8053] smc:    ib device syz! port 1 has pnetid 
[  104.592858][ T8065] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1744'.
[  104.657837][ T8069] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.1745'.
[  104.661149][ T8069] IPv6: Can't replace route, no match found
[  104.761537][ T8069] loop5: detected capacity change from 0 to 1024
[  104.772576][ T8069] EXT4-fs: Ignoring removed bh option
[  104.772612][ T8069] EXT4-fs: inline encryption not supported
[  104.772630][ T8069] ext4: Unknown parameter 'smackfsroot'
[  104.873834][ T8072] SELinux: failed to load policy
[  104.993954][ T8079] netlink: 'syz.5.1749': attribute type 12 has an invalid length.
[  104.995614][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'.
[  105.016689][ T8079] bridge0: port 3(macvlan2) entered blocking state
[  105.016732][ T8079] bridge0: port 3(macvlan2) entered disabled state
[  105.016811][ T8079] macvlan2: entered allmulticast mode
[  105.016828][ T8079] bridge0: entered allmulticast mode
[  105.024310][ T8080] loop0: detected capacity change from 0 to 2048
[  105.029699][ T8079] macvlan2: left allmulticast mode
[  105.029728][ T8079] bridge0: left allmulticast mode
[  105.069902][ T8080] EXT4-fs (loop0): failed to initialize system zone (-117)
[  105.077770][ T8080] EXT4-fs (loop0): mount failed
[  105.102646][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'.
[  105.127249][ T8084] lo speed is unknown, defaulting to 1000
[  105.280708][ T8095] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1755'.
[  105.336503][ T8100] loop0: detected capacity change from 0 to 512
[  105.342889][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'.
[  105.362786][ T8098] bridge_slave_1: left allmulticast mode
[  105.368572][ T8098] bridge_slave_1: left promiscuous mode
[  105.374264][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.410534][ T8098] bridge_slave_0: left allmulticast mode
[  105.416282][ T8098] bridge_slave_0: left promiscuous mode
[  105.422013][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.426270][ T8100] EXT4-fs (loop0): 1 orphan inode deleted
[  105.438817][ T8100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.451706][   T70] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[  105.469917][ T8100] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.500769][ T8100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.562056][ T8107] loop3: detected capacity change from 0 to 1024
[  105.570999][ T8107] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.594935][ T8107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.626364][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.658928][ T8119] loop3: detected capacity change from 0 to 512
[  105.668404][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1759'.
[  105.677576][ T8116] bridge_slave_1: left allmulticast mode
[  105.683405][ T8116] bridge_slave_1: left promiscuous mode
[  105.689553][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.697266][ T8119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  105.718632][ T8116] bridge_slave_0: left allmulticast mode
[  105.722253][ T8121] loop2: detected capacity change from 0 to 2048
[  105.724377][ T8116] bridge_slave_0: left promiscuous mode
[  105.724589][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.750207][ T8119] EXT4-fs (loop3): 1 truncate cleaned up
[  105.760383][ T8119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.767414][ T8121] EXT4-fs (loop2): failed to initialize system zone (-117)
[  105.782823][ T8121] EXT4-fs (loop2): mount failed
[  105.821865][ T8113] loop1: detected capacity change from 0 to 1024
[  105.830863][ T8113] EXT4-fs: Ignoring removed nobh option
[  105.836497][ T8113] EXT4-fs: Ignoring removed bh option
[  105.855865][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.868186][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.918942][ T8138] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1767'.
[  106.004666][ T8142] lo speed is unknown, defaulting to 1000
[  106.403085][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.445731][ T8157] unsupported nla_type 65024
[  106.489300][ T8160] loop1: detected capacity change from 0 to 512
[  106.505385][ T8160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  106.514938][ T8160] System zones: 1-12
[  106.519310][ T8160] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1773: error while reading EA inode 32 err=-116
[  106.534720][ T8160] EXT4-fs (loop1): Remounting filesystem read-only
[  106.541283][ T8160] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  106.553101][ T8160] EXT4-fs (loop1): 1 orphan inode deleted
[  106.560103][ T8160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.572794][ T8166] loop0: detected capacity change from 0 to 2048
[  106.591337][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.594145][ T8166] EXT4-fs (loop0): failed to initialize system zone (-117)
[  106.607917][ T8166] EXT4-fs (loop0): mount failed
[  106.652821][ T8172] loop0: detected capacity change from 0 to 128
[  106.661720][ T8172] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.668352][ T8170] loop1: detected capacity change from 0 to 2048
[  106.686651][ T8172] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  106.709210][ T8170] EXT4-fs (loop1): failed to initialize system zone (-117)
[  106.720763][ T8170] EXT4-fs (loop1): mount failed
[  106.727514][ T8172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8172 comm=syz.0.1777
[  106.738893][   T29] kauditd_printk_skb: 403 callbacks suppressed
[  106.738913][   T29] audit: type=1400 audit(1753150096.659:185601): avc:  denied  { read } for  pid=8175 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  106.856465][ T8181] lo speed is unknown, defaulting to 1000
[  106.871293][ T8184] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  106.928409][   T29] audit: type=1400 audit(1753150096.849:185602): avc:  denied  { create } for  pid=8182 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  106.949406][   T29] audit: type=1400 audit(1753150096.849:185603): avc:  denied  { setopt } for  pid=8182 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  107.006729][ T8190] loop5: detected capacity change from 0 to 164
[  107.076299][ T8195] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  107.099842][   T29] audit: type=1326 audit(1753150097.009:185604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.124932][   T29] audit: type=1326 audit(1753150097.009:185605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.148753][   T29] audit: type=1326 audit(1753150097.009:185606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.172409][   T29] audit: type=1326 audit(1753150097.009:185607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.197392][   T29] audit: type=1326 audit(1753150097.009:185608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.221171][   T29] audit: type=1326 audit(1753150097.009:185609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.244696][   T29] audit: type=1326 audit(1753150097.009:185610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7670e9a9 code=0x7ffc0000
[  107.278802][    C0] hrtimer: interrupt took 47305 ns
[  107.290966][ T8204] loop3: detected capacity change from 0 to 128
[  107.537667][ T8214] loop1: detected capacity change from 0 to 2048
[  107.566649][ T8214] EXT4-fs (loop1): failed to initialize system zone (-117)
[  107.609759][ T8214] EXT4-fs (loop1): mount failed
[  107.668360][ T8221] lo speed is unknown, defaulting to 1000
[  107.789699][   T31] bio_check_eod: 24 callbacks suppressed
[  107.789778][   T31] kworker/u8:1: attempt to access beyond end of device
[  107.789778][   T31] loop3: rw=1, sector=137, nr_sectors = 8 limit=128
[  107.833969][   T31] kworker/u8:1: attempt to access beyond end of device
[  107.833969][   T31] loop3: rw=1, sector=153, nr_sectors = 144 limit=128
[  107.890996][   T31] kworker/u8:1: attempt to access beyond end of device
[  107.890996][   T31] loop3: rw=1, sector=305, nr_sectors = 8 limit=128
[  107.915836][ T8228] netlink: 'syz.1.1794': attribute type 1 has an invalid length.
[  107.927400][   T31] kworker/u8:1: attempt to access beyond end of device
[  107.927400][   T31] loop3: rw=1, sector=321, nr_sectors = 8 limit=128
[  107.962648][   T31] kworker/u8:1: attempt to access beyond end of device
[  107.962648][   T31] loop3: rw=1, sector=337, nr_sectors = 8 limit=128
[  108.007002][   T31] kworker/u8:1: attempt to access beyond end of device
[  108.007002][   T31] loop3: rw=1, sector=353, nr_sectors = 8 limit=128
[  108.036426][   T31] kworker/u8:1: attempt to access beyond end of device
[  108.036426][   T31] loop3: rw=1, sector=369, nr_sectors = 8 limit=128
[  108.050001][   T31] kworker/u8:1: attempt to access beyond end of device
[  108.050001][   T31] loop3: rw=1, sector=385, nr_sectors = 8 limit=128
[  108.063695][   T31] kworker/u8:1: attempt to access beyond end of device
[  108.063695][   T31] loop3: rw=1, sector=401, nr_sectors = 8 limit=128
[  108.077106][   T31] kworker/u8:1: attempt to access beyond end of device
[  108.077106][   T31] loop3: rw=1, sector=417, nr_sectors = 8 limit=128
[  108.141347][ T8246] loop5: detected capacity change from 0 to 2048
[  108.186415][ T8246] EXT4-fs (loop5): failed to initialize system zone (-117)
[  108.206499][ T8246] EXT4-fs (loop5): mount failed
[  108.287035][ T8258] loop5: detected capacity change from 0 to 164
[  108.336850][ T8258] iso9660: Corrupted directory entry in block 2 of inode 1792
[  108.386911][ T8250] loop1: detected capacity change from 0 to 1024
[  108.393808][ T8250] EXT4-fs: Ignoring removed nobh option
[  108.399450][ T8250] EXT4-fs: Ignoring removed bh option
[  108.428659][ T8254] loop3: detected capacity change from 0 to 1024
[  108.442663][ T8254] EXT4-fs: Ignoring removed nobh option
[  108.448990][ T8254] EXT4-fs: Ignoring removed bh option
[  108.459108][ T8261] loop0: detected capacity change from 0 to 256
[  108.468310][ T8250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.509006][ T8254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.529295][ T8268] loop5: detected capacity change from 0 to 2048
[  108.549324][ T8261] FAT-fs (loop0): codepage cp737 not found
[  108.566353][ T8268] EXT4-fs (loop5): failed to initialize system zone (-117)
[  108.591168][ T8268] EXT4-fs (loop5): mount failed
[  108.688590][ T8278] loop5: detected capacity change from 0 to 2048
[  108.708041][ T8278] EXT4-fs (loop5): failed to initialize system zone (-117)
[  108.725119][ T8278] EXT4-fs (loop5): mount failed
[  108.871613][ T8290] netlink: 'syz.0.1814': attribute type 1 has an invalid length.
[  108.931218][ T8294] loop5: detected capacity change from 0 to 128
[  108.946999][ T8294] EXT4-fs: Ignoring removed nobh option
[  108.982161][ T8294] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.996565][ T8294] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.012396][ T8294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7958 sclass=netlink_route_socket pid=8294 comm=syz.5.1816
[  109.032763][ T8298] pimreg3: entered allmulticast mode
[  109.052291][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.085983][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.107089][ T8302] loop2: detected capacity change from 0 to 2048
[  109.124620][ T8301] loop0: detected capacity change from 0 to 2048
[  109.146274][ T8302] EXT4-fs (loop2): failed to initialize system zone (-117)
[  109.153672][ T8301] EXT4-fs (loop0): failed to initialize system zone (-117)
[  109.161015][ T8301] EXT4-fs (loop0): mount failed
[  109.162738][ T8302] EXT4-fs (loop2): mount failed
[  109.214458][ T7346] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.370737][ T8330] netlink: 'syz.0.1827': attribute type 1 has an invalid length.
[  109.438711][ T8333] bridge1: entered promiscuous mode
[  109.495618][ T8336] loop0: detected capacity change from 0 to 512
[  109.508865][ T8336] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  109.526608][ T8336] EXT4-fs (loop0): orphan cleanup on readonly fs
[  109.544597][ T8336] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  109.546289][ T8326] loop1: detected capacity change from 0 to 1024
[  109.567458][ T8326] EXT4-fs: Ignoring removed nobh option
[  109.573175][ T8326] EXT4-fs: Ignoring removed bh option
[  109.579275][ T8336] EXT4-fs (loop0): Remounting filesystem read-only
[  109.586493][ T8336] EXT4-fs (loop0): 1 truncate cleaned up
[  109.592740][ T8336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  109.606238][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.606862][ T8336] 9pnet_fd: Insufficient options for proto=fd
[  109.639107][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.658790][ T8345] loop0: detected capacity change from 0 to 128
[  109.785961][ T8353] loop0: detected capacity change from 0 to 2048
[  109.804594][ T8353] EXT4-fs (loop0): failed to initialize system zone (-117)
[  109.811903][ T8353] EXT4-fs (loop0): mount failed
[  109.842996][ T8357] __nla_validate_parse: 13 callbacks suppressed
[  109.849404][ T8357] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1836'.
[  109.982128][ T8361] loop0: detected capacity change from 0 to 512
[  109.989214][ T8361] journal_path: Non-blockdev passed as './bus'
[  109.995548][ T8361] EXT4-fs: error: could not find journal device path
[  110.056262][ T8363] loop0: detected capacity change from 0 to 8192
[  110.107144][ T8365] loop0: detected capacity change from 0 to 1756
[  110.148702][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.212017][ T8374] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1843'.
[  110.224133][ T8375] netlink: 'syz.5.1842': attribute type 1 has an invalid length.
[  110.238709][ T8371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1844'.
[  110.258480][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1844'.
[  110.278158][ T8377] loop3: detected capacity change from 0 to 128
[  110.331055][ T8379] loop2: detected capacity change from 0 to 2048
[  110.407677][ T8379] EXT4-fs (loop2): failed to initialize system zone (-117)
[  110.410445][ T8387] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1848'.
[  110.440765][ T8388] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1847'.
[  110.443686][ T8379] EXT4-fs (loop2): mount failed
[  110.500594][ T8391] loop1: detected capacity change from 0 to 2048
[  110.524673][ T8391] EXT4-fs (loop1): failed to initialize system zone (-117)
[  110.563246][ T8391] EXT4-fs (loop1): mount failed
[  110.592614][ T8404] SELinux: syz.0.1855 (8404) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  110.678084][ T8414] loop5: detected capacity change from 0 to 512
[  110.719873][ T8420] loop2: detected capacity change from 0 to 2048
[  110.729933][ T8417] No such timeout policy "syz1"
[  110.738148][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'.
[  110.747247][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'.
[  110.752409][ T8424] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1861'.
[  110.758176][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'.
[  110.784112][ T8414] netlink: 'syz.5.1857': attribute type 2 has an invalid length.
[  110.791981][ T8414] netlink: 'syz.5.1857': attribute type 9 has an invalid length.
[  110.826895][ T8420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.876192][ T8436] loop3: detected capacity change from 0 to 2048
[  110.920133][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.935187][ T8440] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  110.982008][ T8436] EXT4-fs (loop3): failed to initialize system zone (-117)
[  110.989653][ T8436] EXT4-fs (loop3): mount failed
[  111.024015][ T8455] loop2: detected capacity change from 0 to 128
[  111.053869][ T8455] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  111.100429][ T8466] loop5: detected capacity change from 0 to 1024
[  111.119430][ T8455] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  111.122716][ T8465] loop3: detected capacity change from 0 to 2048
[  111.141539][ T8466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.172687][ T8466] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.174332][ T8455] FAULT_INJECTION: forcing a failure.
[  111.174332][ T8455] name failslab, interval 1, probability 0, space 0, times 0
[  111.197767][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.2.1865 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  111.197800][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.197817][ T8455] Call Trace:
[  111.197824][ T8455]  <TASK>
[  111.197833][ T8455]  __dump_stack+0x1d/0x30
[  111.197860][ T8455]  dump_stack_lvl+0xe8/0x140
[  111.197999][ T8455]  dump_stack+0x15/0x1b
[  111.198015][ T8455]  should_fail_ex+0x265/0x280
[  111.198045][ T8455]  should_failslab+0x8c/0xb0
[  111.198069][ T8455]  kmem_cache_alloc_node_noprof+0x57/0x320
[  111.198121][ T8455]  ? __alloc_skb+0x101/0x320
[  111.198157][ T8455]  __alloc_skb+0x101/0x320
[  111.198264][ T8455]  ? audit_log_start+0x365/0x6c0
[  111.198370][ T8455]  audit_log_start+0x380/0x6c0
[  111.198414][ T8455]  ? __account_obj_stock+0x211/0x350
[  111.198444][ T8455]  audit_seccomp+0x48/0x100
[  111.198475][ T8455]  ? __seccomp_filter+0x68c/0x10d0
[  111.198533][ T8455]  __seccomp_filter+0x69d/0x10d0
[  111.198564][ T8455]  ? percpu_counter_add_batch+0xb6/0x130
[  111.198629][ T8455]  ? errseq_sample+0x2f/0x40
[  111.198652][ T8455]  ? file_init_path+0x278/0x2a0
[  111.198823][ T8455]  __secure_computing+0x82/0x150
[  111.198851][ T8455]  syscall_trace_enter+0xcf/0x1e0
[  111.198878][ T8455]  do_syscall_64+0xac/0x200
[  111.198941][ T8455]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  111.198975][ T8455]  ? clear_bhb_loop+0x40/0x90
[  111.199000][ T8455]  ? clear_bhb_loop+0x40/0x90
[  111.199052][ T8455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.199145][ T8455] RIP: 0033:0x7f507a68d3bc
[  111.199163][ T8455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  111.199184][ T8455] RSP: 002b:00007f5078cf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  111.199203][ T8455] RAX: ffffffffffffffda RBX: 00007f507a8b5fa0 RCX: 00007f507a68d3bc
[  111.199274][ T8455] RDX: 000000000000000f RSI: 00007f5078cf70a0 RDI: 000000000000000c
[  111.199288][ T8455] RBP: 00007f5078cf7090 R08: 0000000000000000 R09: 0000000000000000
[  111.199300][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  111.199311][ T8455] R13: 0000000000000000 R14: 00007f507a8b5fa0 R15: 00007fff81b0cfd8
[  111.199329][ T8455]  </TASK>
[  111.440804][ T8465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.457734][ T8465] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  111.459279][ T8466] xt_CT: No such helper "pptp"
[  111.479755][ T8465] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28
[  111.493563][ T8465] EXT4-fs (loop3): This should not happen!! Data will be lost
[  111.493563][ T8465] 
[  111.503283][ T8465] EXT4-fs (loop3): Total free blocks count 0
[  111.509373][ T8465] EXT4-fs (loop3): Free/Dirty block details
[  111.516035][ T8465] EXT4-fs (loop3): free_blocks=2415919504
[  111.521881][ T8465] EXT4-fs (loop3): dirty_blocks=16
[  111.527726][ T8465] EXT4-fs (loop3): Block reservation details
[  111.533800][ T8465] EXT4-fs (loop3): i_reserved_data_blocks=1
[  111.570167][ T7346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.626233][ T8487] loop1: detected capacity change from 0 to 1024
[  111.637575][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.649108][ T8487] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  111.660165][ T8487] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  111.677486][ T8487] JBD2: no valid journal superblock found
[  111.683497][ T8487] EXT4-fs (loop1): Could not load journal inode
[  111.751218][ T8504] loop2: detected capacity change from 0 to 164
[  111.768208][   T29] kauditd_printk_skb: 579 callbacks suppressed
[  111.768225][   T29] audit: type=1400 audit(1753150101.689:186188): avc:  denied  { ioctl } for  pid=8496 comm="syz.0.1878" path="socket:[24085]" dev="sockfs" ino=24085 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  111.848255][   T29] audit: type=1400 audit(1753150101.759:186189): avc:  denied  { read write } for  pid=8510 comm="syz.3.1881" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.872156][   T29] audit: type=1400 audit(1753150101.759:186190): avc:  denied  { open } for  pid=8510 comm="syz.3.1881" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.896120][   T29] audit: type=1326 audit(1753150101.789:186191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  111.921235][   T29] audit: type=1326 audit(1753150101.789:186192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  111.944852][   T29] audit: type=1326 audit(1753150101.789:186193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  111.969801][   T29] audit: type=1326 audit(1753150101.789:186194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  111.994887][   T29] audit: type=1326 audit(1753150101.789:186195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  112.018522][   T29] audit: type=1326 audit(1753150101.789:186196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  112.043442][   T29] audit: type=1326 audit(1753150101.789:186197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99b2be9a9 code=0x7ffc0000
[  112.069486][ T8504] iso9660: Corrupted directory entry in block 2 of inode 1792
[  112.128281][ T8533] netlink: 'syz.1.1882': attribute type 1 has an invalid length.
[  112.179531][ T8536] loop2: detected capacity change from 0 to 2048
[  112.198138][ T8536] EXT4-fs (loop2): failed to initialize system zone (-117)
[  112.207864][ T8536] EXT4-fs (loop2): mount failed
[  112.312900][ T8530] loop3: detected capacity change from 0 to 1024
[  112.320769][ T8530] EXT4-fs: Ignoring removed nobh option
[  112.326610][ T8530] EXT4-fs: Ignoring removed bh option
[  112.348013][ T8530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.393784][ T8558] loop2: detected capacity change from 0 to 128
[  112.403145][ T8558] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  112.427108][ T8558] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  112.477144][ T8562] hub 6-0:1.0: USB hub found
[  112.488915][ T8562] hub 6-0:1.0: 8 ports detected
[  112.624426][ T8588] SELinux: syz.1.1894 (8588) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  112.701542][ T8595] loop5: detected capacity change from 0 to 512
[  112.718763][ T8595] EXT4-fs: Ignoring removed nomblk_io_submit option
[  112.729383][ T8595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  112.748426][ T8595] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  112.769627][ T8595] EXT4-fs (loop5): 1 truncate cleaned up
[  112.794588][ T8595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.825037][ T8604] loop2: detected capacity change from 0 to 2048
[  112.893406][ T8604] EXT4-fs (loop2): failed to initialize system zone (-117)
[  112.909612][ T8604] EXT4-fs (loop2): mount failed
[  113.124883][ T8637] netlink: 'syz.5.1902': attribute type 1 has an invalid length.
[  113.134277][ T1034] Process accounting resumed
[  113.141991][ T8635] syzkaller0: entered allmulticast mode
[  113.263316][ T8623] loop2: detected capacity change from 0 to 1024
[  113.271196][ T8623] EXT4-fs: Ignoring removed nobh option
[  113.276896][ T8623] EXT4-fs: Ignoring removed bh option
[  113.421702][ T8671] loop5: detected capacity change from 0 to 2048
[  113.447627][ T8676] loop3: detected capacity change from 0 to 2048
[  113.508030][ T8676] EXT4-fs (loop3): failed to initialize system zone (-117)
[  113.516003][ T8676] EXT4-fs (loop3): mount failed
[  113.677323][ T8697] loop5: detected capacity change from 0 to 512
[  113.689119][ T8697] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  113.708782][ T8695] loop3: detected capacity change from 0 to 1164
[  113.716447][ T8697] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1914: invalid indirect mapped block 2683928664 (level 1)
[  113.733179][ T8695] iso9660: Unknown parameter '‘yÄ%:›Tã'
[  113.750074][ T8697] EXT4-fs (loop5): Remounting filesystem read-only
[  113.776289][ T8697] EXT4-fs (loop5): 1 truncate cleaned up
[  113.811365][ T8700] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) !
[  113.932938][ T8710] FAULT_INJECTION: forcing a failure.
[  113.932938][ T8710] name failslab, interval 1, probability 0, space 0, times 0
[  113.945714][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.3.1918 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  113.945751][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  113.945766][ T8710] Call Trace:
[  113.945774][ T8710]  <TASK>
[  113.945783][ T8710]  __dump_stack+0x1d/0x30
[  113.945860][ T8710]  dump_stack_lvl+0xe8/0x140
[  113.945884][ T8710]  dump_stack+0x15/0x1b
[  113.945904][ T8710]  should_fail_ex+0x265/0x280
[  113.945943][ T8710]  should_failslab+0x8c/0xb0
[  113.945994][ T8710]  __kmalloc_noprof+0xa5/0x3e0
[  113.946023][ T8710]  ? p9_client_prepare_req+0x372/0x820
[  113.946049][ T8710]  p9_client_prepare_req+0x372/0x820
[  113.946076][ T8710]  ? p9_client_rpc+0x503/0x6c0
[  113.946155][ T8710]  p9_client_rpc+0xdf/0x6c0
[  113.946190][ T8710]  ? radix_tree_iter_tag_clear+0x105/0x180
[  113.946231][ T8710]  ? _raw_spin_unlock_irq+0x26/0x50
[  113.946260][ T8710]  p9_client_walk+0x102/0x4c0
[  113.946292][ T8710]  v9fs_file_open+0x159/0x560
[  113.946326][ T8710]  do_dentry_open+0x649/0xa20
[  113.946348][ T8710]  ? __pfx_v9fs_file_open+0x10/0x10
[  113.946372][ T8710]  vfs_open+0x37/0x1e0
[  113.946427][ T8710]  path_openat+0x1c5e/0x2170
[  113.946460][ T8710]  ? _parse_integer_limit+0x170/0x190
[  113.946489][ T8710]  ? _parse_integer+0x27/0x40
[  113.946527][ T8710]  do_filp_open+0x109/0x230
[  113.946650][ T8710]  do_sys_openat2+0xa6/0x110
[  113.946682][ T8710]  __x64_sys_creat+0x65/0x90
[  113.946716][ T8710]  x64_sys_call+0x114d/0x2fb0
[  113.946820][ T8710]  do_syscall_64+0xd2/0x200
[  113.946843][ T8710]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  113.946940][ T8710]  ? clear_bhb_loop+0x40/0x90
[  113.947040][ T8710]  ? clear_bhb_loop+0x40/0x90
[  113.947062][ T8710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.947087][ T8710] RIP: 0033:0x7fd99b2be9a9
[  113.947106][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.947128][ T8710] RSP: 002b:00007fd999927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  113.947148][ T8710] RAX: ffffffffffffffda RBX: 00007fd99b4e5fa0 RCX: 00007fd99b2be9a9
[  113.947160][ T8710] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000300
[  113.947252][ T8710] RBP: 00007fd999927090 R08: 0000000000000000 R09: 0000000000000000
[  113.947267][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  113.947286][ T8710] R13: 0000000000000000 R14: 00007fd99b4e5fa0 R15: 00007fff390f6a08
[  113.947309][ T8710]  </TASK>
[  114.208703][ T8712] loop1: detected capacity change from 0 to 2048
[  114.236872][ T8718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8718 comm=syz.0.1924
[  114.282038][ T8712] EXT4-fs (loop1): failed to initialize system zone (-117)
[  114.316129][ T8712] EXT4-fs (loop1): mount failed
[  114.399882][ T3404] kernel write not supported for file /uhid (pid: 3404 comm: kworker/0:3)
[  114.429472][ T8736] lo speed is unknown, defaulting to 1000
[  114.539679][ T8744] netlink: 'syz.5.1931': attribute type 1 has an invalid length.
[  114.603904][ T8749] macvtap0: entered promiscuous mode
[  114.604648][ T8751] loop1: detected capacity change from 0 to 2048
[  114.624962][ T8749] macvtap0: left promiscuous mode
[  114.680335][ T8751] EXT4-fs (loop1): failed to initialize system zone (-117)
[  114.720223][ T8751] EXT4-fs (loop1): mount failed
[  114.812674][ T8768] 0ªX¹¦À: renamed from caif0
[  114.819287][ T8768] 0ªX¹¦À: left promiscuous mode
[  114.824218][ T8768] 0ªX¹¦À: entered allmulticast mode
[  114.829526][ T8768] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  114.889064][ T8774] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  114.906218][ T8774] netlink: 'syz.5.1947': attribute type 6 has an invalid length.
[  114.936607][ T8776] netlink: 'syz.3.1945': attribute type 4 has an invalid length.
[  116.069145][ T8844] netlink: 'syz.0.1972': attribute type 4 has an invalid length.
[  116.113335][ T8848] FAULT_INJECTION: forcing a failure.
[  116.113335][ T8848] name failslab, interval 1, probability 0, space 0, times 0
[  116.126693][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.1.1977 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  116.126724][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.126739][ T8848] Call Trace:
[  116.126747][ T8848]  <TASK>
[  116.126756][ T8848]  __dump_stack+0x1d/0x30
[  116.126841][ T8848]  dump_stack_lvl+0xe8/0x140
[  116.126860][ T8848]  dump_stack+0x15/0x1b
[  116.126876][ T8848]  should_fail_ex+0x265/0x280
[  116.126908][ T8848]  should_failslab+0x8c/0xb0
[  116.126947][ T8848]  kmem_cache_alloc_node_noprof+0x57/0x320
[  116.126977][ T8848]  ? __alloc_skb+0x101/0x320
[  116.127009][ T8848]  __alloc_skb+0x101/0x320
[  116.127044][ T8848]  ? audit_log_start+0x365/0x6c0
[  116.127150][ T8848]  audit_log_start+0x380/0x6c0
[  116.127182][ T8848]  ? should_fail_ex+0xdb/0x280
[  116.127219][ T8848]  audit_seccomp+0x48/0x100
[  116.127303][ T8848]  ? __seccomp_filter+0x68c/0x10d0
[  116.127324][ T8848]  __seccomp_filter+0x69d/0x10d0
[  116.127351][ T8848]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  116.127392][ T8848]  ? vfs_read+0x47f/0x6f0
[  116.127470][ T8848]  ? touch_atime+0x2a8/0x340
[  116.127496][ T8848]  ? __rcu_read_unlock+0x4f/0x70
[  116.127524][ T8848]  ? __fget_files+0x184/0x1c0
[  116.127550][ T8848]  __secure_computing+0x82/0x150
[  116.127628][ T8848]  syscall_trace_enter+0xcf/0x1e0
[  116.127654][ T8848]  do_syscall_64+0xac/0x200
[  116.127678][ T8848]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  116.127786][ T8848]  ? clear_bhb_loop+0x40/0x90
[  116.127807][ T8848]  ? clear_bhb_loop+0x40/0x90
[  116.127827][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.127847][ T8848] RIP: 0033:0x7fae7670d45f
[  116.127864][ T8848] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  116.127940][ T8848] RSP: 002b:00007fae74d6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  116.127961][ T8848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae7670d45f
[  116.127972][ T8848] RDX: 0000000000000001 RSI: 00007fae74d6f0a0 RDI: 0000000000000004
[  116.127984][ T8848] RBP: 00007fae74d6f090 R08: 0000000000000000 R09: 0000000000000000
[  116.127995][ T8848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  116.128037][ T8848] R13: 0000000000000000 R14: 00007fae76935fa0 R15: 00007fff87579408
[  116.128073][ T8848]  </TASK>
[  116.741840][ T8876] Unknown options in mask 5
[  116.783009][   T29] kauditd_printk_skb: 821 callbacks suppressed
[  116.789271][   T29] audit: type=1400 audit(1753150106.699:187017): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  116.813809][   T29] audit: type=1400 audit(1753150106.699:187018): avc:  denied  { read write } for  pid=7346 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  116.860154][   T29] audit: type=1400 audit(1753150106.779:187019): avc:  denied  { read write } for  pid=7346 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  116.885795][   T29] audit: type=1400 audit(1753150106.809:187020): avc:  denied  { create } for  pid=8882 comm="syz.0.1991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0
[  116.906855][   T29] audit: type=1400 audit(1753150106.809:187021): avc:  denied  { prog_load } for  pid=8882 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  116.926199][   T29] audit: type=1400 audit(1753150106.809:187022): avc:  denied  { read write } for  pid=8882 comm="syz.0.1991" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0
[  116.950766][   T29] audit: type=1400 audit(1753150106.809:187023): avc:  denied  { map_create } for  pid=8882 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  116.970183][   T29] audit: type=1400 audit(1753150106.809:187024): avc:  denied  { create } for  pid=8882 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  116.990837][   T29] audit: type=1400 audit(1753150106.809:187025): avc:  denied  { prog_load } for  pid=8882 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  117.014511][   T29] audit: type=1400 audit(1753150106.859:187026): avc:  denied  { read write } for  pid=8883 comm="syz.5.1992" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  117.270574][ T3314] ==================================================================
[  117.278782][ T3314] BUG: KCSAN: data-race in pollwake / pollwake
[  117.284940][ T3314] 
[  117.287259][ T3314] write to 0xffffc9000150f9e0 of 4 bytes by interrupt on cpu 0:
[  117.294890][ T3314]  pollwake+0xb6/0x100
[  117.298957][ T3314]  __wake_up_sync_key+0x52/0x80
[  117.303812][ T3314]  sock_def_readable+0x70/0x190
[  117.308666][ T3314]  tcp_data_ready+0x1ae/0x290
[  117.313348][ T3314]  tcp_data_queue+0x15b0/0x3290
[  117.318201][ T3314]  tcp_rcv_established+0xa0f/0xef0
[  117.323317][ T3314]  tcp_v4_do_rcv+0x672/0x740
[  117.327916][ T3314]  tcp_v4_rcv+0x1bd7/0x1f60
[  117.332425][ T3314]  ip_protocol_deliver_rcu+0x397/0x780
[  117.337898][ T3314]  ip_local_deliver_finish+0x184/0x220
[  117.343487][ T3314]  ip_local_deliver+0xe8/0x1c0
[  117.348263][ T3314]  ip_sublist_rcv+0x56b/0x650
[  117.352967][ T3314]  ip_list_rcv+0x261/0x290
[  117.357400][ T3314]  __netif_receive_skb_list_core+0x4dc/0x500
[  117.363389][ T3314]  netif_receive_skb_list_internal+0x487/0x600
[  117.369556][ T3314]  napi_complete_done+0x1a3/0x410
[  117.374597][ T3314]  virtnet_poll+0x18c5/0x1d10
[  117.379287][ T3314]  __napi_poll+0x63/0x3a0
[  117.383621][ T3314]  net_rx_action+0x391/0x830
[  117.388216][ T3314]  handle_softirqs+0xb7/0x290
[  117.392895][ T3314]  __irq_exit_rcu+0x3a/0xc0
[  117.397432][ T3314]  common_interrupt+0x83/0x90
[  117.402116][ T3314]  asm_common_interrupt+0x26/0x40
[  117.407143][ T3314]  swap_writeout+0x187/0x6c0
[  117.411739][ T3314]  shmem_writeout+0x885/0x8f0
[  117.416430][ T3314]  shrink_folio_list+0x1d4e/0x2560
[  117.421558][ T3314]  reclaim_folio_list+0x83/0x2b0
[  117.426510][ T3314]  reclaim_pages+0x215/0x270
[  117.431115][ T3314]  madvise_cold_or_pageout_pte_range+0xd0d/0xd80
[  117.437454][ T3314]  walk_pgd_range+0xa4a/0x14e0
[  117.442256][ T3314]  __walk_page_range+0xdd/0x340
[  117.447133][ T3314]  walk_page_range_mm+0x352/0x4a0
[  117.452167][ T3314]  walk_page_range+0x56/0x70
[  117.456770][ T3314]  madvise_do_behavior+0x1a45/0x1f20
[  117.462060][ T3314]  do_madvise+0x103/0x190
[  117.466396][ T3314]  __x64_sys_madvise+0x64/0x80
[  117.471257][ T3314]  x64_sys_call+0x2455/0x2fb0
[  117.475954][ T3314]  do_syscall_64+0xd2/0x200
[  117.480459][ T3314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.486360][ T3314] 
[  117.488686][ T3314] write to 0xffffc9000150f9e0 of 4 bytes by task 3314 on cpu 1:
[  117.496315][ T3314]  pollwake+0xb6/0x100
[  117.500399][ T3314]  __wake_up_sync_key+0x52/0x80
[  117.505285][ T3314]  anon_pipe_write+0x8ba/0xaa0
[  117.510058][ T3314]  vfs_write+0x49d/0x8e0
[  117.514313][ T3314]  ksys_write+0xda/0x1a0
[  117.518572][ T3314]  __x64_sys_write+0x40/0x50
[  117.523177][ T3314]  x64_sys_call+0x2cdd/0x2fb0
[  117.527859][ T3314]  do_syscall_64+0xd2/0x200
[  117.532367][ T3314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.538359][ T3314] 
[  117.540691][ T3314] value changed: 0x00000000 -> 0x00000001
[  117.546497][ T3314] 
[  117.548825][ T3314] Reported by Kernel Concurrency Sanitizer on:
[  117.554974][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  117.565840][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.575900][ T3314] ==================================================================
[  117.596033][ T8912] netlink: 'syz.2.2001': attribute type 4 has an invalid length.
[  117.811908][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.822274][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.945627][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.956850][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.035938][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.046283][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.117227][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.127572][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.216869][   T37] team0: left allmulticast mode
[  118.221884][   T37] team_slave_0: left allmulticast mode
[  118.228082][   T37] team_slave_1: left allmulticast mode
[  118.233622][   T37] team0: left promiscuous mode
[  118.239576][   T37] team_slave_0: left promiscuous mode
[  118.245280][   T37] team_slave_1: left promiscuous mode
[  118.250959][   T37] bridge0: port 3(team0) entered disabled state
[  118.260142][   T37] bridge_slave_1: left allmulticast mode
[  118.265910][   T37] bridge_slave_1: left promiscuous mode
[  118.271717][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.281369][   T37] bridge_slave_0: left allmulticast mode
[  118.287751][   T37] bridge_slave_0: left promiscuous mode
[  118.293466][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.466061][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.476447][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.486219][   T37] bond0 (unregistering): Released all slaves
[  118.544220][   T37] tipc: Left network mode
[  118.568982][   T37] hsr_slave_0: left promiscuous mode
[  118.575882][   T37] hsr_slave_1: left promiscuous mode
[  118.581498][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.589641][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.598748][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.606267][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.619018][   T37] veth1_macvtap: left promiscuous mode
[  118.627989][   T37] veth0_macvtap: left promiscuous mode
[  118.634724][   T37] veth1_vlan: left promiscuous mode
[  118.674582][   T37] pimreg3 (unregistering): left allmulticast mode
[  118.718480][   T37] team0 (unregistering): Port device team_slave_1 removed
[  118.731486][   T37] team0 (unregistering): Port device team_slave_0 removed
[  118.741304][   T31] smc: removing ib device syz!
[  118.927913][   T37] IPVS: stop unused estimator thread 0...
[  118.999200][   T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.046111][   T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.105699][   T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.166228][   T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.234793][   T37] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.244643][   T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.304788][   T37] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.315389][   T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.355119][   T37] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.365030][   T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.405750][   T37] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.415680][   T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.513912][   T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.524938][   T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.576655][   T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.587673][   T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.646725][   T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.657256][   T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.716944][   T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.727346][   T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.836295][   T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.895087][   T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.965127][   T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.034721][   T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.124986][   T37] bridge_slave_1: left allmulticast mode
[  120.130743][   T37] bridge_slave_1: left promiscuous mode
[  120.136504][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.146175][   T37] bridge_slave_0: left allmulticast mode
[  120.151855][   T37] bridge_slave_0: left promiscuous mode
[  120.157610][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.281291][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.291615][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.302929][   T37] bond0 (unregistering): Released all slaves
[  120.375244][   T37] bond1 (unregistering): Released all slaves
[  120.585463][   T37] bond0 (unregistering): (slave 
c
1ÿ): Releasing backup interface
[  120.595806][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.605237][   T37] bond0 (unregistering): Released all slaves
[  120.614938][   T37] bond1 (unregistering): Released all slaves
[  120.686807][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.695959][   T37] bond_slave_0: left promiscuous mode
[  120.702705][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.714669][   T37] bond_slave_1: left promiscuous mode
[  120.721069][   T37] bond0 (unregistering): Released all slaves
[  120.776801][   T37] hsr_slave_0: left promiscuous mode
[  120.782711][   T37] hsr_slave_1: left promiscuous mode
[  120.788626][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.796076][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.804170][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.811582][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.822199][   T37] hsr_slave_0: left promiscuous mode
[  120.828612][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.836250][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.843713][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.852537][   T37] hsr_slave_0: left promiscuous mode
[  120.858335][   T37] hsr_slave_1: left promiscuous mode
[  120.864169][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.871669][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.879472][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.886942][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.895503][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.902928][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.910683][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.918220][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.935207][   T37] veth1_macvtap: left promiscuous mode
[  120.940866][   T37] veth0_macvtap: left promiscuous mode
[  120.946529][   T37] veth1_vlan: left promiscuous mode
[  120.951769][   T37] veth0_vlan: left promiscuous mode
[  120.957492][   T37] veth0_macvtap: left promiscuous mode
[  120.963101][   T37] veth1_vlan: left promiscuous mode
[  120.968808][   T37] veth1_vlan: left promiscuous mode
[  120.974870][   T37] veth1_macvtap: left promiscuous mode
[  120.980362][   T37] veth0_macvtap: left promiscuous mode
[  121.141784][   T37] team0 (unregistering): Port device team_slave_1 removed
[  121.151472][   T37] team0 (unregistering): Port device team_slave_0 removed
[  121.222447][   T37] team_slave_1 (unregistering): left promiscuous mode
[  121.229752][   T37] team0 (unregistering): Port device team_slave_1 removed
[  121.241934][   T37] team_slave_0 (unregistering): left promiscuous mode
[  121.249112][   T37] team0 (unregistering): Port device team_slave_0 removed
[  121.279749][   T37] dummy0 (unregistering): left promiscuous mode
[  121.286418][   T37] team0 (unregistering): Port device dummy0 removed
[  121.330077][   T37] team0 (unregistering): Port device team_slave_1 removed
[  121.342056][   T37] team0 (unregistering): Port device team_slave_0 removed
[  121.395729][   T37] team_slave_1 (unregistering): left promiscuous mode
[  121.402857][   T37] team0 (unregistering): Port device team_slave_1 removed
[  121.412504][   T37] team_slave_0 (unregistering): left promiscuous mode
[  121.421981][   T37] team0 (unregistering): Port device team_slave_0 removed
[  121.452257][   T37] dummy0 (unregistering): left promiscuous mode
[  121.460096][   T37] team0 (unregistering): Port device dummy0 removed
[  121.783099][   T29] kauditd_printk_skb: 32253 callbacks suppressed
[  121.783129][   T29] audit: type=1400 audit(1753150111.709:217456): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  121.791019][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[  121.811587][   T29] audit: type=1400 audit(1753150111.709:217457): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  121.817348][ T3034] audit: audit_lost=19388 audit_rate_limit=0 audit_backlog_limit=64
[  121.838541][   T29] audit: type=1400 audit(1753150111.709:217458): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  121.846521][ T3034] audit: backlog limit exceeded
[  121.846805][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[  121.867728][   T29] audit: type=1400 audit(1753150111.709:217459): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  121.872629][ T3034] audit: audit_lost=19389 audit_rate_limit=0 audit_backlog_limit=64
[  121.872648][ T3034] audit: backlog limit exceeded
[  126.793074][   T29] kauditd_printk_skb: 51284 callbacks suppressed
[  126.793094][   T29] audit: type=1400 audit(1753150116.709:267046): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  126.801331][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.820747][   T29] audit: type=1400 audit(1753150116.719:267047): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  126.827240][ T3034] audit: audit_lost=19956 audit_rate_limit=0 audit_backlog_limit=64
[  126.848423][   T29] audit: type=1400 audit(1753150116.719:267048): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  126.856404][ T3034] audit: backlog limit exceeded
[  126.877663][   T29] audit: type=1400 audit(1753150116.719:267049): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  126.883214][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.903905][   T29] audit: type=1400 audit(1753150116.719:267050): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  126.910400][ T3034] audit: audit_lost=19957 audit_rate_limit=0 audit_backlog_limit=64