last executing test programs:

2.315119416s ago: executing program 2 (id=522):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001002900000001000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xb}, 0x18)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r10}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)=r10}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x202}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8422a0a8253851d4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r6, r0, r9, r11, r2, r2, r0], &(0x7f0000000580)=[{0x0, 0x1, 0xb, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0x2}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000180)=0x17, 0x4)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

2.260622497s ago: executing program 2 (id=524):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

2.260036757s ago: executing program 4 (id=525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001002900000001000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xb}, 0x18)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r10}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)=r10}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r11}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x202}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8422a0a8253851d4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r6, r0, r9, r11, r2, r2, r0], &(0x7f0000000580)=[{0x0, 0x1, 0xb, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0x2}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000180)=0x17, 0x4)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

2.241378227s ago: executing program 2 (id=526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000fbff03000000050000", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xfff}, 0x100042, 0x10000, 0x8, 0x9, 0x8, 0x401, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000400)={0x800000, 0x880, 0x7, 0x241, 0x8001, 0x800004})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fsmount(0xffffffffffffffff, 0x0, 0x70)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r8 = syz_open_pts(r7, 0x900)
r9 = dup3(r8, r7, 0x80000)
read(r9, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r9, &(0x7f0000001d40)=""/4079, 0xfdef)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendmmsg$inet(r10, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c6bad", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="9969", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)='r', 0x1}], 0x1}}], 0x3, 0x40001)

1.934558023s ago: executing program 4 (id=534):
socket$kcm(0xa, 0x3, 0x87)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xa, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

1.611934339s ago: executing program 0 (id=541):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000010000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fc"], 0x190)
syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)

1.59826509s ago: executing program 0 (id=542):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x884)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)

1.55180455s ago: executing program 0 (id=543):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0xfc}}, 0x0)
socket$kcm(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001140)=@newtaction={0x4c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x880, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x1942}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(r0, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x8000)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
r6 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
socket$kcm(0x18, 0x0, 0x0)
r11 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r11, 0x0, 0x19, 0x0, 0x0)

1.55158891s ago: executing program 0 (id=544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0)

1.55096653s ago: executing program 0 (id=545):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
eventfd2(0x9, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
sendfile(r3, r1, 0x0, 0x3ffff)
sendfile(r3, r1, 0x0, 0x7ffff000)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa467", 0xb1, 0x52, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x6e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e23, 0x2, @local}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

1.392311693s ago: executing program 2 (id=546):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syslog(0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000300)=0x14)

1.325796184s ago: executing program 2 (id=547):
r0 = semget$private(0x0, 0x7, 0x3c0)
semop(r0, &(0x7f0000000200)=[{0x2, 0xfffe}, {0x4, 0x0, 0x1800}, {0x5, 0xfc01, 0x1800}], 0x3)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x0, 0xfa, 0x800}], 0x2)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x18}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @generic={0x98, 0x3, 0x7, 0x800, 0x9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000002c0)=""/201, 0x40f00, 0x5, '\x00', r8, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x401, 0x3}, 0x10, 0x0, r5, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x2, 0x5, 0x3}, {0x5, 0x5, 0x0, 0x5}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x10000}, 0x94)
bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
semop(0x0, &(0x7f0000000000)=[{0x3, 0x2190, 0x1000}, {0x2, 0x2, 0x1800}], 0x2)

1.02289446s ago: executing program 4 (id=553):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x884)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)

803.068464ms ago: executing program 1 (id=558):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000010000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fc"], 0x190)
syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)

785.570314ms ago: executing program 1 (id=559):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x315}, [@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x7, 0x5, 0x0, 0x24, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0xa, 0x6, 0x4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x8, 0x3, 0x7, 0x20, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x85, 0xd, &(0x7f0000000240)=""/13, 0x40f00, 0x14, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0xfffffff8, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0xa, 0xc}], 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
listen(r0, 0xfffffffe)

744.843545ms ago: executing program 1 (id=560):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x80fe, @loopback, 0xffffffff}, 0x1c)

744.465366ms ago: executing program 1 (id=562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000008035eb0000000001000000940000930600003e4f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a9f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
close(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
membarrier(0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa)
r5 = dup2(r3, r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5)
poll(&(0x7f0000000080)=[{r5, 0x4000}, {r4, 0x3}], 0x2, 0xffff8001)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)

653.682117ms ago: executing program 0 (id=564):
socket$kcm(0xa, 0x3, 0x87)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xa, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

485.74534ms ago: executing program 2 (id=566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023892)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x20008040)
close(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = openat$vcsa(0xffffffffffffff9c, 0x0, 0xc01, 0x0)
getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0)

458.111491ms ago: executing program 1 (id=567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000fbff03000000050000", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xfff}, 0x100042, 0x10000, 0x8, 0x9, 0x8, 0x401, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800000, 0x880, 0x7, 0x241, 0x8001, 0x800004})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="93bf41a4bca4b77b1e7bd0aea4a4572f374692fb40d33e861f2a224458b63a8c6adae97babf2911034c254255e463c438630d9062eba329f67b415c5f4b2ec44ade9fa2144c068d11dfbf66ec38713bd772284ae80166048030f909c86615768d2df3d8b4cbdebc1b602adbaf96f143f8f6573c2e42808595786ab3d428baa298cdeb35b80d56cb6cbda6a221d3dd571da58173880ea787e2bc28832c13f52bab1ecb98bd4630856bd280eb48dc361409e3943f187f5b14fcaaeff7b7a1885920ad5e57a64a75ac87d6a9b2990fff215b3183941c43b4a352109e895a99c6097c23fdd4f99450bbe06ce817016b9787a6b122ce8d9cec4f75ed9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fsmount(0xffffffffffffffff, 0x0, 0x70)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r6 = syz_open_pts(0xffffffffffffffff, 0x900)
r7 = dup3(r6, 0xffffffffffffffff, 0x80000)
read(r7, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r7, &(0x7f0000001d40)=""/4079, 0xfdef)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendmmsg$inet(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c6bad", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="9969", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)='r', 0x1}], 0x1}}], 0x3, 0x40001)

430.537981ms ago: executing program 1 (id=568):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x7b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', <r3=>0x0, 0x7, 0x40, 0xee, 0x8, {{0xa, 0x4, 0x3, 0x1f, 0x28, 0x67, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x10, 0x95, 0x0, 0x7, [0x9, 0xa, 0xe2a]}, @ra={0x94, 0x4, 0x1}]}}}}})
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = open(0x0, 0x60840, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee6990000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="7c0b008c", @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf258300000008000300", @ANYRES32, @ANYBLOB="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"], 0xb7c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
recvmmsg(r4, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r3}, 0x14)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000004c0)={[{@check_relaxed}, {@uid}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0x200}}, {@gid}, {@map_acorn}, {@map_normal}, {@overriderock}, {@nojoliet}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000e40)="$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")

368.940183ms ago: executing program 3 (id=569):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000010000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fc"], 0x190)
syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a0400071100fe80000000"], 0x0)

368.503942ms ago: executing program 3 (id=570):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
syslog(0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000300)=0x14)

316.871464ms ago: executing program 3 (id=571):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0)

316.640884ms ago: executing program 3 (id=572):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

312.067384ms ago: executing program 3 (id=573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001002900000001000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xb}, 0x18)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r10}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)=r10}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r11}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r6, r0, r9, r11, r2, r2, r0], &(0x7f0000000580)=[{0x0, 0x1, 0xb, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0x2}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000180)=0x17, 0x4)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

221.843875ms ago: executing program 3 (id=574):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
eventfd2(0x9, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
sendfile(r3, r1, 0x0, 0x3ffff)
sendfile(r3, r1, 0x0, 0x7ffff000)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa467", 0xb1, 0x52, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x6e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e23, 0x2, @local}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

161.427426ms ago: executing program 4 (id=575):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x3, 0x4, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(r2, r2)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000300)=0x14)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r4, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1)

137.036607ms ago: executing program 4 (id=576):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
recvmsg(0xffffffffffffffff, 0x0, 0x10000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3, 0x1, 0x0, 0x2, 0x5}})
move_mount(r1, 0x0, r0, 0x0, 0x46)
close(r0)
r4 = socket$inet6(0xa, 0x2, 0x1)
getsockopt$inet6_opts(r4, 0x29, 0x2, 0x0, &(0x7f0000000740))
r5 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6000a81300142c00fe80000000000000000000bbfe80001000000000000000000000b0a2d9ea00aa3a"], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00'], 0x48)
write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)

0s ago: executing program 4 (id=577):
r0 = semget$private(0x0, 0x7, 0x3c0)
semop(r0, &(0x7f0000000200)=[{0x2, 0xfffe}, {0x4, 0x0, 0x1800}, {0x5, 0xfc01, 0x1800}], 0x3)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x0, 0xfa, 0x800}], 0x2)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x18}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @generic={0x98, 0x3, 0x7, 0x800, 0x9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000002c0)=""/201, 0x40f00, 0x5, '\x00', r8, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x401, 0x3}, 0x10, 0x0, r5, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x2, 0x5, 0x3}, {0x5, 0x5, 0x0, 0x5}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x10000}, 0x94)
bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
semop(0x0, &(0x7f0000000000)=[{0x3, 0x2190, 0x1000}, {0x2, 0x2, 0x1800}], 0x2)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   18.532313][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   18.532331][   T29] audit: type=1400 audit(1757071992.266:57): avc:  denied  { transition } for  pid=3178 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.536557][   T29] audit: type=1400 audit(1757071992.266:58): avc:  denied  { noatsecure } for  pid=3178 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.539492][   T29] audit: type=1400 audit(1757071992.266:59): avc:  denied  { write } for  pid=3178 comm="sh" path="pipe:[2298]" dev="pipefs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   18.542703][   T29] audit: type=1400 audit(1757071992.266:60): avc:  denied  { rlimitinh } for  pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.545666][   T29] audit: type=1400 audit(1757071992.266:61): avc:  denied  { siginh } for  pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts.
[   26.448550][   T29] audit: type=1400 audit(1757072000.186:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.449737][ T3290] cgroup: Unknown subsys name 'net'
[   26.471410][   T29] audit: type=1400 audit(1757072000.186:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.498792][   T29] audit: type=1400 audit(1757072000.206:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.638447][ T3290] cgroup: Unknown subsys name 'cpuset'
[   26.644756][ T3290] cgroup: Unknown subsys name 'rlimit'
[   26.815986][   T29] audit: type=1400 audit(1757072000.546:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.839275][   T29] audit: type=1400 audit(1757072000.546:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.859722][   T29] audit: type=1400 audit(1757072000.546:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.880320][   T29] audit: type=1400 audit(1757072000.546:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.900604][   T29] audit: type=1400 audit(1757072000.566:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.909312][ T3297] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.925377][   T29] audit: type=1400 audit(1757072000.566:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.957232][   T29] audit: type=1400 audit(1757072000.666:71): avc:  denied  { relabelto } for  pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.996478][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.140714][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.190575][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   28.201632][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   28.257378][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.264525][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.271781][ T3304] bridge_slave_0: entered allmulticast mode
[   28.278111][ T3304] bridge_slave_0: entered promiscuous mode
[   28.298670][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.305746][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.313078][ T3304] bridge_slave_1: entered allmulticast mode
[   28.319461][ T3304] bridge_slave_1: entered promiscuous mode
[   28.362066][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.369185][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.376330][ T3307] bridge_slave_0: entered allmulticast mode
[   28.382638][ T3307] bridge_slave_0: entered promiscuous mode
[   28.401322][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.412639][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.419835][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.426998][ T3307] bridge_slave_1: entered allmulticast mode
[   28.433657][ T3307] bridge_slave_1: entered promiscuous mode
[   28.439940][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.447057][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.454277][ T3303] bridge_slave_0: entered allmulticast mode
[   28.460741][ T3303] bridge_slave_0: entered promiscuous mode
[   28.467409][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   28.477232][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.497049][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.504286][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.511506][ T3303] bridge_slave_1: entered allmulticast mode
[   28.518170][ T3303] bridge_slave_1: entered promiscuous mode
[   28.555716][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   28.565049][ T3304] team0: Port device team_slave_0 added
[   28.571916][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.581549][ T3304] team0: Port device team_slave_1 added
[   28.590877][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.604283][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.618838][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.653114][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.660160][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.686124][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.697273][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.704283][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.730247][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.757392][ T3307] team0: Port device team_slave_0 added
[   28.775318][ T3303] team0: Port device team_slave_0 added
[   28.782358][ T3303] team0: Port device team_slave_1 added
[   28.788840][ T3307] team0: Port device team_slave_1 added
[   28.799210][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.806263][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.813476][ T3305] bridge_slave_0: entered allmulticast mode
[   28.820117][ T3305] bridge_slave_0: entered promiscuous mode
[   28.838632][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.845682][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.852776][ T3305] bridge_slave_1: entered allmulticast mode
[   28.859289][ T3305] bridge_slave_1: entered promiscuous mode
[   28.879654][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.886763][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.912779][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.940838][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.947881][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.973805][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.984844][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.991849][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.017761][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.037224][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.046449][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.053740][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.060927][ T3312] bridge_slave_0: entered allmulticast mode
[   29.067262][ T3312] bridge_slave_0: entered promiscuous mode
[   29.075949][ T3304] hsr_slave_0: entered promiscuous mode
[   29.082089][ T3304] hsr_slave_1: entered promiscuous mode
[   29.088504][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.095445][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.121400][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.142503][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.151777][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.158886][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.166023][ T3312] bridge_slave_1: entered allmulticast mode
[   29.172664][ T3312] bridge_slave_1: entered promiscuous mode
[   29.212275][ T3307] hsr_slave_0: entered promiscuous mode
[   29.218336][ T3307] hsr_slave_1: entered promiscuous mode
[   29.224064][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   29.229839][ T3307] Cannot create hsr debugfs directory
[   29.247342][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.263887][ T3303] hsr_slave_0: entered promiscuous mode
[   29.271167][ T3303] hsr_slave_1: entered promiscuous mode
[   29.277032][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   29.282784][ T3303] Cannot create hsr debugfs directory
[   29.289101][ T3305] team0: Port device team_slave_0 added
[   29.300914][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.316139][ T3305] team0: Port device team_slave_1 added
[   29.349233][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.356271][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.382213][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.401041][ T3312] team0: Port device team_slave_0 added
[   29.409565][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.416582][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.442612][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.459209][ T3312] team0: Port device team_slave_1 added
[   29.501274][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.508448][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.534375][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.569427][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.576473][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.602504][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.627689][ T3305] hsr_slave_0: entered promiscuous mode
[   29.633705][ T3305] hsr_slave_1: entered promiscuous mode
[   29.639569][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   29.645293][ T3305] Cannot create hsr debugfs directory
[   29.709949][ T3312] hsr_slave_0: entered promiscuous mode
[   29.715996][ T3312] hsr_slave_1: entered promiscuous mode
[   29.722124][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   29.727897][ T3312] Cannot create hsr debugfs directory
[   29.776686][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.793282][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.802275][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.813319][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.870331][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.879499][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.891217][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.900294][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.928793][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.942494][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.952882][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.962242][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.002148][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.010810][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.019458][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.029703][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.052662][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.082459][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.092526][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.099594][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.112049][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.120914][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.130249][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.144271][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.153235][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.165293][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.172456][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.183001][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   30.202419][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.209619][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.227017][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.234168][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.283211][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.314722][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.330136][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   30.342806][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.364706][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.371949][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.382870][ T1796] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.389944][ T1796] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.400532][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.409979][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   30.428234][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.435314][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.444423][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.451563][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.476580][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.483761][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.493059][ T1796] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.500185][ T1796] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.516733][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.540603][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.551126][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.566117][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.589556][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.672958][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.704405][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.726016][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.772927][ T3307] veth0_vlan: entered promiscuous mode
[   30.798737][ T3307] veth1_vlan: entered promiscuous mode
[   30.824252][ T3307] veth0_macvtap: entered promiscuous mode
[   30.845013][ T3304] veth0_vlan: entered promiscuous mode
[   30.854058][ T3304] veth1_vlan: entered promiscuous mode
[   30.871156][ T3307] veth1_macvtap: entered promiscuous mode
[   30.886251][ T3303] veth0_vlan: entered promiscuous mode
[   30.896745][ T3303] veth1_vlan: entered promiscuous mode
[   30.914331][ T3304] veth0_macvtap: entered promiscuous mode
[   30.923814][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.941200][ T3304] veth1_macvtap: entered promiscuous mode
[   30.958443][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.971786][ T3312] veth0_vlan: entered promiscuous mode
[   30.982587][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.990245][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.000816][ T3312] veth1_vlan: entered promiscuous mode
[   31.009673][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.025855][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.036275][ T3303] veth0_macvtap: entered promiscuous mode
[   31.043105][   T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.052130][   T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.061756][ T3305] veth0_vlan: entered promiscuous mode
[   31.073288][ T3303] veth1_macvtap: entered promiscuous mode
[   31.092126][ T1850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.103357][ T1850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.118864][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.128554][ T3305] veth1_vlan: entered promiscuous mode
[   31.134839][ T1850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.148664][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.156838][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.160226][ T1850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.182094][ T3312] veth0_macvtap: entered promiscuous mode
[   31.207475][ T3305] veth0_macvtap: entered promiscuous mode
[   31.221913][ T1850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.238328][ T3312] veth1_macvtap: entered promiscuous mode
[   31.261676][ T1850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.271471][ T3305] veth1_macvtap: entered promiscuous mode
[   31.293459][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.303676][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.316959][ T1850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.329178][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.343183][ T1850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.353231][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.374438][ T1850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.411193][ T3485] loop1: detected capacity change from 0 to 1024
[   31.430448][ T3485] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   31.441426][ T3485] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   31.442460][ T1850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.469925][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   31.469941][   T29] audit: type=1400 audit(1757072005.196:105): avc:  denied  { unlink } for  pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.473927][ T3485] JBD2: no valid journal superblock found
[   31.476064][   T29] audit: type=1326 audit(1757072005.206:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.498664][ T3485] EXT4-fs (loop1): Could not load journal inode
[   31.504323][   T29] audit: type=1326 audit(1757072005.206:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.556874][   T29] audit: type=1326 audit(1757072005.206:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.579964][   T29] audit: type=1400 audit(1757072005.206:109): avc:  denied  { create } for  pid=3489 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.599575][   T29] audit: type=1326 audit(1757072005.206:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.634853][   T29] audit: type=1326 audit(1757072005.316:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.645834][ T1850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.658175][   T29] audit: type=1326 audit(1757072005.316:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.689696][   T29] audit: type=1400 audit(1757072005.316:113): avc:  denied  { setopt } for  pid=3489 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.709018][   T29] audit: type=1326 audit(1757072005.316:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494a18ebe9 code=0x7ffc0000
[   31.734240][ T3490] wireguard0: entered promiscuous mode
[   31.739924][ T3490] wireguard0: entered allmulticast mode
[   31.777718][ T1850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.786506][ T1850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.817713][ T1850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.847810][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   31.859089][ T1796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.886843][ T3503] netlink: 'syz.2.3': attribute type 30 has an invalid length.
[   31.907355][ T1796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.978014][ T3503] Zero length message leads to an empty skb
[   31.984750][ T3514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=3514 comm=syz.2.3
[   32.007691][ T3503] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   32.041458][ T3518] wireguard0: entered promiscuous mode
[   32.047062][ T3518] wireguard0: entered allmulticast mode
[   32.074777][ T3516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.101343][ T3517] vlan2: entered allmulticast mode
[   32.106546][ T3517] gretap0: entered allmulticast mode
[   32.114388][ T3522] netlink: 'syz.0.13': attribute type 13 has an invalid length.
[   32.169011][ T3503] syz.2.3 (3503) used greatest stack depth: 10808 bytes left
[   32.197218][ T3522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   32.297522][ T3526] loop1: detected capacity change from 0 to 128
[   32.309434][ T3532] loop3: detected capacity change from 0 to 128
[   32.391587][ T3540] syz.3.17: attempt to access beyond end of device
[   32.391587][ T3540] loop3: rw=2049, sector=145, nr_sectors = 88 limit=128
[   32.419104][ T3533] syz.1.15: attempt to access beyond end of device
[   32.419104][ T3533] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128
[   32.425688][ T3540] syz.3.17: attempt to access beyond end of device
[   32.425688][ T3540] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[   32.452695][ T3540] syz.3.17: attempt to access beyond end of device
[   32.452695][ T3540] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[   32.478776][ T3533] syz.1.15: attempt to access beyond end of device
[   32.478776][ T3533] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   32.494638][ T3540] syz.3.17: attempt to access beyond end of device
[   32.494638][ T3540] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[   32.532714][ T3540] syz.3.17: attempt to access beyond end of device
[   32.532714][ T3540] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128
[   32.533039][ T3541] vlan2: entered allmulticast mode
[   32.557710][ T3533] syz.1.15: attempt to access beyond end of device
[   32.557710][ T3533] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   32.570736][ T3540] syz.3.17: attempt to access beyond end of device
[   32.570736][ T3540] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128
[   32.594815][ T3541] dummy0: entered allmulticast mode
[   32.617782][ T3533] syz.1.15: attempt to access beyond end of device
[   32.617782][ T3533] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[   32.725098][ T3532] syz.3.17 (3532) used greatest stack depth: 10768 bytes left
[   32.844945][ T3553] 9pnet_fd: Insufficient options for proto=fd
[   32.860893][ T3516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.885983][ T3555] loop3: detected capacity change from 0 to 128
[   32.905487][ T3559] netlink: 'syz.1.26': attribute type 13 has an invalid length.
[   32.949789][ T3559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   32.966509][ T3558] syz_tun: entered allmulticast mode
[   32.995881][ T3558] syz_tun: left allmulticast mode
[   33.029330][ T3568] FAULT_INJECTION: forcing a failure.
[   33.029330][ T3568] name failslab, interval 1, probability 0, space 0, times 1
[   33.042226][ T3568] CPU: 0 UID: 0 PID: 3568 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.042247][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.042257][ T3568] Call Trace:
[   33.042262][ T3568]  <TASK>
[   33.042269][ T3568]  __dump_stack+0x1d/0x30
[   33.042329][ T3568]  dump_stack_lvl+0xe8/0x140
[   33.042349][ T3568]  dump_stack+0x15/0x1b
[   33.042435][ T3568]  should_fail_ex+0x265/0x280
[   33.042475][ T3568]  should_failslab+0x8c/0xb0
[   33.042503][ T3568]  __kmalloc_noprof+0xa5/0x3e0
[   33.042536][ T3568]  ? ip_options_get+0x52/0x350
[   33.042568][ T3568]  ip_options_get+0x52/0x350
[   33.042683][ T3568]  ? __rcu_read_unlock+0x4f/0x70
[   33.042710][ T3568]  do_ip_setsockopt+0x19d4/0x2240
[   33.042764][ T3568]  ip_setsockopt+0x58/0x110
[   33.042801][ T3568]  udp_setsockopt+0x99/0xb0
[   33.042867][ T3568]  sock_common_setsockopt+0x69/0x80
[   33.042906][ T3568]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   33.042971][ T3568]  __sys_setsockopt+0x184/0x200
[   33.042998][ T3568]  __x64_sys_setsockopt+0x64/0x80
[   33.043025][ T3568]  x64_sys_call+0x20ec/0x2ff0
[   33.043044][ T3568]  do_syscall_64+0xd2/0x200
[   33.043119][ T3568]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   33.043145][ T3568]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   33.043174][ T3568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.043255][ T3568] RIP: 0033:0x7f494a18ebe9
[   33.043269][ T3568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.043353][ T3568] RSP: 002b:00007f4948bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   33.043375][ T3568] RAX: ffffffffffffffda RBX: 00007f494a3c5fa0 RCX: 00007f494a18ebe9
[   33.043386][ T3568] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003
[   33.043397][ T3568] RBP: 00007f4948bf7090 R08: 0000000000000000 R09: 0000000000000000
[   33.043554][ T3568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.043565][ T3568] R13: 00007f494a3c6038 R14: 00007f494a3c5fa0 R15: 00007ffe65ed2458
[   33.043582][ T3568]  </TASK>
[   33.046763][ T3566] bpf: Bad value for 'gid'
[   33.115504][ T3570] loop2: detected capacity change from 0 to 512
[   33.225925][ T3577] loop4: detected capacity change from 0 to 1024
[   33.244288][ T3570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.273096][ T3577] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   33.282556][ T3570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.293450][ T3577] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   33.314808][ T3570] EXT4-fs (loop2): 1 truncate cleaned up
[   33.321653][ T3570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.340392][ T3577] JBD2: no valid journal superblock found
[   33.346145][ T3577] EXT4-fs (loop4): Could not load journal inode
[   33.409567][ T3588] 9pnet_fd: Insufficient options for proto=fd
[   33.442709][ T3593] netlink: 'syz.1.40': attribute type 13 has an invalid length.
[   33.453620][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.475253][ T3593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   33.536483][ T3602] loop2: detected capacity change from 0 to 128
[   33.584637][ T3604] syz.3.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   33.632790][ T1850] Buffer I/O error on dev loop2, logical block 704, lost async page write
[   33.652669][ T3609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.678005][ T3611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.702544][ T3612] netlink: 'syz.3.47': attribute type 13 has an invalid length.
[   33.727112][ T3613] netlink: 'syz.2.48': attribute type 13 has an invalid length.
[   33.744564][ T3612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   33.764902][ T3516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.809866][ T3613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   33.874881][ T3516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.964096][ T1796] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.976499][ T1796] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.990319][ T1796] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.003447][ T1796] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.090719][ T3611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.150648][ T3629] netlink: 'syz.0.53': attribute type 13 has an invalid length.
[   34.178719][ T3629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   34.203983][ T3634] 9pnet_fd: Insufficient options for proto=fd
[   34.204565][ T3611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.234371][ T3631] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   34.284848][ T3640] loop0: detected capacity change from 0 to 128
[   34.292992][ T3611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.372583][ T3642] wireguard0: entered promiscuous mode
[   34.378937][ T3642] wireguard0: entered allmulticast mode
[   34.401946][ T1850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.422919][ T1850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.432167][ T3640] syz.0.58 (3640) used greatest stack depth: 10736 bytes left
[   34.447723][ T1850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.469688][ T1850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.536652][ T3651] loop0: detected capacity change from 0 to 164
[   34.550513][ T3651] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[   34.561978][ T3653] loop1: detected capacity change from 0 to 1024
[   34.571089][ T3653] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   34.582020][ T3653] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   34.596852][ T3653] JBD2: no valid journal superblock found
[   34.602691][ T3653] EXT4-fs (loop1): Could not load journal inode
[   34.609396][ T3655] raw_sendmsg: syz.2.63 forgot to set AF_INET. Fix it!
[   34.733259][ T3664] netlink: 'syz.2.67': attribute type 13 has an invalid length.
[   34.752823][ T3664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   34.791240][ T3667] 9pnet_fd: Insufficient options for proto=fd
[   34.940502][ T3609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.001132][ T3609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.066628][ T3681] wireguard0: entered promiscuous mode
[   35.072297][ T3681] wireguard0: entered allmulticast mode
[   35.086490][ T3609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.126455][ T3690] netlink: 'syz.0.78': attribute type 13 has an invalid length.
[   35.143343][ T3690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   35.193132][ T1796] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.214297][ T1796] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.236774][ T1796] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.250120][ T1796] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.363876][ T3715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   35.504098][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'.
[   35.542776][ T3734] bridge0: entered promiscuous mode
[   35.567769][ T3734] bridge0: port 3(macvlan2) entered blocking state
[   35.574344][ T3734] bridge0: port 3(macvlan2) entered disabled state
[   35.592099][ T3734] macvlan2: entered allmulticast mode
[   35.597516][ T3734] bridge0: entered allmulticast mode
[   35.618841][ T3734] macvlan2: left allmulticast mode
[   35.623997][ T3734] bridge0: left allmulticast mode
[   35.637968][ T3734] bridge0: left promiscuous mode
[   35.659420][ T3738] wireguard0: entered promiscuous mode
[   35.664945][ T3738] wireguard0: entered allmulticast mode
[   35.847519][ T3753] FAULT_INJECTION: forcing a failure.
[   35.847519][ T3753] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.860681][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.860712][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.860756][ T3753] Call Trace:
[   35.860761][ T3753]  <TASK>
[   35.860767][ T3753]  __dump_stack+0x1d/0x30
[   35.860793][ T3753]  dump_stack_lvl+0xe8/0x140
[   35.860817][ T3753]  dump_stack+0x15/0x1b
[   35.860833][ T3753]  should_fail_ex+0x265/0x280
[   35.860935][ T3753]  should_fail+0xb/0x20
[   35.860954][ T3753]  should_fail_usercopy+0x1a/0x20
[   35.860976][ T3753]  _copy_from_user+0x1c/0xb0
[   35.861003][ T3753]  ___sys_sendmsg+0xc1/0x1d0
[   35.861104][ T3753]  __x64_sys_sendmsg+0xd4/0x160
[   35.861129][ T3753]  x64_sys_call+0x191e/0x2ff0
[   35.861149][ T3753]  do_syscall_64+0xd2/0x200
[   35.861252][ T3753]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   35.861329][ T3753]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   35.861355][ T3753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.861375][ T3753] RIP: 0033:0x7f7d37b5ebe9
[   35.861388][ T3753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.861446][ T3753] RSP: 002b:00007f7d365c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.861469][ T3753] RAX: ffffffffffffffda RBX: 00007f7d37d95fa0 RCX: 00007f7d37b5ebe9
[   35.861485][ T3753] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[   35.861497][ T3753] RBP: 00007f7d365c7090 R08: 0000000000000000 R09: 0000000000000000
[   35.861510][ T3753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.861526][ T3753] R13: 00007f7d37d96038 R14: 00007f7d37d95fa0 R15: 00007ffdfe98a938
[   35.861560][ T3753]  </TASK>
[   36.098617][ T3771] FAULT_INJECTION: forcing a failure.
[   36.098617][ T3771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   36.111755][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.111783][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.111796][ T3771] Call Trace:
[   36.111802][ T3771]  <TASK>
[   36.111808][ T3771]  __dump_stack+0x1d/0x30
[   36.111900][ T3771]  dump_stack_lvl+0xe8/0x140
[   36.111920][ T3771]  dump_stack+0x15/0x1b
[   36.111939][ T3771]  should_fail_ex+0x265/0x280
[   36.111962][ T3771]  should_fail+0xb/0x20
[   36.111980][ T3771]  should_fail_usercopy+0x1a/0x20
[   36.112031][ T3771]  _copy_from_user+0x1c/0xb0
[   36.112063][ T3771]  ___sys_sendmsg+0xc1/0x1d0
[   36.112189][ T3771]  __x64_sys_sendmsg+0xd4/0x160
[   36.112220][ T3771]  x64_sys_call+0x191e/0x2ff0
[   36.112245][ T3771]  do_syscall_64+0xd2/0x200
[   36.112310][ T3771]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   36.112343][ T3771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.112369][ T3771] RIP: 0033:0x7fa03b17ebe9
[   36.112516][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.112556][ T3771] RSP: 002b:00007fa039be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.112579][ T3771] RAX: ffffffffffffffda RBX: 00007fa03b3b5fa0 RCX: 00007fa03b17ebe9
[   36.112594][ T3771] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003
[   36.112609][ T3771] RBP: 00007fa039be7090 R08: 0000000000000000 R09: 0000000000000000
[   36.112667][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.112682][ T3771] R13: 00007fa03b3b6038 R14: 00007fa03b3b5fa0 R15: 00007ffc6de7eb78
[   36.112725][ T3771]  </TASK>
[   36.319972][ T3781] wireguard0: entered promiscuous mode
[   36.325600][ T3781] wireguard0: entered allmulticast mode
[   36.350253][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   36.378867][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'.
[   36.517247][   T29] kauditd_printk_skb: 718 callbacks suppressed
[   36.517260][   T29] audit: type=1400 audit(1757072016.244:833): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   36.574519][   T29] audit: type=1400 audit(1757072016.304:834): avc:  denied  { map_create } for  pid=3789 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.593691][   T29] audit: type=1400 audit(1757072016.304:835): avc:  denied  { prog_load } for  pid=3789 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.615517][ T3790] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   36.638595][   T29] audit: type=1400 audit(1757072016.304:836): avc:  denied  { node_bind } for  pid=3789 comm="syz.4.118" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=0
[   36.659846][   T29] audit: type=1400 audit(1757072016.304:837): avc:  denied  { prog_load } for  pid=3789 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.678925][   T29] audit: type=1400 audit(1757072016.314:838): avc:  denied  { map_create } for  pid=3789 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.698340][   T29] audit: type=1400 audit(1757072016.314:839): avc:  denied  { prog_load } for  pid=3789 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.717687][   T29] audit: type=1400 audit(1757072016.364:840): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   36.759355][   T29] audit: type=1400 audit(1757072016.374:841): avc:  denied  { map_create } for  pid=3791 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   36.778739][   T29] audit: type=1400 audit(1757072016.374:842): avc:  denied  { prog_load } for  pid=3791 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   37.279159][ T3853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'.
[   37.290991][ T3853] 8021q: VLANs not supported on ip_vti0
[   38.313258][ T3919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   38.328042][ T3919] 8021q: VLANs not supported on ip_vti0
[   38.534386][ T3785] syz.0.117 (3785) used greatest stack depth: 10696 bytes left
[   38.556719][ T3948] validate_nla: 1 callbacks suppressed
[   38.556737][ T3948] netlink: 'syz.4.187': attribute type 13 has an invalid length.
[   38.674351][ T3948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.295992][ T4006] netlink: 'syz.3.212': attribute type 13 has an invalid length.
[   39.316640][ T4006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.478334][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[   39.487423][ T4015] 8021q: VLANs not supported on ip_vti0
[   39.706524][ T4042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'.
[   39.715557][ T4042] 8021q: VLANs not supported on ip_vti0
[   39.821153][ T4054] netlink: 'syz.0.234': attribute type 13 has an invalid length.
[   39.857004][ T4054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.909166][ T4068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[   39.926238][ T4068] 8021q: VLANs not supported on ip_vti0
[   40.096777][ T4097] netlink: 'syz.3.253': attribute type 13 has an invalid length.
[   40.113269][ T4097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   40.515433][ T4124] netlink: 'syz.3.266': attribute type 13 has an invalid length.
[   40.531877][ T4124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   41.148757][ T4188] wireguard0: entered promiscuous mode
[   41.154294][ T4188] wireguard0: entered allmulticast mode
[   41.528211][   T29] kauditd_printk_skb: 1086 callbacks suppressed
[   41.528242][   T29] audit: type=1400 audit(1757072022.262:1929): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   41.567834][ T4207] netlink: 'syz.4.299': attribute type 13 has an invalid length.
[   41.585270][ T4207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   41.648983][   T29] audit: type=1400 audit(1757072022.282:1930): avc:  denied  { map_create } for  pid=4204 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.668185][   T29] audit: type=1400 audit(1757072022.282:1931): avc:  denied  { prog_load } for  pid=4204 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.687282][   T29] audit: type=1400 audit(1757072022.282:1932): avc:  denied  { validate_trans } for  pid=4204 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0
[   41.707700][   T29] audit: type=1400 audit(1757072022.292:1933): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   41.732232][   T29] audit: type=1400 audit(1757072022.292:1934): avc:  denied  { map_create } for  pid=4206 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.751364][   T29] audit: type=1400 audit(1757072022.292:1935): avc:  denied  { prog_load } for  pid=4206 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.770344][   T29] audit: type=1400 audit(1757072022.292:1936): avc:  denied  { prog_load } for  pid=4206 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.789352][   T29] audit: type=1400 audit(1757072022.292:1937): avc:  denied  { map_create } for  pid=4206 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   41.808404][   T29] audit: type=1400 audit(1757072022.292:1938): avc:  denied  { prog_load } for  pid=4206 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   42.166494][ T4243] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   42.246300][ T4251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'.
[   42.262600][ T4251] 8021q: VLANs not supported on ip_vti0
[   42.676704][ T4271] netlink: 'syz.4.326': attribute type 13 has an invalid length.
[   42.693800][ T4271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   43.100241][ T4281] netlink: 'syz.0.331': attribute type 13 has an invalid length.
[   43.231420][ T4281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   43.737309][ T4332] netlink: 'syz.3.353': attribute type 13 has an invalid length.
[   43.756924][ T4332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   43.985426][ T4352] FAULT_INJECTION: forcing a failure.
[   43.985426][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.998734][ T4352] CPU: 1 UID: 0 PID: 4352 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.998763][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   43.998779][ T4352] Call Trace:
[   43.998786][ T4352]  <TASK>
[   43.998794][ T4352]  __dump_stack+0x1d/0x30
[   43.998817][ T4352]  dump_stack_lvl+0xe8/0x140
[   43.998869][ T4352]  dump_stack+0x15/0x1b
[   43.998886][ T4352]  should_fail_ex+0x265/0x280
[   43.998908][ T4352]  should_fail+0xb/0x20
[   43.998927][ T4352]  should_fail_usercopy+0x1a/0x20
[   43.998951][ T4352]  _copy_to_user+0x20/0xa0
[   43.999005][ T4352]  simple_read_from_buffer+0xb5/0x130
[   43.999035][ T4352]  proc_fail_nth_read+0x10e/0x150
[   43.999061][ T4352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   43.999164][ T4352]  vfs_read+0x1a8/0x770
[   43.999187][ T4352]  ? __fget_files+0x184/0x1c0
[   43.999213][ T4352]  ? __rcu_read_unlock+0x4f/0x70
[   43.999245][ T4352]  ? __fget_files+0x184/0x1c0
[   43.999269][ T4352]  ksys_read+0xda/0x1a0
[   43.999327][ T4352]  __x64_sys_read+0x40/0x50
[   43.999352][ T4352]  x64_sys_call+0x27bc/0x2ff0
[   43.999376][ T4352]  do_syscall_64+0xd2/0x200
[   43.999409][ T4352]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.999487][ T4352]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.999517][ T4352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.999541][ T4352] RIP: 0033:0x7f494a18d5fc
[   43.999607][ T4352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   43.999705][ T4352] RSP: 002b:00007f4948bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.999721][ T4352] RAX: ffffffffffffffda RBX: 00007f494a3c5fa0 RCX: 00007f494a18d5fc
[   43.999731][ T4352] RDX: 000000000000000f RSI: 00007f4948bf70a0 RDI: 0000000000000003
[   43.999741][ T4352] RBP: 00007f4948bf7090 R08: 0000000000000000 R09: 0000000000000000
[   43.999752][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.999761][ T4352] R13: 00007f494a3c6038 R14: 00007f494a3c5fa0 R15: 00007ffe65ed2458
[   43.999857][ T4352]  </TASK>
[   44.298015][ T4364] netlink: 'syz.0.368': attribute type 3 has an invalid length.
[   44.305788][ T4364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.368'.
[   44.328694][ T4364] netlink: 'syz.0.368': attribute type 3 has an invalid length.
[   44.336447][ T4364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.368'.
[   44.414075][ T4377] netlink: 'syz.1.373': attribute type 13 has an invalid length.
[   44.431595][ T4377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   44.845567][ T4406] netlink: 'syz.2.385': attribute type 13 has an invalid length.
[   44.864242][ T4406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   45.046608][ T4433] FAULT_INJECTION: forcing a failure.
[   45.046608][ T4433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.059770][ T4433] CPU: 0 UID: 0 PID: 4433 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.059805][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.059825][ T4433] Call Trace:
[   45.059831][ T4433]  <TASK>
[   45.059839][ T4433]  __dump_stack+0x1d/0x30
[   45.059864][ T4433]  dump_stack_lvl+0xe8/0x140
[   45.059959][ T4433]  dump_stack+0x15/0x1b
[   45.059980][ T4433]  should_fail_ex+0x265/0x280
[   45.060006][ T4433]  should_fail+0xb/0x20
[   45.060032][ T4433]  should_fail_usercopy+0x1a/0x20
[   45.060060][ T4433]  _copy_to_user+0x20/0xa0
[   45.060095][ T4433]  simple_read_from_buffer+0xb5/0x130
[   45.060175][ T4433]  proc_fail_nth_read+0x10e/0x150
[   45.060208][ T4433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   45.060241][ T4433]  vfs_read+0x1a8/0x770
[   45.060265][ T4433]  ? __fget_files+0x184/0x1c0
[   45.060367][ T4433]  ? __rcu_read_unlock+0x4f/0x70
[   45.060387][ T4433]  ? __fget_files+0x184/0x1c0
[   45.060477][ T4433]  ksys_read+0xda/0x1a0
[   45.060506][ T4433]  __x64_sys_read+0x40/0x50
[   45.060534][ T4433]  x64_sys_call+0x27bc/0x2ff0
[   45.060562][ T4433]  do_syscall_64+0xd2/0x200
[   45.060627][ T4433]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.060656][ T4433]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.060690][ T4433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.060717][ T4433] RIP: 0033:0x7f92377cd5fc
[   45.060735][ T4433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   45.060781][ T4433] RSP: 002b:00007f9236237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.060799][ T4433] RAX: ffffffffffffffda RBX: 00007f9237a05fa0 RCX: 00007f92377cd5fc
[   45.060811][ T4433] RDX: 000000000000000f RSI: 00007f92362370a0 RDI: 0000000000000003
[   45.060826][ T4433] RBP: 00007f9236237090 R08: 0000000000000000 R09: 0000000000000000
[   45.060842][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.060856][ T4433] R13: 00007f9237a06038 R14: 00007f9237a05fa0 R15: 00007ffd2b2247c8
[   45.060878][ T4433]  </TASK>
[   45.282163][ T4438] netlink: 'syz.2.400': attribute type 13 has an invalid length.
[   45.300318][ T4438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   45.527404][ T4466] netlink: 'syz.0.412': attribute type 13 has an invalid length.
[   45.543602][ T4466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   45.882598][ T4492] netlink: 'syz.4.424': attribute type 13 has an invalid length.
[   45.902986][ T4492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   46.010931][ T4500] FAULT_INJECTION: forcing a failure.
[   46.010931][ T4500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.024091][ T4500] CPU: 0 UID: 0 PID: 4500 Comm: syz.4.427 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.024121][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   46.024160][ T4500] Call Trace:
[   46.024168][ T4500]  <TASK>
[   46.024177][ T4500]  __dump_stack+0x1d/0x30
[   46.024227][ T4500]  dump_stack_lvl+0xe8/0x140
[   46.024249][ T4500]  dump_stack+0x15/0x1b
[   46.024326][ T4500]  should_fail_ex+0x265/0x280
[   46.024350][ T4500]  should_fail+0xb/0x20
[   46.024381][ T4500]  should_fail_usercopy+0x1a/0x20
[   46.024409][ T4500]  _copy_from_user+0x1c/0xb0
[   46.024445][ T4500]  io_submit_one+0x52/0x11d0
[   46.024488][ T4500]  __se_sys_io_submit+0xfb/0x280
[   46.024569][ T4500]  __x64_sys_io_submit+0x43/0x50
[   46.024599][ T4500]  x64_sys_call+0x2d5d/0x2ff0
[   46.024632][ T4500]  do_syscall_64+0xd2/0x200
[   46.024679][ T4500]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   46.024736][ T4500]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   46.024767][ T4500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.024793][ T4500] RIP: 0033:0x7f494a18ebe9
[   46.024847][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.024870][ T4500] RSP: 002b:00007f4948bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   46.024893][ T4500] RAX: ffffffffffffffda RBX: 00007f494a3c5fa0 RCX: 00007f494a18ebe9
[   46.024909][ T4500] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f494af04000
[   46.024923][ T4500] RBP: 00007f4948bf7090 R08: 0000000000000000 R09: 0000000000000000
[   46.025019][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.025049][ T4500] R13: 00007f494a3c6038 R14: 00007f494a3c5fa0 R15: 00007ffe65ed2458
[   46.025071][ T4500]  </TASK>
[   46.283671][ T4508] bridge1: entered promiscuous mode
[   46.296628][ T4508] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.441447][ T4518] netlink: 'syz.2.435': attribute type 13 has an invalid length.
[   46.469030][ T4518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   46.539374][   T29] kauditd_printk_skb: 1162 callbacks suppressed
[   46.539388][   T29] audit: type=1400 audit(1757072027.272:3101): avc:  denied  { prog_load } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   46.566925][   T29] audit: type=1400 audit(1757072027.292:3102): avc:  denied  { create } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   46.587386][   T29] audit: type=1400 audit(1757072027.292:3103): avc:  denied  { create } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   46.607934][   T29] audit: type=1400 audit(1757072027.292:3104): avc:  denied  { prog_load } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   46.627142][   T29] audit: type=1400 audit(1757072027.292:3105): avc:  denied  { module_request } for  pid=4528 comm="syz.1.437" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[   46.648887][   T29] audit: type=1400 audit(1757072027.292:3106): avc:  denied  { mounton } for  pid=4528 comm="syz.1.437" path="/" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   46.675341][   T29] audit: type=1400 audit(1757072027.362:3107): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   46.699752][   T29] audit: type=1400 audit(1757072027.402:3108): avc:  denied  { create } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0
[   46.719211][   T29] audit: type=1400 audit(1757072027.402:3109): avc:  denied  { create } for  pid=4528 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   46.738742][   T29] audit: type=1400 audit(1757072027.402:3110): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   46.819184][ T4550] FAULT_INJECTION: forcing a failure.
[   46.819184][ T4550] name failslab, interval 1, probability 0, space 0, times 0
[   46.831925][ T4550] CPU: 1 UID: 0 PID: 4550 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.831956][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   46.831971][ T4550] Call Trace:
[   46.831978][ T4550]  <TASK>
[   46.831986][ T4550]  __dump_stack+0x1d/0x30
[   46.832012][ T4550]  dump_stack_lvl+0xe8/0x140
[   46.832088][ T4550]  dump_stack+0x15/0x1b
[   46.832110][ T4550]  should_fail_ex+0x265/0x280
[   46.832137][ T4550]  should_failslab+0x8c/0xb0
[   46.832169][ T4550]  kmem_cache_alloc_noprof+0x50/0x310
[   46.832291][ T4550]  ? flock_lock_inode+0x135/0xf60
[   46.832404][ T4550]  flock_lock_inode+0x135/0xf60
[   46.832436][ T4550]  ? file_has_perm+0x324/0x370
[   46.832500][ T4550]  locks_lock_inode_wait+0x6f/0x2a0
[   46.832528][ T4550]  ? selinux_file_lock+0x38/0x50
[   46.832554][ T4550]  __se_sys_flock+0x2f1/0x3b0
[   46.832589][ T4550]  __x64_sys_flock+0x31/0x40
[   46.832626][ T4550]  x64_sys_call+0x1e5a/0x2ff0
[   46.832669][ T4550]  do_syscall_64+0xd2/0x200
[   46.832704][ T4550]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   46.832866][ T4550]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   46.832898][ T4550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.832924][ T4550] RIP: 0033:0x7f7d37b5ebe9
[   46.832942][ T4550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.832963][ T4550] RSP: 002b:00007f7d365c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[   46.832988][ T4550] RAX: ffffffffffffffda RBX: 00007f7d37d95fa0 RCX: 00007f7d37b5ebe9
[   46.833070][ T4550] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006
[   46.833085][ T4550] RBP: 00007f7d365c7090 R08: 0000000000000000 R09: 0000000000000000
[   46.833099][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.833114][ T4550] R13: 00007f7d37d96038 R14: 00007f7d37d95fa0 R15: 00007ffdfe98a938
[   46.833176][ T4550]  </TASK>
[   47.263354][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'.
[   47.273836][ T4571] 8021q: VLANs not supported on ip_vti0
[   47.736486][ T4582] wireguard0: entered promiscuous mode
[   47.742059][ T4582] wireguard0: entered allmulticast mode
[   48.034647][ T4613] FAULT_INJECTION: forcing a failure.
[   48.034647][ T4613] name failslab, interval 1, probability 0, space 0, times 0
[   48.047482][ T4613] CPU: 0 UID: 0 PID: 4613 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.047538][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.047554][ T4613] Call Trace:
[   48.047562][ T4613]  <TASK>
[   48.047571][ T4613]  __dump_stack+0x1d/0x30
[   48.047593][ T4613]  dump_stack_lvl+0xe8/0x140
[   48.047610][ T4613]  dump_stack+0x15/0x1b
[   48.047625][ T4613]  should_fail_ex+0x265/0x280
[   48.047646][ T4613]  should_failslab+0x8c/0xb0
[   48.047687][ T4613]  kmem_cache_alloc_noprof+0x50/0x310
[   48.047722][ T4613]  ? audit_log_start+0x365/0x6c0
[   48.047758][ T4613]  audit_log_start+0x365/0x6c0
[   48.047790][ T4613]  audit_seccomp+0x48/0x100
[   48.047815][ T4613]  ? __seccomp_filter+0x68c/0x10d0
[   48.047864][ T4613]  __seccomp_filter+0x69d/0x10d0
[   48.047886][ T4613]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   48.047948][ T4613]  ? vfs_write+0x7e8/0x960
[   48.047981][ T4613]  __secure_computing+0x82/0x150
[   48.048009][ T4613]  syscall_trace_enter+0xcf/0x1e0
[   48.048092][ T4613]  do_syscall_64+0xac/0x200
[   48.048192][ T4613]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.048219][ T4613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.048239][ T4613] RIP: 0033:0x7fa03b17ebe9
[   48.048253][ T4613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.048294][ T4613] RSP: 002b:00007fa039be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[   48.048312][ T4613] RAX: ffffffffffffffda RBX: 00007fa03b3b5fa0 RCX: 00007fa03b17ebe9
[   48.048323][ T4613] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000005
[   48.048335][ T4613] RBP: 00007fa039be7090 R08: 0000000000000000 R09: 0000000000000000
[   48.048346][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.048360][ T4613] R13: 00007fa03b3b6038 R14: 00007fa03b3b5fa0 R15: 00007ffc6de7eb78
[   48.048381][ T4613]  </TASK>
[   48.450189][ T4647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   48.456755][ T4647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.464312][ T4647] vhci_hcd vhci_hcd.0: Device attached
[   48.478105][ T4647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4647 comm=syz.2.485
[   48.492885][ T4648] vhci_hcd: connection closed
[   48.493015][   T31] vhci_hcd: stop threads
[   48.502130][   T31] vhci_hcd: release socket
[   48.506566][   T31] vhci_hcd: disconnect device
[   48.915231][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[   49.075703][ T4673] netlink: 'syz.1.496': attribute type 13 has an invalid length.
[   49.092700][ T4673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.988017][ T4713] netlink: 'syz.0.511': attribute type 13 has an invalid length.
[   50.006132][ T4713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.594236][ T4741] netlink: 'syz.2.522': attribute type 13 has an invalid length.
[   50.611613][ T4741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.696260][ T4750] FAULT_INJECTION: forcing a failure.
[   50.696260][ T4750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.708705][ T4749] netlink: 'syz.4.525': attribute type 13 has an invalid length.
[   50.709495][ T4750] CPU: 0 UID: 0 PID: 4750 Comm: syz.3.523 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.709540][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   50.709555][ T4750] Call Trace:
[   50.709563][ T4750]  <TASK>
[   50.709572][ T4750]  __dump_stack+0x1d/0x30
[   50.709601][ T4750]  dump_stack_lvl+0xe8/0x140
[   50.709627][ T4750]  dump_stack+0x15/0x1b
[   50.709650][ T4750]  should_fail_ex+0x265/0x280
[   50.709756][ T4750]  should_fail+0xb/0x20
[   50.709798][ T4750]  should_fail_usercopy+0x1a/0x20
[   50.709837][ T4750]  _copy_to_user+0x20/0xa0
[   50.709945][ T4750]  simple_read_from_buffer+0xb5/0x130
[   50.709975][ T4750]  proc_fail_nth_read+0x10e/0x150
[   50.710014][ T4750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   50.710084][ T4750]  vfs_read+0x1a8/0x770
[   50.710143][ T4750]  ? __rcu_read_unlock+0x4f/0x70
[   50.710174][ T4750]  ? __fget_files+0x184/0x1c0
[   50.710255][ T4750]  ksys_read+0xda/0x1a0
[   50.710286][ T4750]  __x64_sys_read+0x40/0x50
[   50.710316][ T4750]  x64_sys_call+0x27bc/0x2ff0
[   50.710344][ T4750]  do_syscall_64+0xd2/0x200
[   50.710487][ T4750]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.710519][ T4750]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.710628][ T4750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.710725][ T4750] RIP: 0033:0x7f9a62c7d5fc
[   50.710747][ T4750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   50.710770][ T4750] RSP: 002b:00007f9a616be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.710796][ T4750] RAX: ffffffffffffffda RBX: 00007f9a62eb6090 RCX: 00007f9a62c7d5fc
[   50.710821][ T4750] RDX: 000000000000000f RSI: 00007f9a616be0a0 RDI: 0000000000000004
[   50.710838][ T4750] RBP: 00007f9a616be090 R08: 0000000000000000 R09: 0000000000000000
[   50.710891][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.710910][ T4750] R13: 00007f9a62eb6128 R14: 00007f9a62eb6090 R15: 00007fff002a3358
[   50.710934][ T4750]  </TASK>
[   50.926657][ T4749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.211550][ T4773] netlink: 'syz.0.535': attribute type 13 has an invalid length.
[   51.230049][ T4773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.596064][   T29] kauditd_printk_skb: 938 callbacks suppressed
[   51.596077][   T29] audit: type=1400 audit(1757072033.322:4047): avc:  denied  { prog_load } for  pid=4799 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   51.623604][   T29] audit: type=1400 audit(1757072033.352:4048): avc:  denied  { create } for  pid=4799 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0
[   51.643320][   T29] audit: type=1400 audit(1757072033.352:4049): avc:  denied  { prog_load } for  pid=4799 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   51.662377][   T29] audit: type=1400 audit(1757072033.352:4050): avc:  denied  { prog_load } for  pid=4799 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   51.730694][   T29] audit: type=1400 audit(1757072033.462:4051): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   51.796736][ T4808] netlink: 'syz.3.550': attribute type 13 has an invalid length.
[   51.814873][ T4808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.890166][   T29] audit: type=1400 audit(1757072033.492:4052): avc:  denied  { map_create } for  pid=4803 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   51.909297][   T29] audit: type=1400 audit(1757072033.492:4053): avc:  denied  { prog_load } for  pid=4803 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   51.928346][   T29] audit: type=1400 audit(1757072033.492:4054): avc:  denied  { create } for  pid=4803 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   51.947958][   T29] audit: type=1400 audit(1757072033.502:4055): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   51.972156][   T29] audit: type=1400 audit(1757072033.512:4056): avc:  denied  { create } for  pid=4805 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   52.169651][ T4831] netlink: 'syz.3.561': attribute type 13 has an invalid length.
[   52.195440][ T4831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   52.593710][ T4865] netlink: 'syz.3.573': attribute type 13 has an invalid length.
[   52.611952][ T4865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.047722][ T4867] ==================================================================
[   53.055850][ T4867] BUG: KCSAN: data-race in touch_atime / touch_atime
[   53.062558][ T4867] 
[   53.064893][ T4867] write to 0xffff88811ab329a0 of 4 bytes by task 4868 on cpu 0:
[   53.072538][ T4867]  touch_atime+0x1e8/0x340
[   53.076994][ T4867]  shmem_file_read_iter+0x477/0x540
[   53.082201][ T4867]  copy_splice_read+0x442/0x660
[   53.087084][ T4867]  splice_direct_to_actor+0x290/0x680
[   53.092485][ T4867]  do_splice_direct+0xda/0x150
[   53.097265][ T4867]  do_sendfile+0x380/0x650
[   53.101713][ T4867]  __x64_sys_sendfile64+0x105/0x150
[   53.106943][ T4867]  x64_sys_call+0x2bb0/0x2ff0
[   53.111632][ T4867]  do_syscall_64+0xd2/0x200
[   53.116155][ T4867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.122069][ T4867] 
[   53.124409][ T4867] read to 0xffff88811ab329a0 of 4 bytes by task 4867 on cpu 1:
[   53.131961][ T4867]  touch_atime+0x194/0x340
[   53.136410][ T4867]  shmem_file_read_iter+0x477/0x540
[   53.141627][ T4867]  copy_splice_read+0x442/0x660
[   53.146496][ T4867]  splice_direct_to_actor+0x290/0x680
[   53.151892][ T4867]  do_splice_direct+0xda/0x150
[   53.156686][ T4867]  do_sendfile+0x380/0x650
[   53.161125][ T4867]  __x64_sys_sendfile64+0x105/0x150
[   53.166354][ T4867]  x64_sys_call+0x2bb0/0x2ff0
[   53.171053][ T4867]  do_syscall_64+0xd2/0x200
[   53.175587][ T4867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.181492][ T4867] 
[   53.183820][ T4867] value changed: 0x2e07cb43 -> 0x2ea061c3
[   53.189536][ T4867] 
[   53.191871][ T4867] Reported by Kernel Concurrency Sanitizer on:
[   53.198022][ T4867] CPU: 1 UID: 0 PID: 4867 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.207673][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.217741][ T4867] ==================================================================