last executing test programs:

3m51.793860707s ago: executing program 2 (id=3):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, '\x00', "8b3de2aa26ca871e419e59f30000000004000000000200100100", "07350080", "ce14f7fd00"}, 0x38)
r3 = socket$xdp(0x2c, 0x3, 0x0)
readv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000003c0)=""/17, 0x11}], 0x3)
r4 = socket$rds(0x15, 0x5, 0x0)
recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0xfffffffffffffff9, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)
pwrite64(r5, &(0x7f00000000c0)='/', 0x1, 0x2f70000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$rds(0x15, 0x5, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x202, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='\a\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3b82, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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")

3m51.016603737s ago: executing program 2 (id=11):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001000000000000000000"], 0x38}}, 0x0)

3m50.015459163s ago: executing program 2 (id=19):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc)

3m49.970346665s ago: executing program 32 (id=19):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc)

53.026172453s ago: executing program 0 (id=1912):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
write(r1, &(0x7f0000000000)='3', 0x4e)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r5, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x5, 0x5beb, 0x1, 0x9}, {0x70000000, 0x1, 0x9, 0x9, 0x3, 0x9, 0x700000000000000, 0x1ff}, {0x60000000, 0x6, 0x3, 0x8, 0x7, 0x4, 0x80000000, 0xfffffffffffffff9}, {0x6474e551, 0x6, 0x5, 0x7, 0x2828, 0x7, 0xc, 0x7}]}, 0x120)
lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
close(r5)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@delqdisc={0x34, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0x3}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000010200081dc28bd70000300000002000000000000011f0000008000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ff0b00000100000000000000", @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008880)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000040)={0x0, 0x5, 0x3})

53.004297529s ago: executing program 0 (id=1913):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a030000000000000000000a0000010900010073797a300000000030000000030a010300000000000000000a00000408000b400000000108000a40000000040900010073797a300000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4020080}, 0x4c000)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
pipe2$9p(&(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x8, 0x80000000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendmsg$802154_dgram(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800)

52.787266514s ago: executing program 0 (id=1914):
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
r4 = syz_io_uring_setup(0x201, &(0x7f0000000080)={0x0, 0xc9f, 0x800, 0x3, 0x3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000)
io_uring_enter(r4, 0x1, 0x8000020, 0x1, 0x0, 0x0)
io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0)
connect$inet(r7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r8, &(0x7f0000000000)='7', 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000007c0)={0x2, 'macsec0\x00', 0x3}, 0x18)

51.892402744s ago: executing program 0 (id=1926):
r0 = msgget$private(0x0, 0x10)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/123}, 0x83, 0x2, 0x1000)
r1 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3010010, &(0x7f0000000100)={[{@grpjquota}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, 0xa20, 0x9514}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x20000801)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000100))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c095)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f0000000180)=""/219, 0xdb, <r7=>0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10)
r8 = socket$inet(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r8, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb})
ioctl$sock_ifreq(r8, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @ifru_ivalue=0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000005000000000000000300e5ff26660000ffffffff9500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000440)=""/194, 0x41100, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x6, 0x8001}, 0x10, r7, 0x0, 0x7, &(0x7f00000005c0)=[r1], &(0x7f0000000600)=[{0x5, 0x2, 0x5, 0x8}, {0x4, 0x3, 0xb, 0xc}, {0x4, 0x1, 0x0, 0xc}, {0x0, 0x5, 0xb, 0x7}, {0x2, 0x2, 0xc, 0x9}, {0x0, 0x2, 0x7, 0x2}, {0x5, 0x1, 0x1, 0x2}], 0x10, 0xb}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

50.715223215s ago: executing program 0 (id=1937):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x16c)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
setresuid(0xee01, 0xee00, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000300), 0x0, 0x4ec, &(0x7f0000001500)="$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")
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
r4 = gettid()
capset(&(0x7f0000000040)={0x20080522, r4}, &(0x7f0000000100)={0x8000, 0x63fe1e64, 0x6d, 0x3, 0xfffffff0, 0xcd54})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
socket$kcm(0x2, 0x922000000001, 0x106)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r6], 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

49.905784412s ago: executing program 0 (id=1943):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x42800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x325, @tick=0x4, 0xff, {0x2, 0x7}, 0x81, 0x0, 0x4b})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2, 0x3}, 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
syz_pidfd_open(0x0, 0x0)

49.774590386s ago: executing program 33 (id=1943):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x42800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x325, @tick=0x4, 0xff, {0x2, 0x7}, 0x81, 0x0, 0x4b})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2, 0x3}, 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
syz_pidfd_open(0x0, 0x0)

37.631236708s ago: executing program 1 (id=2026):
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc, 0x12)
write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync', 0x38)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x8001, 0xcc7, 0x8}, &(0x7f0000000140)=0x14)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0xc400, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001")
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './dev/mapper/control\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000180)={[{@none}, {@nofavordynmods}]})
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x20000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)

37.590922268s ago: executing program 1 (id=2027):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x4, 0x0)
getdents64(r5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x42800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)

37.164313237s ago: executing program 1 (id=2031):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

37.107497062s ago: executing program 1 (id=2032):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5c, 0x8000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x1, 0x81, 0x813}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1, 0x5d2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0xfffffffe, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c)
r2 = creat(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = openat(r3, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x40042, 0x0)
syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r4}, 0x0, 0x0, 0x0)
write$nci(r2, 0x0, 0x5)
ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000001140)={0xb4, 0x10, &(0x7f0000000d40)="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"})

36.968329427s ago: executing program 1 (id=2035):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
pwrite64(r2, &(0x7f00000007c0)="cf", 0x1, 0x7ff)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d87f}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x8000)
socket$netlink(0x10, 0x3, 0x13)

36.103249819s ago: executing program 1 (id=2045):
r0 = memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0), <r2=>0x0, 0x7e, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000004040), 0x0, 0x0, 0x0)

35.949344519s ago: executing program 34 (id=2045):
r0 = memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0), <r2=>0x0, 0x7e, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000004040), 0x0, 0x0, 0x0)

4.028510818s ago: executing program 3 (id=2354):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
pwrite64(r2, &(0x7f00000007c0)="cf", 0x1, 0x7ff)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d87f}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x8000)
socket$netlink(0x10, 0x3, 0x13)

3.656033523s ago: executing program 7 (id=2361):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
write(r1, &(0x7f0000000000)='3', 0x4e)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r5, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x5, 0x5beb, 0x1, 0x9}, {0x70000000, 0x1, 0x9, 0x9, 0x3, 0x9, 0x700000000000000, 0x1ff}, {0x60000000, 0x6, 0x3, 0x8, 0x7, 0x4, 0x80000000, 0xfffffffffffffff9}, {0x6474e551, 0x6, 0x5, 0x7, 0x2828, 0x7, 0xc, 0x7}]}, 0x120)
lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
close(r5)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@delqdisc={0x34, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0x3}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000010200081dc28bd70000300000002000000000000011f0000008000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ff0b00000100000000000000", @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008880)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000040)={0x0, 0x5, 0x3})

3.571381665s ago: executing program 7 (id=2362):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4005, 0x0, 0x6)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x21c, &(0x7f0000000500)="$eJzs3D1rW1cYB/AjWa6tlhZPhZZCD+3SLretly4dWooLpYKWFpW8TNdYToQUCXw1SCGD5kz5AvkCIZAlkC3kC/gzZMlmAsaTtxscyS8yEnZsS0mc32/Rw/mfc3UeLrqgq5etX+7daqxnyXraCaXFQij+GvphtxCWQjHs64fvH13Zufvf1Wt//VaprPw7PxyP8bOvn16/8/CbZ51P/n+8N1IIIWwvv9j8fPOLra/CzXoW61lstTsxjavtdiddbdbiWj1rJDH+06ylWS3WW1ltYyRfb7YPnzrUsiymrV5s1Hqx046djV5Mb6T1VkySJC4GzqX6YDfPw3ae5/lCP+R5/qYHKExnX8zKOc8/77mDi3rcu5q+7Her3ergcZD/8Wdl5cf42tLhqp1utzp3kP80yONoPh8+HubLY/OPwnffDvK97Pe/K8fyclibfvsAAAAAAHApJfHA2Pv7STIpH1RHPh84dv++FL4sHY7MTb8VAAAAYIKsd7uRNtfmNwZFs3ZSsXCKOWcqFsLoyM9Phls8afkPz0+eM6Xi02ERzniccghh8pximHE7b6vY/x75cGT/9wWnW166qG2UZ937kZbHzVkM46JymPgavB9CuMiTAgAAXC6j70ZOpTjVDQEAAAAAAAAAAAAAAAAAAMAHaFb/cwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K56FQAA//9RllJg")
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
socket$inet6(0xa, 0x802, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x20)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
setns(0xc9, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001300010000000000b2b74e49cb0ba031fe746bde302bc715148c1bd48d3be2274552d68d94b002eb97d66813b11918c816aaed0ac3b6570d", @ANYRES32=0x0, @ANYBLOB="20800100000000"], 0x20}}, 0xc080)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28188, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x600, 0x0, 0x2, 0x8, 0xc7, 0x40, 0x7fff, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100"/19], 0x7c}}, 0x4000)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.378409494s ago: executing program 3 (id=2363):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x4, 0x0)
getdents64(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x325, @tick=0x4, 0xff, {0x2, 0x7}, 0x81, 0x0, 0x4b})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2, 0x3}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
syz_pidfd_open(0x0, 0x0)

3.176778316s ago: executing program 7 (id=2365):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r3, 0x4, 0x0)
getdents64(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)

2.647802922s ago: executing program 6 (id=2369):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.57423492s ago: executing program 6 (id=2370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x5, 0x2000000, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa20003000008000000b704000002000000a600000095000000dfcb000056469885cd158bcd000000007a06000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='3', 0x1)
inotify_init1(0x80800)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1074cc, 0x400, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000024)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81, 0xffffffdf})
mlockall(0x5)

2.560159344s ago: executing program 4 (id=2371):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x0}, 0x1, &(0x7f0000000a80)=[{0x1, 0x6, &(0x7f0000000480)='mqumu\x10e\x00\xd3\xb6\f\xae\xbc\x94\xe3\xaa$k\xac\x96A\xac\xc2\xd3\xe4q\x12\xf6\xdc\';\x0e%M\xcd\xdd\xf3\x9a\xb8\x9d\xa9\xad\x04\xa5\xb7C\xb9V\xf7\x8e\xf0\xa5\xd0\xd86\xff\xedx\x03\xf2\xfa\xe7\x1d\xfcG\xbe\x94\xa4\xde\x03\fnlv\x00V\x11\xbe\xe7\xaeC&\x8d\x1d\xd7X_\x93)\x8c\x9a\xb1\xb0\x0e\x10\xc7\xcf\xcdMu\xbf\xc1\x9e\x15M<\xf6\x10\x9bG\xa9\x9a#\x9ad\x15\xeb\xd7w\x00\xad\x1d\xb2?\x17Y\f\x86cq\x8f\x1e\xb4Zg\xe8\x8d\x96T5\x15\x8f\x17\x84J*\x8f\xa4\x96\xa3[\x94i\xfdM_\xda\xb7_\x974\xbc\x84)@\xc1\x87\xc9\x81I\xa7rU\xfd\b\xda\r6\x16\x84,\xf1\xa9U\x1e\x06\xfc\x84ag\x9c\xc57E\xa6', 0x0, 0x0, 0x30}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc)

2.500688119s ago: executing program 3 (id=2372):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000021)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00')
getdents(r4, &(0x7f0000000ec0)=""/4114, 0x1012)
getdents64(r4, 0x0, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02a11700040000b727c64d0822bc7268935685", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x4}, 0x38)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x9}}}}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r2, &(0x7f00000004c0)="240000001a005f0214f9f407000982001f000800dc91fd00"/36, 0x24)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001300010026bd7000ffdbdf2500000000000000000000000000000000fc0100000000000000000000000000014e2300034e2200000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff7ffd03000000000000aa0d0000000000000700000000000000263800000000000003000000000000000600000000000000ffffffff000000000200df000000000006030000000000000800000000000000ff000000000000000100000000000000000101030000000044000500fe80000000000000000000000000001c000004d2ff00000a0000000000000000000000000135000005011000e51d00000800"], 0xfc}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)

2.375700511s ago: executing program 4 (id=2373):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/34)

2.315534617s ago: executing program 4 (id=2374):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x4, 0x0)
getdents64(r5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x42800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)

2.197260427s ago: executing program 5 (id=2375):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x8, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680)={[{@errors_remount}, {@noload}, {@bh}, {@auto_da_alloc}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x10000}}, {@sb={'sb', 0x3d, 0xb7e}}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x529, &(0x7f00000010c0)="$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")
syz_clone3(&(0x7f0000002a40)={0x200000000, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000380), {0x1c}, &(0x7f00000003c0)=""/172, 0xac, &(0x7f0000001740)=""/4096, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r1}}, 0x58)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
tkill(0x0, 0xb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffc})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000001ccb"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600)
r7 = epoll_create(0xe)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x80002019})
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000640)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000a044)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0)
readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1)
syz_read_part_table(0x5c6, &(0x7f0000003880)="$eJzs2z9o02kYB/AnahAUzsXJ4bA3OLkojmawkkRFIUS7iIOCImKmCEKEgKCDZlDMUDp2KYUs/TM1zdDhaGmhcykdehQ6dDrapdClv6PX9+DG/r1D+Hzg5eF932/y5BkyvsFP7Uz8mWVZLiKy84f/9ECnWLp/tXKn+iQiF88iou/3Xyb2bnIp8c+3/pb2q2k/Mnyh93XrXr6z8nj72vPZ1pl0/zGti6PdgX93yo46IKdqrDB36dPnevlbo/Bmudxc/7K0+Gh8s1jtPmy1Jx7k775MuflUz6X6LhrxId7Gi6hFLV5F/YT6D3XWbuxeKXemXt/eKfW+z9xMucox5zxo//d9P562m/3XJy8P3mpML1Q3zu7nakf4dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N8bK8xd+vS5Xv7WKLxZLjfXvywtPhrfLFa7D1vtiQf5uy9Tbj7Vc6m+i0Z8iLfxImpRi1dRP5H+EUOdtRu7V8qdqde3d0q97zM3U65yzDkP1r+5/r7vx9N2s//65OXBW43pherG2f1c7fwp/QAAAAAAAAAAAAAAAAAAAACIiGLp/tXKneqTiFw8i4jur/1/P/XP0nv3XMplWZbt1dV0PjJ8ofd1616+s/J4+9rz2dYf6fxjWhdHuwP/xzwczl8BAAD//+9pmT4=")

2.178242642s ago: executing program 3 (id=2376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320300000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000070900010073797a30"], 0x108}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x84, 0x50, 0x81, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x7ae}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x80, 0x1}}}}}]}}]}}, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}], 0x1}, 0x44081)

1.67843112s ago: executing program 6 (id=2377):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4005, 0x0, 0x6)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x21c, &(0x7f0000000500)="$eJzs3D1rW1cYB/AjWa6tlhZPhZZCD+3SLretly4dWooLpYKWFpW8TNdYToQUCXw1SCGD5kz5AvkCIZAlkC3kC/gzZMlmAsaTtxscyS8yEnZsS0mc32/Rw/mfc3UeLrqgq5etX+7daqxnyXraCaXFQij+GvphtxCWQjHs64fvH13Zufvf1Wt//VaprPw7PxyP8bOvn16/8/CbZ51P/n+8N1IIIWwvv9j8fPOLra/CzXoW61lstTsxjavtdiddbdbiWj1rJDH+06ylWS3WW1ltYyRfb7YPnzrUsiymrV5s1Hqx046djV5Mb6T1VkySJC4GzqX6YDfPw3ae5/lCP+R5/qYHKExnX8zKOc8/77mDi3rcu5q+7Her3ergcZD/8Wdl5cf42tLhqp1utzp3kP80yONoPh8+HubLY/OPwnffDvK97Pe/K8fyclibfvsAAAAAAHApJfHA2Pv7STIpH1RHPh84dv++FL4sHY7MTb8VAAAAYIKsd7uRNtfmNwZFs3ZSsXCKOWcqFsLoyM9Phls8afkPz0+eM6Xi02ERzniccghh8pximHE7b6vY/x75cGT/9wWnW166qG2UZ937kZbHzVkM46JymPgavB9CuMiTAgAAXC6j70ZOpTjVDQEAAAAAAAAAAAAAAAAAAMAHaFb/cwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K56FQAA//9RllJg")
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
socket$inet6(0xa, 0x802, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x20)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
setns(0xc9, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001300010000000000b2b74e49cb0ba031fe746bde302bc715148c1bd48d3be2274552d68d94b002eb97d66813b11918c816aaed0ac3b6570d", @ANYRES32=0x0, @ANYBLOB="20800100000000"], 0x20}}, 0xc080)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28188, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x600, 0x0, 0x2, 0x8, 0xc7, 0x40, 0x7fff, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100"/19], 0x7c}}, 0x4000)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.59943168s ago: executing program 7 (id=2378):
listen(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x29, 0x2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
unshare(0x28020480)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'xfrm0\x00'})
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40851)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x80f)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)='\'\x00', 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r6 = socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300))
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.575808576s ago: executing program 5 (id=2379):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x4}, 0x10)
r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil)
shmat(r3, &(0x7f000063c000/0x4000)=nil, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.513705752s ago: executing program 5 (id=2380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.512405412s ago: executing program 7 (id=2381):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
pwrite64(r2, &(0x7f00000007c0)="cf", 0x1, 0x7ff)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d87f}]}, 0x28}}, 0x8000)
socket$netlink(0x10, 0x3, 0x13)

1.44194335s ago: executing program 5 (id=2382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x5, 0x2000000, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa20003000008000000b704000002000000a600000095000000dfcb000056469885cd158bcd000000007a06000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='3', 0x1)
inotify_init1(0x80800)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0}, 0x20000024)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81, 0xffffffdf})
mlockall(0x5)

1.432284823s ago: executing program 4 (id=2383):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x0}, 0x1, &(0x7f0000000a80)=[{0x1, 0x6, &(0x7f0000000480)='mqumu\x10e\x00\xd3\xb6\f\xae\xbc\x94\xe3\xaa$k\xac\x96A\xac\xc2\xd3\xe4q\x12\xf6\xdc\';\x0e%M\xcd\xdd\xf3\x9a\xb8\x9d\xa9\xad\x04\xa5\xb7C\xb9V\xf7\x8e\xf0\xa5\xd0\xd86\xff\xedx\x03\xf2\xfa\xe7\x1d\xfcG\xbe\x94\xa4\xde\x03\fnlv\x00V\x11\xbe\xe7\xaeC&\x8d\x1d\xd7X_\x93)\x8c\x9a\xb1\xb0\x0e\x10\xc7\xcf\xcdMu\xbf\xc1\x9e\x15M<\xf6\x10\x9bG\xa9\x9a#\x9ad\x15\xeb\xd7w\x00\xad\x1d\xb2?\x17Y\f\x86cq\x8f\x1e\xb4Zg\xe8\x8d\x96T5\x15\x8f\x17\x84J*\x8f\xa4\x96\xa3[\x94i\xfdM_\xda\xb7_\x974\xbc\x84)@\xc1\x87\xc9\x81I\xa7rU\xfd\b\xda\r6\x16\x84,\xf1\xa9U\x1e\x06\xfc\x84ag\x9c\xc57E\xa6', 0x0, 0x0, 0x30}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc)

1.376889317s ago: executing program 4 (id=2384):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x4, 0x0)
getdents64(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x325, @tick=0x4, 0xff, {0x2, 0x7}, 0x81, 0x0, 0x4b})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2, 0x3}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
syz_pidfd_open(0x0, 0x0)

1.151012925s ago: executing program 6 (id=2385):
setns(0xc9, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x10000, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000001c0))
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0xfb}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a)

1.107435926s ago: executing program 3 (id=2386):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/34)

1.065713667s ago: executing program 7 (id=2387):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xfffffffc, 0x9, 0x800000, 0x43, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x3, &(0x7f0000000300)=[{0xf50, 0x8, 0xa, 0xa}, {0x2, 0xc0, 0x7a, 0xfffffffb}, {0xffff, 0x4, 0xda, 0x1}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x28)
listen(r1, 0x5)
write(r0, &(0x7f0000000300)='*:', 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2240, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
connect$can_j1939(r3, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xee}, 0xff}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c000380480000800800034000000002180002801400028008000180fffffffc"], 0x10c}}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

1.064990467s ago: executing program 3 (id=2388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320300000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000070900010073797a30"], 0x108}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x84, 0x50, 0x81, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x7ae}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x80, 0x1}}}}}]}}]}}, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}], 0x1}, 0x44081)

1.036243085s ago: executing program 5 (id=2389):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x8800, 0x85)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0001}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5ac}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044800)
write(r1, &(0x7f00000001c0)='1', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

451.777084ms ago: executing program 4 (id=2390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x5, 0x2000000, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa20003000008000000b704000002000000a600000095000000dfcb000056469885cd158bcd000000007a06000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='3', 0x1)
inotify_init1(0x80800)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1074cc, 0x400, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000024)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81, 0xffffffdf})
mlockall(0x5)

77.54528ms ago: executing program 6 (id=2391):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x4}, 0x10)
r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil)
shmat(r3, &(0x7f000063c000/0x4000)=nil, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

71.018282ms ago: executing program 6 (id=2392):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x8, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680)={[{@errors_remount}, {@noload}, {@bh}, {@auto_da_alloc}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x10000}}, {@sb={'sb', 0x3d, 0xb7e}}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x529, &(0x7f00000010c0)="$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")
syz_clone3(&(0x7f0000002a40)={0x200000000, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000380), {0x1c}, &(0x7f00000003c0)=""/172, 0xac, &(0x7f0000001740)=""/4096, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r1}}, 0x58)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
tkill(0x0, 0xb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffc})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000001ccb"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600)
r7 = epoll_create(0xe)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x80002019})
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000640)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250b0000000c00038000000200ff030000d00004801300010062726f6164636173742d6c696e6b00000400078034000780080004000b00000008000200000100000800010010000000080004008f8d0000080003004000000008000300000200000800010062726f6164636173742d6c696e6b000024000780080001001200000008000400070000000800030007000000080004000600000014000780080002000900000008000200080000001400010073797a300000000014000780080002000900000008000400080000001400078008000200400000000800030000800000f40004802c000780080002000c000000080004000600000008000300050000000800030002000000080001001100000044000780080004000200000008000100090000000800030000000000080001001000000008000400faffffff080003001d00000008000200320f000008000100070000001300010062726f6164636173742d6c696e6b00000900010073797a3000000000440007800800020006000000080002000300000008000200800000000800030004000000080002000400000008000400be0a0000080004006c000000080004000a0000001c0007800800030001000000080002000300000008000300030000002c0007800c0004000900000000000000080001000400000008000200480000000c0004006208000000000000680005803400028008000200fdffffff08000200e6ed00000800020000000000080004009e000000080001000c00000008000200060000000700010069620000040002800c00028008000100170000000800010065746800070001006962000008000100696200000400058058000680040002004b00040067636d2861657329000000000000000000000000000000000000000000000000230000009dee73aae7103422c84566142e648f0244efceb8fa9251f115dfbfec2fa1f8792c9d320004000500440006800d000300cb610f706c30306ee4000000080006000100000004000500080001000900000008000600f41b131704000200080001000500000008000100000000000c00028008000200070000000c0002800800010000080000"], 0x330}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000a044)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0)
readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1)
syz_read_part_table(0x5c6, &(0x7f0000003880)="$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")

0s ago: executing program 5 (id=2393):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_getaffinity(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000109000000b7ffdbdf25ff0000080000000208000100378eac1414000000"], 0x24}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x4, 0x0)
getdents64(r5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000003ac0), 0x42800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)

kernel console output (not intermixed with test programs):

7, /dev/loop1p3, 10) failed: No such file or directory
[  224.090141][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  224.091612][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  224.276053][T10085] syz_tun: entered allmulticast mode
[  224.586117][   T71] tipc: Subscription rejected, illegal request
[  224.955206][T10084] syz_tun: left allmulticast mode
[  224.985212][T10094] loop1: detected capacity change from 0 to 512
[  224.989768][T10094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  225.131626][T10094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.132396][T10094] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.019429][T10114] 9p: Bad value for 'rfdno'
[  226.055338][T10109] netlink: 'syz.3.1997': attribute type 10 has an invalid length.
[  226.055477][T10109] team0: Device veth1_to_hsr is up. Set it down before adding it as a team port
[  226.119403][T10117] loop4: detected capacity change from 0 to 512
[  226.120189][T10117] EXT4-fs: Ignoring removed bh option
[  226.122787][T10117] EXT4-fs (loop4): unable to read superblock
[  226.278170][T10128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.278314][T10128] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.279968][T10128] bond0: invalid NS target ff00:: specified for addition
[  226.279991][T10128] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  226.381329][   T29] kauditd_printk_skb: 39 callbacks suppressed
[  226.381343][   T29] audit: type=1400 audit(1790601210.597:618): avc:  denied  { read } for  pid=10127 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.450525][   T29] audit: type=1400 audit(1790601210.657:619): avc:  denied  { write } for  pid=10127 comm="syz.6.2002" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  226.660594][T10117] Alternate GPT is invalid, using primary GPT.
[  226.660691][T10117]  loop4: p1 p2 p3
[  226.748251][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.874485][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.345290][   T29] audit: type=1400 audit(1790601211.557:620): avc:  denied  { create } for  pid=10158 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  227.349416][   T29] audit: type=1400 audit(1790601211.557:621): avc:  denied  { write } for  pid=10158 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  227.458392][T10159] capability: warning: `syz.4.2010' uses 32-bit capabilities (legacy support in use)
[  227.767945][T10169] bridge_slave_0: left allmulticast mode
[  227.767967][T10169] bridge_slave_0: left promiscuous mode
[  227.768107][T10169] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.878525][T10175] device-mapper: dirty region log: invalid region size 1024
[  227.878550][T10175] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  227.878589][T10175] device-mapper: ioctl: error adding target to table
[  227.895034][T10175] cgroup: Need name or subsystem set
[  228.073541][T10188] msdos: Unknown parameter '01777777777777777777777'
[  228.107732][T10183] FAULT_INJECTION: forcing a failure.
[  228.107732][T10183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  228.107766][T10183] CPU: 0 UID: 0 PID: 10183 Comm: syz.4.2019 Not tainted syzkaller #0 PREEMPT(lazy) 
[  228.107839][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.107854][T10183] Call Trace:
[  228.107861][T10183]  <TASK>
[  228.107868][T10183]  __dump_stack+0x1d/0x30
[  228.107894][T10183]  dump_stack_lvl+0x95/0xd0
[  228.107915][T10183]  dump_stack+0x15/0x1b
[  228.108001][T10183]  should_fail_ex+0x262/0x280
[  228.108040][T10183]  should_fail+0xb/0x20
[  228.108136][T10183]  should_fail_usercopy+0x1a/0x20
[  228.108171][T10183]  _copy_from_user+0x1c/0xb0
[  228.108206][T10183]  get_user_ifreq+0x52/0x110
[  228.108314][T10183]  inet_ioctl+0x24f/0x3a0
[  228.108348][T10183]  sock_do_ioctl+0x73/0x230
[  228.108384][T10183]  sock_ioctl+0x439/0x610
[  228.108419][T10183]  ? __pfx_sock_ioctl+0x10/0x10
[  228.108501][T10183]  __se_sys_ioctl+0xce/0x140
[  228.108605][T10183]  __x64_sys_ioctl+0x43/0x50
[  228.108643][T10183]  x64_sys_call+0x239d/0x2550
[  228.108750][T10183]  do_syscall_64+0x112/0x360
[  228.108779][T10183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.108851][T10183] RIP: 0033:0x7f0c9031e159
[  228.108868][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.108886][T10183] RSP: 002b:00007f0c8ed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.108908][T10183] RAX: ffffffffffffffda RBX: 00007f0c905a5fa0 RCX: 00007f0c9031e159
[  228.108926][T10183] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  228.108943][T10183] RBP: 00007f0c903b506b R08: 0000000000000000 R09: 0000000000000000
[  228.108987][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.109003][T10183] R13: 00007f0c905a6038 R14: 00007f0c905a5fa0 R15: 00007ffecdea5118
[  228.109027][T10183]  </TASK>
[  228.138246][T10183] Invalid argument reading file caps for ./file0
[  228.141780][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'.
[  228.548687][T10209] device-mapper: dirty region log: invalid region size 1024
[  228.548768][T10209] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  228.548805][T10209] device-mapper: ioctl: error adding target to table
[  228.569902][T10209] cgroup: Need name or subsystem set
[  228.624496][T10204] set_capacity_and_notify: 4 callbacks suppressed
[  228.624611][T10204] loop6: detected capacity change from 0 to 512
[  228.627179][T10204] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  228.714568][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.716453][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.771987][   T29] audit: type=1400 audit(1790601212.987:622): avc:  denied  { map } for  pid=10203 comm="syz.6.2024" path="socket:[29717]" dev="sockfs" ino=29717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  229.065822][   T29] audit: type=1400 audit(1790601213.277:623): avc:  denied  { allowed } for  pid=10221 comm="syz.3.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  229.110874][T10227] loop1: detected capacity change from 0 to 128
[  229.114846][T10227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  229.114894][T10227] System zones: 1-3, 19-19, 35-36
[  229.115420][T10227] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  229.115565][T10227] ext4 filesystem being mounted at /413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.127523][   T29] audit: type=1400 audit(1790601213.337:624): avc:  denied  { bind } for  pid=10226 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  229.127556][   T29] audit: type=1400 audit(1790601213.337:625): avc:  denied  { name_bind } for  pid=10226 comm="syz.1.2032" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  229.127581][   T29] audit: type=1400 audit(1790601213.337:626): avc:  denied  { node_bind } for  pid=10226 comm="syz.1.2032" saddr=fec0:ffff:ffff:ffff::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  229.138857][   T29] audit: type=1400 audit(1790601213.337:627): avc:  denied  { write } for  pid=10226 comm="syz.1.2032" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  229.194545][T10227] FAULT_INJECTION: forcing a failure.
[  229.194545][T10227] name failslab, interval 1, probability 0, space 0, times 0
[  229.194579][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.1.2032 Not tainted syzkaller #0 PREEMPT(lazy) 
[  229.194609][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.194624][T10227] Call Trace:
[  229.194631][T10227]  <TASK>
[  229.194640][T10227]  __dump_stack+0x1d/0x30
[  229.194720][T10227]  dump_stack_lvl+0x95/0xd0
[  229.194771][T10227]  dump_stack+0x15/0x1b
[  229.194794][T10227]  should_fail_ex+0x262/0x280
[  229.194824][T10227]  ? io_uring_alloc_task_context+0x4c/0x350
[  229.194886][T10227]  should_failslab+0x8c/0xb0
[  229.194924][T10227]  __kmalloc_cache_noprof+0x7a/0x400
[  229.195032][T10227]  ? errseq_sample+0x2f/0x40
[  229.195132][T10227]  ? io_uring_alloc_task_context+0x4c/0x350
[  229.195238][T10227]  io_uring_alloc_task_context+0x4c/0x350
[  229.195303][T10227]  __io_uring_add_tctx_node+0x2b9/0x3b0
[  229.195381][T10227]  io_uring_create+0x3e1/0x4f0
[  229.195416][T10227]  __se_sys_io_uring_setup+0x1cb/0x1e0
[  229.195459][T10227]  __x64_sys_io_uring_setup+0x31/0x40
[  229.195551][T10227]  x64_sys_call+0x1fbf/0x2550
[  229.195581][T10227]  do_syscall_64+0x112/0x360
[  229.195649][T10227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.195675][T10227] RIP: 0033:0x7f29315fe159
[  229.195831][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.195852][T10227] RSP: 002b:00007f2930056fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  229.195875][T10227] RAX: ffffffffffffffda RBX: 00002000000004c0 RCX: 00007f29315fe159
[  229.195891][T10227] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000004504
[  229.195906][T10227] RBP: 00007f293169506b R08: 0000000000000000 R09: 0000000000000000
[  229.195927][T10227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  229.195941][T10227] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc44edc788
[  229.195996][T10227]  </TASK>
[  229.231713][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  229.232031][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  229.232492][ T3305] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  229.232681][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  229.232884][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  229.233103][ T3305] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  229.233326][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  229.233522][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  229.233979][ T3305] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  229.234238][ T3305] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  229.365484][T10235] FAULT_INJECTION: forcing a failure.
[  229.365484][T10235] name failslab, interval 1, probability 0, space 0, times 0
[  229.365514][T10235] CPU: 0 UID: 0 PID: 10235 Comm: syz.5.2033 Not tainted syzkaller #0 PREEMPT(lazy) 
[  229.365542][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.365557][T10235] Call Trace:
[  229.365565][T10235]  <TASK>
[  229.365574][T10235]  __dump_stack+0x1d/0x30
[  229.365602][T10235]  dump_stack_lvl+0x95/0xd0
[  229.365641][T10235]  dump_stack+0x15/0x1b
[  229.365665][T10235]  should_fail_ex+0x262/0x280
[  229.365695][T10235]  ? fsnotify_alloc_group+0x5a/0x160
[  229.365724][T10235]  should_failslab+0x8c/0xb0
[  229.365829][T10235]  __kmalloc_cache_noprof+0x7a/0x400
[  229.365867][T10235]  ? fsnotify_alloc_group+0x5a/0x160
[  229.365963][T10235]  fsnotify_alloc_group+0x5a/0x160
[  229.365991][T10235]  do_inotify_init+0x58/0x280
[  229.366074][T10235]  __x64_sys_inotify_init1+0x1e/0x30
[  229.366107][T10235]  x64_sys_call+0x188d/0x2550
[  229.366199][T10235]  do_syscall_64+0x112/0x360
[  229.366226][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.366252][T10235] RIP: 0033:0x7f3aa940e159
[  229.366270][T10235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.366290][T10235] RSP: 002b:00007f3aa7e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  229.366390][T10235] RAX: ffffffffffffffda RBX: 00007f3aa9696090 RCX: 00007f3aa940e159
[  229.366408][T10235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  229.366423][T10235] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  229.366439][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.366452][T10235] R13: 00007f3aa9696128 R14: 00007f3aa9696090 R15: 00007fffc613d1b8
[  229.366471][T10235]  </TASK>
[  229.473091][T10237] device-mapper: dirty region log: invalid region size 1024
[  229.473116][T10237] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  229.473229][T10237] device-mapper: ioctl: error adding target to table
[  229.556325][T10237] cgroup: Need name or subsystem set
[  229.831602][T10244] syz_tun: entered allmulticast mode
[  230.014003][T10242] syz_tun: left allmulticast mode
[  230.025047][ T5339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.074724][ T5339] syz_tun (unregistering): left allmulticast mode
[  230.135468][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.293657][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.354282][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.383859][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.609308][   T12] bridge_slave_1: left allmulticast mode
[  230.609331][   T12] bridge_slave_1: left promiscuous mode
[  230.609635][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.630633][   T12] bridge_slave_0: left allmulticast mode
[  230.630665][   T12] bridge_slave_0: left promiscuous mode
[  230.642802][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.706526][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.706619][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.729576][   T12] bond3 (unregistering): (slave gretap1): Releasing active interface
[  230.740933][   T12] bond9 (unregistering): (slave gretap2): Releasing active interface
[  230.742963][   T12] bond11 (unregistering): (slave gretap3): Releasing active interface
[  230.744594][   T12] bond12 (unregistering): (slave gretap4): Releasing active interface
[  230.746283][   T12] bond19 (unregistering): (slave gretap5): Releasing backup interface
[  230.767726][   T12] team0: Port device bridge0 removed
[  230.774198][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.774903][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.775251][   T12] bond0 (unregistering): Released all slaves
[  230.776729][   T12] bond1 (unregistering): Released all slaves
[  230.780577][   T12] bond2 (unregistering): Released all slaves
[  230.787249][   T12] bond3 (unregistering): Released all slaves
[  230.799710][   T12] bond4 (unregistering): Released all slaves
[  230.803915][   T12] bond5 (unregistering): Released all slaves
[  230.810249][   T12] bond6 (unregistering): Released all slaves
[  230.879100][   T12] bond7 (unregistering): Released all slaves
[  230.886380][   T12] bond8 (unregistering): Released all slaves
[  230.896078][   T12] bond9 (unregistering): Released all slaves
[  230.908932][   T12] bond10 (unregistering): Released all slaves
[  230.919713][   T12] bond11 (unregistering): Released all slaves
[  230.929960][   T12] bond12 (unregistering): Released all slaves
[  230.941977][   T12] bond13 (unregistering): Released all slaves
[  230.946535][   T12] bond14 (unregistering): Released all slaves
[  230.953943][   T12] bond15 (unregistering): Released all slaves
[  230.956608][   T12] bond16 (unregistering): Released all slaves
[  230.959276][   T12] bond17 (unregistering): Released all slaves
[  230.962532][   T12] bond18 (unregistering): Released all slaves
[  230.965109][   T12] bond19 (unregistering): Released all slaves
[  230.967782][   T12] bond20 (unregistering): Released all slaves
[  230.970207][   T12] bond21 (unregistering): Released all slaves
[  230.974506][   T12] bond22 (unregistering): Released all slaves
[  230.982971][   T12] bond23 (unregistering): Released all slaves
[  230.989010][   T12] bond24 (unregistering): Released all slaves
[  230.999641][   T12] bond25 (unregistering): Released all slaves
[  231.032669][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9
[  231.055162][T10293] syzkaller0: entered promiscuous mode
[  231.055529][T10293] syzkaller0: entered allmulticast mode
[  231.085622][   T12] IPVS: stopping backup sync thread 3730 ...
[  231.089851][   T12] hsr_slave_0: left promiscuous mode
[  231.090158][   T12] hsr_slave_1: left promiscuous mode
[  231.090530][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.092895][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.156450][   T12] team0 (unregistering): Port device veth1_to_hsr removed
[  231.171606][   T12] team0 (unregistering): Port device team_slave_1 removed
[  231.174121][   T12] team0 (unregistering): Port device team_slave_0 removed
[  231.290959][T10320] FAULT_INJECTION: forcing a failure.
[  231.290959][T10320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.290994][T10320] CPU: 1 UID: 0 PID: 10320 Comm: syz.3.2061 Not tainted syzkaller #0 PREEMPT(lazy) 
[  231.291018][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  231.291129][T10320] Call Trace:
[  231.291136][T10320]  <TASK>
[  231.291143][T10320]  __dump_stack+0x1d/0x30
[  231.291171][T10320]  dump_stack_lvl+0x95/0xd0
[  231.291199][T10320]  dump_stack+0x15/0x1b
[  231.291302][T10320]  should_fail_ex+0x262/0x280
[  231.291332][T10320]  should_fail+0xb/0x20
[  231.291356][T10320]  should_fail_usercopy+0x1a/0x20
[  231.291444][T10320]  _copy_from_user+0x1c/0xb0
[  231.291531][T10320]  get_user_ifreq+0x52/0x110
[  231.291558][T10320]  inet_ioctl+0x24f/0x3a0
[  231.291615][T10320]  sock_do_ioctl+0x73/0x230
[  231.291651][T10320]  sock_ioctl+0x439/0x610
[  231.291679][T10320]  ? __pfx_sock_ioctl+0x10/0x10
[  231.291744][T10320]  __se_sys_ioctl+0xce/0x140
[  231.291848][T10320]  __x64_sys_ioctl+0x43/0x50
[  231.291932][T10320]  x64_sys_call+0x239d/0x2550
[  231.291962][T10320]  do_syscall_64+0x112/0x360
[  231.291996][T10320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.292070][T10320] RIP: 0033:0x7f9d6d18e159
[  231.292090][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.292112][T10320] RSP: 002b:00007f9d6bbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.292180][T10320] RAX: ffffffffffffffda RBX: 00007f9d6d415fa0 RCX: 00007f9d6d18e159
[  231.292198][T10320] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  231.292214][T10320] RBP: 00007f9d6d22506b R08: 0000000000000000 R09: 0000000000000000
[  231.292230][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.292272][T10320] R13: 00007f9d6d416038 R14: 00007f9d6d415fa0 R15: 00007ffe97713078
[  231.292295][T10320]  </TASK>
[  231.324698][T10320] Invalid argument reading file caps for ./file0
[  231.330485][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'.
[  231.393538][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  231.393551][   T29] audit: type=1400 audit(1790601215.607:749): avc:  denied  { write } for  pid=10317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  231.445297][   T29] audit: type=1400 audit(1790601215.657:750): avc:  denied  { write } for  pid=10336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  231.483106][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10
[  231.498737][T10321] syz_tun: entered allmulticast mode
[  231.561825][T10346] loop3: detected capacity change from 0 to 128
[  231.562068][T10346] msdos: Unknown parameter '01777777777777777777777'
[  231.727387][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2055'.
[  231.730899][   T29] audit: type=1400 audit(1790601215.937:751): avc:  denied  { write } for  pid=10350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  231.784301][T10276] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.784383][T10276] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.784459][T10276] bridge_slave_0: entered allmulticast mode
[  231.784937][T10276] bridge_slave_0: entered promiscuous mode
[  231.811911][T10276] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.811948][T10276] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.812052][T10276] bridge_slave_1: entered allmulticast mode
[  231.812623][T10276] bridge_slave_1: entered promiscuous mode
[  231.849182][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.850184][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.891930][T10319] syz_tun: left allmulticast mode
[  231.903564][T10276] team0: Port device team_slave_0 added
[  231.904559][T10276] team0: Port device team_slave_1 added
[  231.913431][   T29] audit: type=1400 audit(1790601216.127:752): avc:  denied  { write } for  pid=10374 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  232.206422][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11
[  232.424632][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.424649][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.424675][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.426398][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.426410][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.426448][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.553117][T10384] loop3: detected capacity change from 0 to 512
[  232.556069][T10384] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  232.556140][T10384] EXT4-fs (loop3): orphan cleanup on readonly fs
[  232.556159][T10384] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2062: bad orphan inode 15
[  232.556218][T10384] fserror_report: 1 callbacks suppressed
[  232.556241][T10384] loop3: lost filesystem error report for type 5 error -117
[  232.556325][T10384] ext4_test_bit(bit=14, block=5) = 0
[  232.566269][T10276] hsr_slave_0: entered promiscuous mode
[  232.566732][T10276] hsr_slave_1: entered promiscuous mode
[  232.566970][T10276] debugfs: 'hsr0' already exists in 'hsr'
[  232.566983][T10276] Cannot create hsr debugfs directory
[  232.622714][T10384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  232.636008][T10384] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  232.720230][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'.
[  232.786618][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.804058][T10276] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  232.807442][T10276] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  232.808270][T10276] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  232.834260][T10276] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  232.836357][T10276] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  232.853810][T10276] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  232.854284][T10276] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  232.856804][   T29] audit: type=1400 audit(1790601217.069:753): avc:  denied  { watch watch_reads } for  pid=10398 comm="syz.5.2064" path="/382/file1" dev="tmpfs" ino=2171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  232.857498][T10276] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  232.951749][T10276] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.984121][   T29] audit: type=1400 audit(1790601217.193:754): avc:  denied  { write } for  pid=10392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  232.988961][T10276] 8021q: adding VLAN 0 to HW filter on device team0
[  233.007077][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.007112][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.018312][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.018363][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.132515][T10276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.204080][   T29] audit: type=1400 audit(1790601217.420:755): avc:  denied  { write } for  pid=10423 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.244293][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.244424][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.266945][T10429] syzkaller0: entered promiscuous mode
[  233.266964][T10429] syzkaller0: entered allmulticast mode
[  233.268820][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12
[  233.375470][T10276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.878318][   T12] tipc: Subscription rejected, illegal request
[  234.019669][   T29] audit: type=1400 audit(1790601218.265:756): avc:  denied  { write } for  pid=10430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.097205][   T29] audit: type=1400 audit(1790601218.347:757): avc:  denied  { write } for  pid=10469 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.108986][T10471] loop3: detected capacity change from 0 to 1024
[  234.109374][T10471] EXT4-fs: Ignoring removed orlov option
[  234.113078][T10471] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  234.129836][T10471] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  234.129987][T10471] EXT4-fs (loop3): orphan cleanup on readonly fs
[  234.134247][T10471] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.2073: Invalid inode table block 0 in block_group 0
[  234.134340][T10471] loop3: lost filesystem error report for type 5 error -117
[  234.134403][T10471] EXT4-fs (loop3): Remounting filesystem read-only
[  234.134419][T10471] Quota error (device loop3): write_blk: dquota write failed
[  234.134523][T10471] EXT4-fs (loop3): 1 truncate cleaned up
[  234.136290][T10471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  234.204718][T10276] veth0_vlan: entered promiscuous mode
[  234.207146][T10276] veth1_vlan: entered promiscuous mode
[  234.217218][T10276] veth0_macvtap: entered promiscuous mode
[  234.218731][T10276] veth1_macvtap: entered promiscuous mode
[  234.223768][T10276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.228137][T10276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.253021][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2072'.
[  234.353346][  T321] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.353384][  T321] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.353427][  T321] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.353458][  T321] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.362305][T10486] loop4: detected capacity change from 0 to 128
[  234.362720][T10486] msdos: Unknown parameter '01777777777777777777777'
[  234.883804][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.123305][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.123459][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.148426][T10553] syzkaller0: entered promiscuous mode
[  235.148445][T10553] syzkaller0: entered allmulticast mode
[  235.519958][T10571] netlink: 'syz.6.2085': attribute type 10 has an invalid length.
[  235.519992][T10571] team0: Device veth1_to_hsr is up. Set it down before adding it as a team port
[  235.650431][T10581] loop4: detected capacity change from 0 to 1024
[  235.652284][T10581] EXT4-fs: inline encryption not supported
[  235.652305][T10581] EXT4-fs: inline encryption not supported
[  235.652334][T10581] EXT4-fs: Ignoring removed nomblk_io_submit option
[  235.655023][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.657876][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.764054][T10581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  235.764139][T10581] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.052210][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  236.254174][T10592] syzkaller0: entered promiscuous mode
[  236.254195][T10592] syzkaller0: entered allmulticast mode
[  236.352414][T10603] FAULT_INJECTION: forcing a failure.
[  236.352414][T10603] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.352515][T10603] CPU: 0 UID: 0 PID: 10603 Comm: syz.3.2093 Not tainted syzkaller #0 PREEMPT(lazy) 
[  236.352542][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.352557][T10603] Call Trace:
[  236.352565][T10603]  <TASK>
[  236.352574][T10603]  __dump_stack+0x1d/0x30
[  236.352604][T10603]  dump_stack_lvl+0x95/0xd0
[  236.352707][T10603]  dump_stack+0x15/0x1b
[  236.352836][T10603]  should_fail_ex+0x262/0x280
[  236.352868][T10603]  should_fail+0xb/0x20
[  236.352895][T10603]  should_fail_usercopy+0x1a/0x20
[  236.352978][T10603]  _copy_from_user+0x1c/0xb0
[  236.353084][T10603]  get_user_ifreq+0x52/0x110
[  236.353111][T10603]  inet_ioctl+0x24f/0x3a0
[  236.353151][T10603]  sock_do_ioctl+0x73/0x230
[  236.353246][T10603]  sock_ioctl+0x439/0x610
[  236.353287][T10603]  ? __pfx_sock_ioctl+0x10/0x10
[  236.353427][T10603]  __se_sys_ioctl+0xce/0x140
[  236.353466][T10603]  __x64_sys_ioctl+0x43/0x50
[  236.353498][T10603]  x64_sys_call+0x239d/0x2550
[  236.353567][T10603]  do_syscall_64+0x112/0x360
[  236.353642][T10603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.353669][T10603] RIP: 0033:0x7f9d6d18e159
[  236.353765][T10603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.353789][T10603] RSP: 002b:00007f9d6bbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  236.353814][T10603] RAX: ffffffffffffffda RBX: 00007f9d6d415fa0 RCX: 00007f9d6d18e159
[  236.353832][T10603] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  236.353845][T10603] RBP: 00007f9d6d22506b R08: 0000000000000000 R09: 0000000000000000
[  236.353860][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.353875][T10603] R13: 00007f9d6d416038 R14: 00007f9d6d415fa0 R15: 00007ffe97713078
[  236.353940][T10603]  </TASK>
[  236.355299][T10603] Invalid argument reading file caps for ./file0
[  236.355743][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'.
[  236.951387][T10616] FAULT_INJECTION: forcing a failure.
[  236.951387][T10616] name failslab, interval 1, probability 0, space 0, times 0
[  236.951511][T10616] CPU: 0 UID: 0 PID: 10616 Comm: syz.7.2097 Not tainted syzkaller #0 PREEMPT(lazy) 
[  236.951568][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.951584][T10616] Call Trace:
[  236.951591][T10616]  <TASK>
[  236.951643][T10616]  __dump_stack+0x1d/0x30
[  236.951673][T10616]  dump_stack_lvl+0x95/0xd0
[  236.951739][T10616]  dump_stack+0x15/0x1b
[  236.951814][T10616]  should_fail_ex+0x262/0x280
[  236.951845][T10616]  ? do_inotify_init+0x91/0x280
[  236.951914][T10616]  should_failslab+0x8c/0xb0
[  236.952091][T10616]  __kmalloc_cache_noprof+0x7a/0x400
[  236.952125][T10616]  ? do_inotify_init+0x91/0x280
[  236.952158][T10616]  ? mutex_init_generic+0x3e/0x50
[  236.952269][T10616]  do_inotify_init+0x91/0x280
[  236.952301][T10616]  __x64_sys_inotify_init1+0x1e/0x30
[  236.952330][T10616]  x64_sys_call+0x188d/0x2550
[  236.952414][T10616]  do_syscall_64+0x112/0x360
[  236.952438][T10616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.952461][T10616] RIP: 0033:0x7ff83f39e159
[  236.952477][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.952495][T10616] RSP: 002b:00007ff83ddf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  236.952519][T10616] RAX: ffffffffffffffda RBX: 00007ff83f625fa0 RCX: 00007ff83f39e159
[  236.952560][T10616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  236.952576][T10616] RBP: 00007ff83f43506b R08: 0000000000000000 R09: 0000000000000000
[  236.952593][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.952609][T10616] R13: 00007ff83f626038 R14: 00007ff83f625fa0 R15: 00007ffe53bc03a8
[  236.952652][T10616]  </TASK>
[  237.398936][T10637] FAULT_INJECTION: forcing a failure.
[  237.398936][T10637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.398971][T10637] CPU: 1 UID: 0 PID: 10637 Comm: syz.6.2105 Not tainted syzkaller #0 PREEMPT(lazy) 
[  237.398999][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  237.399012][T10637] Call Trace:
[  237.399052][T10637]  <TASK>
[  237.399067][T10637]  __dump_stack+0x1d/0x30
[  237.399123][T10637]  dump_stack_lvl+0x95/0xd0
[  237.399144][T10637]  dump_stack+0x15/0x1b
[  237.399170][T10637]  should_fail_ex+0x262/0x280
[  237.399215][T10637]  should_fail+0xb/0x20
[  237.399316][T10637]  should_fail_usercopy+0x1a/0x20
[  237.399344][T10637]  _copy_from_user+0x1c/0xb0
[  237.399374][T10637]  get_user_ifreq+0x52/0x110
[  237.399461][T10637]  inet_ioctl+0x24f/0x3a0
[  237.399495][T10637]  sock_do_ioctl+0x73/0x230
[  237.399534][T10637]  sock_ioctl+0x439/0x610
[  237.399563][T10637]  ? __pfx_sock_ioctl+0x10/0x10
[  237.399673][T10637]  __se_sys_ioctl+0xce/0x140
[  237.399706][T10637]  __x64_sys_ioctl+0x43/0x50
[  237.399741][T10637]  x64_sys_call+0x239d/0x2550
[  237.399770][T10637]  do_syscall_64+0x112/0x360
[  237.399846][T10637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.399868][T10637] RIP: 0033:0x7f6c8810e159
[  237.399884][T10637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.399944][T10637] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.399969][T10637] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  237.399986][T10637] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  237.400002][T10637] RBP: 00007f6c881a506b R08: 0000000000000000 R09: 0000000000000000
[  237.400019][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.400035][T10637] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  237.400169][T10637]  </TASK>
[  237.413510][T10637] Invalid argument reading file caps for ./file0
[  237.413980][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2105'.
[  237.585646][T10634] netlink: 'syz.3.2102': attribute type 10 has an invalid length.
[  237.585676][T10634] team0: Device veth1_to_hsr is up. Set it down before adding it as a team port
[  237.677611][T10639] loop4: detected capacity change from 0 to 256
[  237.793443][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  237.793467][   T29] audit: type=1400 audit(1790601222.104:774): avc:  denied  { read } for  pid=10646 comm="syz.7.2108" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  237.793495][   T29] audit: type=1400 audit(1790601222.104:775): avc:  denied  { open } for  pid=10646 comm="syz.7.2108" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  237.793523][   T29] audit: type=1400 audit(1790601222.114:776): avc:  denied  { create } for  pid=10646 comm="syz.7.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  237.793555][   T29] audit: type=1400 audit(1790601222.114:777): avc:  denied  { read } for  pid=10646 comm="syz.7.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  238.323991][   T29] audit: type=1400 audit(1790601222.687:778): avc:  denied  { setopt } for  pid=10669 comm="syz.4.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  238.327676][   T29] audit: type=1400 audit(1790601222.687:779): avc:  denied  { listen } for  pid=10669 comm="syz.4.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  238.567223][T10678] FAULT_INJECTION: forcing a failure.
[  238.567223][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.567308][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.6.2118 Not tainted syzkaller #0 PREEMPT(lazy) 
[  238.567338][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  238.567354][T10678] Call Trace:
[  238.567438][T10678]  <TASK>
[  238.567446][T10678]  __dump_stack+0x1d/0x30
[  238.567470][T10678]  dump_stack_lvl+0x95/0xd0
[  238.567506][T10678]  dump_stack+0x15/0x1b
[  238.567532][T10678]  should_fail_ex+0x262/0x280
[  238.567564][T10678]  should_fail+0xb/0x20
[  238.567637][T10678]  should_fail_usercopy+0x1a/0x20
[  238.567672][T10678]  _copy_from_user+0x1c/0xb0
[  238.567708][T10678]  get_user_ifreq+0x52/0x110
[  238.567740][T10678]  inet_ioctl+0x24f/0x3a0
[  238.567797][T10678]  sock_do_ioctl+0x73/0x230
[  238.567827][T10678]  sock_ioctl+0x439/0x610
[  238.567860][T10678]  ? __pfx_sock_ioctl+0x10/0x10
[  238.567922][T10678]  __se_sys_ioctl+0xce/0x140
[  238.568029][T10678]  __x64_sys_ioctl+0x43/0x50
[  238.568065][T10678]  x64_sys_call+0x239d/0x2550
[  238.568097][T10678]  do_syscall_64+0x112/0x360
[  238.568126][T10678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.568178][T10678] RIP: 0033:0x7f6c8810e159
[  238.568197][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.568218][T10678] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.568253][T10678] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  238.568270][T10678] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  238.568286][T10678] RBP: 00007f6c881a506b R08: 0000000000000000 R09: 0000000000000000
[  238.568302][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.568372][T10678] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  238.568395][T10678]  </TASK>
[  238.605499][T10678] Invalid argument reading file caps for ./file0
[  238.611546][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'.
[  238.640263][   T29] audit: type=1400 audit(1790601223.004:780): avc:  denied  { bind } for  pid=10680 comm="syz.3.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  238.779892][   T29] audit: type=1400 audit(1790601223.147:781): avc:  denied  { create } for  pid=10682 comm="syz.6.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  238.795238][   T29] audit: type=1400 audit(1790601223.168:782): avc:  denied  { read } for  pid=10682 comm="syz.6.2120" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  238.795269][   T29] audit: type=1400 audit(1790601223.168:783): avc:  denied  { open } for  pid=10682 comm="syz.6.2120" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  238.841379][T10681] loop3: detected capacity change from 0 to 128
[  239.520109][T10696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.522738][T10696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.553650][T10696] syzkaller0: entered promiscuous mode
[  239.553701][T10696] syzkaller0: entered allmulticast mode
[  239.696494][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2125'.
[  239.867152][T10713] syzkaller0: entered promiscuous mode
[  239.867173][T10713] syzkaller0: entered allmulticast mode
[  239.967810][T10715] loop7: detected capacity change from 0 to 8192
[  239.968415][T10715] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.050528][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2135'.
[  240.302866][T10739] FAULT_INJECTION: forcing a failure.
[  240.302866][T10739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.302903][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.5.2140 Not tainted syzkaller #0 PREEMPT(lazy) 
[  240.303027][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.303040][T10739] Call Trace:
[  240.303047][T10739]  <TASK>
[  240.303056][T10739]  __dump_stack+0x1d/0x30
[  240.303086][T10739]  dump_stack_lvl+0x95/0xd0
[  240.303181][T10739]  dump_stack+0x15/0x1b
[  240.303205][T10739]  should_fail_ex+0x262/0x280
[  240.303270][T10739]  should_fail+0xb/0x20
[  240.303298][T10739]  should_fail_usercopy+0x1a/0x20
[  240.303409][T10739]  _copy_from_user+0x1c/0xb0
[  240.303441][T10739]  get_user_ifreq+0x52/0x110
[  240.303551][T10739]  inet_ioctl+0x24f/0x3a0
[  240.303589][T10739]  sock_do_ioctl+0x73/0x230
[  240.303723][T10739]  sock_ioctl+0x439/0x610
[  240.303819][T10739]  ? __pfx_sock_ioctl+0x10/0x10
[  240.303853][T10739]  __se_sys_ioctl+0xce/0x140
[  240.303958][T10739]  __x64_sys_ioctl+0x43/0x50
[  240.304056][T10739]  x64_sys_call+0x239d/0x2550
[  240.304089][T10739]  do_syscall_64+0x112/0x360
[  240.304117][T10739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.304169][T10739] RIP: 0033:0x7f3aa940e159
[  240.304184][T10739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.304202][T10739] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  240.304225][T10739] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  240.304243][T10739] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  240.304320][T10739] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  240.304377][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.304393][T10739] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  240.304416][T10739]  </TASK>
[  240.306978][T10739] Invalid argument reading file caps for ./file0
[  240.307628][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2140'.
[  240.666223][T10747] bridge0: port 3(syz_tun) entered blocking state
[  240.666284][T10747] bridge0: port 3(syz_tun) entered disabled state
[  240.666427][T10747] syz_tun: entered allmulticast mode
[  240.666902][T10747] syz_tun: entered promiscuous mode
[  240.687321][T10747] bridge0: port 4(ip6gretap0) entered blocking state
[  240.687355][T10747] bridge0: port 4(ip6gretap0) entered disabled state
[  240.687649][T10747] ip6gretap0: entered allmulticast mode
[  240.692643][T10747] ip6gretap0: entered promiscuous mode
[  241.112752][T10757] loop7: detected capacity change from 0 to 128
[  241.121151][T10757] msdos: Unknown parameter '01777777777777777777777'
[  241.139953][T10757] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.140110][T10757] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.216438][T10762] FAULT_INJECTION: forcing a failure.
[  241.216438][T10762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.216479][T10762] CPU: 0 UID: 0 PID: 10762 Comm: syz.4.2148 Not tainted syzkaller #0 PREEMPT(lazy) 
[  241.216546][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  241.216558][T10762] Call Trace:
[  241.216564][T10762]  <TASK>
[  241.216572][T10762]  __dump_stack+0x1d/0x30
[  241.216674][T10762]  dump_stack_lvl+0x95/0xd0
[  241.216699][T10762]  dump_stack+0x15/0x1b
[  241.216721][T10762]  should_fail_ex+0x262/0x280
[  241.216752][T10762]  should_fail+0xb/0x20
[  241.216774][T10762]  should_fail_usercopy+0x1a/0x20
[  241.216885][T10762]  _copy_from_user+0x1c/0xb0
[  241.216922][T10762]  get_user_ifreq+0x52/0x110
[  241.216955][T10762]  inet_ioctl+0x24f/0x3a0
[  241.217014][T10762]  sock_do_ioctl+0x73/0x230
[  241.217048][T10762]  sock_ioctl+0x439/0x610
[  241.217094][T10762]  ? __pfx_sock_ioctl+0x10/0x10
[  241.217120][T10762]  __se_sys_ioctl+0xce/0x140
[  241.217212][T10762]  __x64_sys_ioctl+0x43/0x50
[  241.217265][T10762]  x64_sys_call+0x239d/0x2550
[  241.217368][T10762]  do_syscall_64+0x112/0x360
[  241.217411][T10762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.217433][T10762] RIP: 0033:0x7f0c9031e159
[  241.217452][T10762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.217472][T10762] RSP: 002b:00007f0c8ed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.217566][T10762] RAX: ffffffffffffffda RBX: 00007f0c905a5fa0 RCX: 00007f0c9031e159
[  241.217584][T10762] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  241.217600][T10762] RBP: 00007f0c903b506b R08: 0000000000000000 R09: 0000000000000000
[  241.217708][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.217723][T10762] R13: 00007f0c905a6038 R14: 00007f0c905a5fa0 R15: 00007ffecdea5118
[  241.217741][T10762]  </TASK>
[  241.268601][T10762] Invalid argument reading file caps for ./file0
[  241.282087][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'.
[  241.442969][T10765] loop6: detected capacity change from 0 to 8192
[  241.502064][T10765] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2149'.
[  241.502104][T10765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  241.609891][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2153'.
[  241.626437][T10779] loop6: detected capacity change from 0 to 128
[  241.626738][T10779] msdos: Unknown parameter '01777777777777777777777'
[  241.632615][T10779] team0: Port device bridge0 added
[  242.100351][T10791] FAULT_INJECTION: forcing a failure.
[  242.100351][T10791] name failslab, interval 1, probability 0, space 0, times 0
[  242.100399][T10791] CPU: 1 UID: 0 PID: 10791 Comm: syz.5.2156 Not tainted syzkaller #0 PREEMPT(lazy) 
[  242.100451][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  242.100505][T10791] Call Trace:
[  242.100512][T10791]  <TASK>
[  242.100519][T10791]  __dump_stack+0x1d/0x30
[  242.100543][T10791]  dump_stack_lvl+0x95/0xd0
[  242.100568][T10791]  dump_stack+0x15/0x1b
[  242.100646][T10791]  should_fail_ex+0x262/0x280
[  242.100672][T10791]  ? do_inotify_init+0x91/0x280
[  242.100702][T10791]  should_failslab+0x8c/0xb0
[  242.100774][T10791]  __kmalloc_cache_noprof+0x7a/0x400
[  242.100816][T10791]  ? do_inotify_init+0x91/0x280
[  242.100853][T10791]  ? mutex_init_generic+0x3e/0x50
[  242.100887][T10791]  do_inotify_init+0x91/0x280
[  242.100917][T10791]  __x64_sys_inotify_init1+0x1e/0x30
[  242.100946][T10791]  x64_sys_call+0x188d/0x2550
[  242.101054][T10791]  do_syscall_64+0x112/0x360
[  242.101082][T10791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.101156][T10791] RIP: 0033:0x7f3aa940e159
[  242.101175][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.101194][T10791] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  242.101214][T10791] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  242.101231][T10791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  242.101321][T10791] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  242.101334][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.101350][T10791] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  242.101373][T10791]  </TASK>
[  242.324064][T10801] loop3: detected capacity change from 0 to 164
[  242.413016][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'.
[  242.570714][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2161'.
[  243.131062][T10822] FAULT_INJECTION: forcing a failure.
[  243.131062][T10822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.131098][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.5.2166 Not tainted syzkaller #0 PREEMPT(lazy) 
[  243.131123][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.131137][T10822] Call Trace:
[  243.131145][T10822]  <TASK>
[  243.131154][T10822]  __dump_stack+0x1d/0x30
[  243.131179][T10822]  dump_stack_lvl+0x95/0xd0
[  243.131240][T10822]  dump_stack+0x15/0x1b
[  243.131266][T10822]  should_fail_ex+0x262/0x280
[  243.131294][T10822]  should_fail+0xb/0x20
[  243.131317][T10822]  should_fail_usercopy+0x1a/0x20
[  243.131399][T10822]  _copy_from_user+0x1c/0xb0
[  243.131434][T10822]  get_user_ifreq+0x52/0x110
[  243.131464][T10822]  inet_ioctl+0x24f/0x3a0
[  243.131504][T10822]  sock_do_ioctl+0x73/0x230
[  243.131601][T10822]  sock_ioctl+0x439/0x610
[  243.131636][T10822]  ? __pfx_sock_ioctl+0x10/0x10
[  243.131676][T10822]  __se_sys_ioctl+0xce/0x140
[  243.131741][T10822]  __x64_sys_ioctl+0x43/0x50
[  243.131773][T10822]  x64_sys_call+0x239d/0x2550
[  243.131844][T10822]  do_syscall_64+0x112/0x360
[  243.131872][T10822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.131907][T10822] RIP: 0033:0x7f3aa940e159
[  243.131927][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.131952][T10822] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  243.131972][T10822] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  243.131987][T10822] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  243.131999][T10822] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  243.132052][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.132068][T10822] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  243.132090][T10822]  </TASK>
[  243.133457][T10822] Invalid argument reading file caps for ./file0
[  243.133906][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2166'.
[  243.389221][T10827] cgroup: Need name or subsystem set
[  243.607358][T10839] FAULT_INJECTION: forcing a failure.
[  243.607358][T10839] name failslab, interval 1, probability 0, space 0, times 0
[  243.607397][T10839] CPU: 1 UID: 0 PID: 10839 Comm: syz.6.2173 Not tainted syzkaller #0 PREEMPT(lazy) 
[  243.607424][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.607437][T10839] Call Trace:
[  243.607523][T10839]  <TASK>
[  243.607531][T10839]  __dump_stack+0x1d/0x30
[  243.607559][T10839]  dump_stack_lvl+0x95/0xd0
[  243.607620][T10839]  dump_stack+0x15/0x1b
[  243.607644][T10839]  should_fail_ex+0x262/0x280
[  243.607672][T10839]  ? ioctx_alloc+0xe3/0x480
[  243.607709][T10839]  should_failslab+0x8c/0xb0
[  243.607785][T10839]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  243.607822][T10839]  ? ioctx_alloc+0xe3/0x480
[  243.607890][T10839]  ioctx_alloc+0xe3/0x480
[  243.607932][T10839]  __se_sys_io_setup+0x6b/0x1b0
[  243.607964][T10839]  __x64_sys_io_setup+0x31/0x40
[  243.607995][T10839]  x64_sys_call+0x1a9f/0x2550
[  243.608101][T10839]  do_syscall_64+0x112/0x360
[  243.608130][T10839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.608156][T10839] RIP: 0033:0x7f6c8810e159
[  243.608208][T10839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.608230][T10839] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  243.608251][T10839] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  243.608268][T10839] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008
[  243.608283][T10839] RBP: 00007f6c86b67090 R08: 0000000000000000 R09: 0000000000000000
[  243.608354][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.608369][T10839] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  243.608468][T10839]  </TASK>
[  243.684317][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.687451][T10840] FAULT_INJECTION: forcing a failure.
[  243.687451][T10840] name failslab, interval 1, probability 0, space 0, times 0
[  243.687563][T10840] CPU: 0 UID: 0 PID: 10840 Comm: syz.3.2171 Not tainted syzkaller #0 PREEMPT(lazy) 
[  243.687638][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.687652][T10840] Call Trace:
[  243.687662][T10840]  <TASK>
[  243.687672][T10840]  __dump_stack+0x1d/0x30
[  243.687701][T10840]  dump_stack_lvl+0x95/0xd0
[  243.687788][T10840]  dump_stack+0x15/0x1b
[  243.687808][T10840]  should_fail_ex+0x262/0x280
[  243.687834][T10840]  ? fsnotify_alloc_group+0x5a/0x160
[  243.687859][T10840]  should_failslab+0x8c/0xb0
[  243.687969][T10840]  __kmalloc_cache_noprof+0x7a/0x400
[  243.688006][T10840]  ? fsnotify_alloc_group+0x5a/0x160
[  243.688037][T10840]  fsnotify_alloc_group+0x5a/0x160
[  243.688122][T10840]  do_inotify_init+0x58/0x280
[  243.688194][T10840]  __x64_sys_inotify_init1+0x1e/0x30
[  243.688227][T10840]  x64_sys_call+0x188d/0x2550
[  243.688257][T10840]  do_syscall_64+0x112/0x360
[  243.688336][T10840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.688362][T10840] RIP: 0033:0x7f9d6d18e159
[  243.688380][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.688401][T10840] RSP: 002b:00007f9d6bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  243.688423][T10840] RAX: ffffffffffffffda RBX: 00007f9d6d416090 RCX: 00007f9d6d18e159
[  243.688459][T10840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  243.688473][T10840] RBP: 00007f9d6d22506b R08: 0000000000000000 R09: 0000000000000000
[  243.688536][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.688551][T10840] R13: 00007f9d6d416128 R14: 00007f9d6d416090 R15: 00007ffe97713078
[  243.688634][T10840]  </TASK>
[  243.694578][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.897532][T10837] syzkaller0: entered promiscuous mode
[  243.897613][T10837] syzkaller0: entered allmulticast mode
[  244.209516][T10847] netlink: 'syz.6.2175': attribute type 1 has an invalid length.
[  244.225828][T10847] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.330960][T10870] cgroup: Need name or subsystem set
[  245.357061][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  245.357078][   T29] audit: type=1400 audit(1790601229.845:790): avc:  denied  { write } for  pid=10866 comm="syz.7.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  245.357101][   T29] audit: type=1400 audit(1790601229.845:791): avc:  denied  { read } for  pid=10866 comm="syz.7.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  245.546236][T10874] netlink: 'syz.3.2184': attribute type 10 has an invalid length.
[  245.546271][T10874] team0: Device veth1_to_hsr is up. Set it down before adding it as a team port
[  245.909599][   T29] audit: type=1400 audit(1790601230.403:792): avc:  denied  { write } for  pid=10875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  245.974300][   T29] audit: type=1400 audit(1790601230.463:793): avc:  denied  { write } for  pid=10886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  246.996561][   T29] audit: type=1400 audit(1790601231.507:794): avc:  denied  { write } for  pid=10889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.034388][   T29] audit: type=1400 audit(1790601231.548:795): avc:  denied  { write } for  pid=10900 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.190844][   T29] audit: type=1400 audit(1790601231.700:796): avc:  denied  { write } for  pid=10903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.224113][   T29] audit: type=1400 audit(1790601231.730:797): avc:  denied  { write } for  pid=10914 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.346371][   T29] audit: type=1400 audit(1790601231.852:798): avc:  denied  { write } for  pid=10917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.379411][   T29] audit: type=1400 audit(1790601231.872:799): avc:  denied  { write } for  pid=10928 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.744163][T10934] loop7: detected capacity change from 0 to 128
[  247.746100][T10934] msdos: Unknown parameter '01777777777777777777777'
[  247.810551][T10938] FAULT_INJECTION: forcing a failure.
[  247.810551][T10938] name failslab, interval 1, probability 0, space 0, times 0
[  247.810737][T10938] CPU: 0 UID: 0 PID: 10938 Comm: syz.6.2187 Not tainted syzkaller #0 PREEMPT(lazy) 
[  247.810765][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.810779][T10938] Call Trace:
[  247.810786][T10938]  <TASK>
[  247.810793][T10938]  __dump_stack+0x1d/0x30
[  247.810865][T10938]  dump_stack_lvl+0x95/0xd0
[  247.810897][T10938]  dump_stack+0x15/0x1b
[  247.810919][T10938]  should_fail_ex+0x262/0x280
[  247.811010][T10938]  ? do_inotify_init+0x91/0x280
[  247.811039][T10938]  should_failslab+0x8c/0xb0
[  247.811124][T10938]  __kmalloc_cache_noprof+0x7a/0x400
[  247.811159][T10938]  ? do_inotify_init+0x91/0x280
[  247.811194][T10938]  ? mutex_init_generic+0x3e/0x50
[  247.811234][T10938]  do_inotify_init+0x91/0x280
[  247.811292][T10938]  __x64_sys_inotify_init1+0x1e/0x30
[  247.811328][T10938]  x64_sys_call+0x188d/0x2550
[  247.811371][T10938]  do_syscall_64+0x112/0x360
[  247.811395][T10938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.811417][T10938] RIP: 0033:0x7f6c8810e159
[  247.811434][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.811527][T10938] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  247.811612][T10938] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  247.811696][T10938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  247.811752][T10938] RBP: 00007f6c881a506b R08: 0000000000000000 R09: 0000000000000000
[  247.811767][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.811862][T10938] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  247.811895][T10938]  </TASK>
[  248.161739][T10958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.162488][T10958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.256046][T10965] cgroup: Need name or subsystem set
[  248.454224][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2193'.
[  248.492060][T10952] syzkaller0: entered promiscuous mode
[  248.492083][T10952] syzkaller0: entered allmulticast mode
[  248.867719][T10982] loop4: detected capacity change from 0 to 512
[  248.870925][T10982] EXT4-fs: Ignoring removed nobh option
[  249.014200][T10985] loop7: detected capacity change from 0 to 512
[  249.014630][T10985] EXT4-fs: Ignoring removed nobh option
[  249.015043][T10985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.041899][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2199: corrupted inode contents
[  249.041930][T10985] fserror_report: 8 callbacks suppressed
[  249.041970][T10985] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  249.042164][T10985] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #3: comm syz.7.2199: mark_inode_dirty error
[  249.042191][T10985] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  249.042682][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2199: corrupted inode contents
[  249.042710][T10985] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  249.042908][T10985] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.2199: mark_inode_dirty error
[  249.042950][T10985] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  249.043249][T10985] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.2199: Failed to acquire dquot type 0
[  249.043291][T10985] loop7: lost filesystem error report for type 5 error -117
[  249.043732][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2199: corrupted inode contents
[  249.043776][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.043949][T10985] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #16: comm syz.7.2199: mark_inode_dirty error
[  249.043977][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.044289][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2199: corrupted inode contents
[  249.044337][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.044594][T10985] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2199: mark_inode_dirty error
[  249.044635][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.044833][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2199: corrupted inode contents
[  249.044896][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.045087][T10985] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem
[  249.045139][T10985] loop7: lost filesystem error report for type 5 error -117
[  249.045346][T10985] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2199: corrupted inode contents
[  249.045445][T10985] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.045618][T10985] EXT4-fs error (device loop7): ext4_truncate:4721: inode #16: comm syz.7.2199: mark_inode_dirty error
[  249.045786][T10985] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem
[  249.045821][T10985] loop7: lost filesystem error report for type 5 error -117
[  249.045937][    C0] EXT4-fs (loop7): error count since last fsck: 14
[  249.045969][    C0] EXT4-fs (loop7): initial error at time 1790601233: ext4_do_update_inode:5801: inode 3
[  249.046004][    C0] EXT4-fs (loop7): last error at time 1790601233: ext4_process_orphan:346
[  249.088331][T10985] EXT4-fs (loop7): 1 truncate cleaned up
[  249.088695][T10985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.088807][T10985] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.389260][T10990] loop3: detected capacity change from 0 to 128
[  249.682322][T11003] FAULT_INJECTION: forcing a failure.
[  249.682322][T11003] name failslab, interval 1, probability 0, space 0, times 0
[  249.682414][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.3.2205 Not tainted syzkaller #0 PREEMPT(lazy) 
[  249.682440][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  249.682452][T11003] Call Trace:
[  249.682499][T11003]  <TASK>
[  249.682508][T11003]  __dump_stack+0x1d/0x30
[  249.682536][T11003]  dump_stack_lvl+0x95/0xd0
[  249.682563][T11003]  dump_stack+0x15/0x1b
[  249.682665][T11003]  should_fail_ex+0x262/0x280
[  249.682693][T11003]  ? fsnotify_alloc_group+0x5a/0x160
[  249.682721][T11003]  should_failslab+0x8c/0xb0
[  249.682762][T11003]  __kmalloc_cache_noprof+0x7a/0x400
[  249.682801][T11003]  ? fsnotify_alloc_group+0x5a/0x160
[  249.682827][T11003]  fsnotify_alloc_group+0x5a/0x160
[  249.682928][T11003]  do_inotify_init+0x58/0x280
[  249.682986][T11003]  __x64_sys_inotify_init1+0x1e/0x30
[  249.683020][T11003]  x64_sys_call+0x188d/0x2550
[  249.683051][T11003]  do_syscall_64+0x112/0x360
[  249.683153][T11003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.683210][T11003] RIP: 0033:0x7f9d6d18e159
[  249.683233][T11003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.683298][T11003] RSP: 002b:00007f9d6bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  249.683321][T11003] RAX: ffffffffffffffda RBX: 00007f9d6d416090 RCX: 00007f9d6d18e159
[  249.683372][T11003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  249.683397][T11003] RBP: 00007f9d6d22506b R08: 0000000000000000 R09: 0000000000000000
[  249.683411][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.683424][T11003] R13: 00007f9d6d416128 R14: 00007f9d6d416090 R15: 00007ffe97713078
[  249.683442][T11003]  </TASK>
[  249.905811][T11008] cgroup: Need name or subsystem set
[  249.926912][T10276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.109719][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.110429][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.176455][T11012] syzkaller0: entered promiscuous mode
[  250.176525][T11012] syzkaller0: entered allmulticast mode
[  250.464273][T11033] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  250.605589][T11043] cgroup: Need name or subsystem set
[  250.676030][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  250.676045][   T29] audit: type=1400 audit(1790601235.219:800): avc:  denied  { create } for  pid=11044 comm="syz.3.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  250.676379][   T29] audit: type=1400 audit(1790601235.219:801): avc:  denied  { write } for  pid=11044 comm="syz.3.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  250.748928][T11050] loop3: detected capacity change from 0 to 128
[  250.750959][T11050] msdos: Unknown parameter '01777777777777777777777'
[  250.775551][T11048] FAULT_INJECTION: forcing a failure.
[  250.775551][T11048] name failslab, interval 1, probability 0, space 0, times 0
[  250.775580][T11048] CPU: 0 UID: 0 PID: 11048 Comm: syz.5.2222 Not tainted syzkaller #0 PREEMPT(lazy) 
[  250.775608][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.775626][T11048] Call Trace:
[  250.775634][T11048]  <TASK>
[  250.775646][T11048]  __dump_stack+0x1d/0x30
[  250.775744][T11048]  dump_stack_lvl+0x95/0xd0
[  250.775782][T11048]  dump_stack+0x15/0x1b
[  250.775828][T11048]  should_fail_ex+0x262/0x280
[  250.775859][T11048]  ? do_inotify_init+0x91/0x280
[  250.775897][T11048]  should_failslab+0x8c/0xb0
[  250.776017][T11048]  __kmalloc_cache_noprof+0x7a/0x400
[  250.776075][T11048]  ? do_inotify_init+0x91/0x280
[  250.776106][T11048]  ? mutex_init_generic+0x3e/0x50
[  250.776142][T11048]  do_inotify_init+0x91/0x280
[  250.776247][T11048]  __x64_sys_inotify_init1+0x1e/0x30
[  250.776325][T11048]  x64_sys_call+0x188d/0x2550
[  250.776356][T11048]  do_syscall_64+0x112/0x360
[  250.776385][T11048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.776411][T11048] RIP: 0033:0x7f3aa940e159
[  250.776426][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.776445][T11048] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  250.776466][T11048] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  250.776484][T11048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  250.776572][T11048] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  250.776586][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.776598][T11048] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  250.776616][T11048]  </TASK>
[  251.074599][T11060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2225'.
[  251.169168][   T29] audit: type=1400 audit(1790601235.694:802): avc:  denied  { mount } for  pid=11063 comm="syz.6.2227" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  251.233190][T11071] netlink: 'syz.3.2230': attribute type 1 has an invalid length.
[  251.234371][   T29] audit: type=1400 audit(1790601235.795:803): avc:  denied  { read write } for  pid=11070 comm="syz.3.2230" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  251.234402][   T29] audit: type=1400 audit(1790601235.795:804): avc:  denied  { open } for  pid=11070 comm="syz.3.2230" path="/464/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  251.299133][T11073] Cannot find del_set index 2 as target
[  251.300082][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2228'.
[  251.325734][T11074] 8021q: adding VLAN 0 to HW filter on device bond2
[  251.375878][T11078] cgroup: Need name or subsystem set
[  251.467301][T11084] loop7: detected capacity change from 0 to 512
[  251.565136][T11084] loop7: detected capacity change from 0 to 128
[  251.627621][   T29] audit: type=1400 audit(1790601236.179:805): avc:  denied  { write } for  pid=11083 comm="syz.7.2234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  251.785452][T11083] syz.7.2234: attempt to access beyond end of device
[  251.785452][T11083] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128
[  251.928968][T11102] loop7: detected capacity change from 0 to 128
[  251.929244][T11102] msdos: Unknown parameter '01777777777777777777777'
[  251.956428][T11102] team0: Failed to send options change via netlink (err -105)
[  251.956451][T11102] team0: Port device bridge0 added
[  252.218622][T11109] cgroup: Need name or subsystem set
[  252.532109][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'.
[  252.532323][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'.
[  252.571084][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'.
[  252.605088][T11128] 8021q: adding VLAN 0 to HW filter on device bond28
[  252.635476][   T29] audit: type=1400 audit(1790601237.198:806): avc:  denied  { read } for  pid=11132 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  252.708823][T11142] cgroup: Need name or subsystem set
[  252.766373][T11145] loop4: detected capacity change from 0 to 128
[  252.768184][T11145] msdos: Unknown parameter '01777777777777777777777'
[  252.794619][T11145] team0: Failed to send options change via netlink (err -105)
[  252.794642][T11145] team0: Port device bridge0 added
[  253.012804][T11153] FAULT_INJECTION: forcing a failure.
[  253.012804][T11153] name fail_futex, interval 1, probability 0, space 0, times 0
[  253.012832][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.4.2258 Not tainted syzkaller #0 PREEMPT(lazy) 
[  253.012867][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.012886][T11153] Call Trace:
[  253.012894][T11153]  <TASK>
[  253.012901][T11153]  __dump_stack+0x1d/0x30
[  253.012925][T11153]  dump_stack_lvl+0x95/0xd0
[  253.012947][T11153]  dump_stack+0x15/0x1b
[  253.012986][T11153]  should_fail_ex+0x262/0x280
[  253.013019][T11153]  should_fail+0xb/0x20
[  253.013048][T11153]  get_futex_key+0x12d/0xb10
[  253.013151][T11153]  futex_wake+0x89/0x400
[  253.013172][T11153]  do_futex+0x3f8/0x460
[  253.013240][T11153]  __se_sys_futex+0x2f6/0x370
[  253.013316][T11153]  __x64_sys_futex+0x78/0x90
[  253.013348][T11153]  x64_sys_call+0x22e2/0x2550
[  253.013449][T11153]  do_syscall_64+0x112/0x360
[  253.013473][T11153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.013548][T11153] RIP: 0033:0x7f0c9031e159
[  253.013563][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.013582][T11153] RSP: 002b:00007f0c8ed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  253.013659][T11153] RAX: ffffffffffffffda RBX: 00007f0c905a5fa8 RCX: 00007f0c9031e159
[  253.013677][T11153] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c905a5fac
[  253.013691][T11153] RBP: 00007f0c905a5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  253.013704][T11153] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  253.013719][T11153] R13: 00007f0c905a6038 R14: 00007ffecdea5030 R15: 00007ffecdea5118
[  253.013753][T11153]  </TASK>
[  253.223173][T11153] Invalid argument reading file caps for ./file0
[  253.224167][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'.
[  253.364798][   T29] audit: type=1400 audit(1790601237.931:807): avc:  denied  { map } for  pid=11161 comm="syz.5.2262" path="socket:[31581]" dev="sockfs" ino=31581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  253.368540][T11162] netlink: 'syz.5.2262': attribute type 1 has an invalid length.
[  253.421039][T11162] 8021q: adding VLAN 0 to HW filter on device bond20
[  253.446606][T11165] syz_tun: left allmulticast mode
[  253.446647][T11165] syz_tun: left promiscuous mode
[  253.446761][T11165] bridge0: port 3(syz_tun) entered disabled state
[  253.499420][T11165] bond20: (slave syz_tun): Enslaving as a backup interface with an up link
[  253.666475][T11175] cgroup: Need name or subsystem set
[  253.791006][T11183] loop3: detected capacity change from 0 to 128
[  253.812111][T11183] msdos: Unknown parameter '01777777777777777777777'
[  253.883946][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2268'.
[  253.906911][T11180] 8021q: adding VLAN 0 to HW filter on device bond3
[  254.199655][T11193] FAULT_INJECTION: forcing a failure.
[  254.199655][T11193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.199691][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.4.2271 Not tainted syzkaller #0 PREEMPT(lazy) 
[  254.199723][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.199738][T11193] Call Trace:
[  254.199747][T11193]  <TASK>
[  254.199818][T11193]  __dump_stack+0x1d/0x30
[  254.199892][T11193]  dump_stack_lvl+0x95/0xd0
[  254.199941][T11193]  dump_stack+0x15/0x1b
[  254.199965][T11193]  should_fail_ex+0x262/0x280
[  254.200005][T11193]  should_fail+0xb/0x20
[  254.200071][T11193]  should_fail_usercopy+0x1a/0x20
[  254.200099][T11193]  _copy_from_user+0x1c/0xb0
[  254.200130][T11193]  get_user_ifreq+0x52/0x110
[  254.200167][T11193]  inet_ioctl+0x24f/0x3a0
[  254.200321][T11193]  sock_do_ioctl+0x73/0x230
[  254.200355][T11193]  sock_ioctl+0x439/0x610
[  254.200381][T11193]  ? __pfx_sock_ioctl+0x10/0x10
[  254.200454][T11193]  __se_sys_ioctl+0xce/0x140
[  254.200570][T11193]  __x64_sys_ioctl+0x43/0x50
[  254.200682][T11193]  x64_sys_call+0x239d/0x2550
[  254.200708][T11193]  do_syscall_64+0x112/0x360
[  254.200737][T11193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.200836][T11193] RIP: 0033:0x7f0c9031e159
[  254.200910][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.200933][T11193] RSP: 002b:00007f0c8ed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.200958][T11193] RAX: ffffffffffffffda RBX: 00007f0c905a5fa0 RCX: 00007f0c9031e159
[  254.200975][T11193] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  254.200989][T11193] RBP: 00007f0c903b506b R08: 0000000000000000 R09: 0000000000000000
[  254.201002][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.201021][T11193] R13: 00007f0c905a6038 R14: 00007f0c905a5fa0 R15: 00007ffecdea5118
[  254.201075][T11193]  </TASK>
[  254.202397][T11193] Invalid argument reading file caps for ./file0
[  254.202922][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'.
[  254.280383][T11197] loop6: detected capacity change from 0 to 128
[  254.396322][T11197] msdos: Unknown parameter '01777777777777777777777'
[  254.978484][T11210] cgroup: Need name or subsystem set
[  255.474446][   T29] audit: type=1400 audit(1790601240.102:808): avc:  denied  { append } for  pid=11217 comm="syz.7.2280" name="error_log" dev="tracefs" ino=2304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  255.624828][T11232] FAULT_INJECTION: forcing a failure.
[  255.624828][T11232] name fail_futex, interval 1, probability 0, space 0, times 0
[  255.624864][T11232] CPU: 0 UID: 0 PID: 11232 Comm: syz.3.2284 Not tainted syzkaller #0 PREEMPT(lazy) 
[  255.624893][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  255.624941][T11232] Call Trace:
[  255.624950][T11232]  <TASK>
[  255.624959][T11232]  __dump_stack+0x1d/0x30
[  255.624989][T11232]  dump_stack_lvl+0x95/0xd0
[  255.625016][T11232]  dump_stack+0x15/0x1b
[  255.625071][T11232]  should_fail_ex+0x262/0x280
[  255.625189][T11232]  should_fail+0xb/0x20
[  255.625218][T11232]  get_futex_key+0x12d/0xb10
[  255.625255][T11232]  futex_wake+0x89/0x400
[  255.625325][T11232]  do_futex+0x3f8/0x460
[  255.625362][T11232]  __se_sys_futex+0x2f6/0x370
[  255.625444][T11232]  __x64_sys_futex+0x78/0x90
[  255.625481][T11232]  x64_sys_call+0x22e2/0x2550
[  255.625512][T11232]  do_syscall_64+0x112/0x360
[  255.625579][T11232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.625607][T11232] RIP: 0033:0x7f9d6d18e159
[  255.625626][T11232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.625703][T11232] RSP: 002b:00007f9d6bbe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  255.625728][T11232] RAX: ffffffffffffffda RBX: 00007f9d6d415fa8 RCX: 00007f9d6d18e159
[  255.625746][T11232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9d6d415fac
[  255.625762][T11232] RBP: 00007f9d6d415fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  255.625780][T11232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  255.625861][T11232] R13: 00007f9d6d416038 R14: 00007ffe97712f90 R15: 00007ffe97713078
[  255.625884][T11232]  </TASK>
[  255.654838][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2283'.
[  255.688648][T11233] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.741167][T11232] Invalid argument reading file caps for ./file0
[  255.770476][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'.
[  255.878397][T11237] loop3: detected capacity change from 0 to 128
[  255.902996][T11237] msdos: Unknown parameter '01777777777777777777777'
[  256.251694][T11249] cgroup: Need name or subsystem set
[  256.498865][T11274] FAULT_INJECTION: forcing a failure.
[  256.498865][T11274] name fail_futex, interval 1, probability 0, space 0, times 0
[  256.498892][T11274] CPU: 1 UID: 0 PID: 11274 Comm: syz.4.2295 Not tainted syzkaller #0 PREEMPT(lazy) 
[  256.498983][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.498996][T11274] Call Trace:
[  256.499003][T11274]  <TASK>
[  256.499025][T11274]  __dump_stack+0x1d/0x30
[  256.499054][T11274]  dump_stack_lvl+0x95/0xd0
[  256.499089][T11274]  dump_stack+0x15/0x1b
[  256.499113][T11274]  should_fail_ex+0x262/0x280
[  256.499148][T11274]  should_fail+0xb/0x20
[  256.499176][T11274]  get_futex_key+0x12d/0xb10
[  256.499218][T11274]  futex_wake+0x89/0x400
[  256.499240][T11274]  do_futex+0x3f8/0x460
[  256.499385][T11274]  __se_sys_futex+0x2f6/0x370
[  256.499460][T11274]  __x64_sys_futex+0x78/0x90
[  256.499532][T11274]  x64_sys_call+0x22e2/0x2550
[  256.499558][T11274]  do_syscall_64+0x112/0x360
[  256.499581][T11274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.499603][T11274] RIP: 0033:0x7f0c9031e159
[  256.499655][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.499676][T11274] RSP: 002b:00007f0c8ed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  256.499707][T11274] RAX: ffffffffffffffda RBX: 00007f0c905a5fa8 RCX: 00007f0c9031e159
[  256.499753][T11274] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c905a5fac
[  256.499767][T11274] RBP: 00007f0c905a5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  256.499858][T11274] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  256.499873][T11274] R13: 00007f0c905a6038 R14: 00007ffecdea5030 R15: 00007ffecdea5118
[  256.499902][T11274]  </TASK>
[  256.667152][T11274] Invalid argument reading file caps for ./file0
[  256.667610][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'.
[  256.754926][   T29] audit: type=1400 audit(1790601241.427:809): avc:  denied  { kexec_image_load } for  pid=11278 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  256.757477][T11282] loop7: detected capacity change from 0 to 512
[  256.792068][T11282] EXT4-fs: Ignoring removed nobh option
[  256.794259][T11282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  256.818294][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2289: corrupted inode contents
[  256.818459][T11282] fserror_report: 1 callbacks suppressed
[  256.818471][T11282] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  256.818639][T11282] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #3: comm syz.7.2289: mark_inode_dirty error
[  256.818695][T11282] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  256.819050][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2289: corrupted inode contents
[  256.819118][T11282] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  256.819286][T11282] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.2289: mark_inode_dirty error
[  256.819349][T11282] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  256.819507][T11282] Quota error (device loop7): write_blk: dquota write failed
[  256.819581][T11282] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  256.819601][T11282] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.2289: Failed to acquire dquot type 0
[  256.819622][T11282] loop7: lost filesystem error report for type 5 error -117
[  256.820043][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2289: corrupted inode contents
[  256.820073][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.820189][T11282] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #16: comm syz.7.2289: mark_inode_dirty error
[  256.820211][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.820322][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2289: corrupted inode contents
[  256.820348][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.820457][T11282] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2289: mark_inode_dirty error
[  256.820480][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.820577][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2289: corrupted inode contents
[  256.820645][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.820736][T11282] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem
[  256.820807][T11282] loop7: lost filesystem error report for type 5 error -117
[  256.820942][T11282] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2289: corrupted inode contents
[  256.821009][T11282] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  256.821118][T11282] EXT4-fs error (device loop7): ext4_truncate:4721: inode #16: comm syz.7.2289: mark_inode_dirty error
[  256.821225][    C1] EXT4-fs (loop7): error count since last fsck: 13
[  256.821245][    C1] EXT4-fs (loop7): initial error at time 1790601241: ext4_do_update_inode:5801: inode 3
[  256.821283][    C1] EXT4-fs (loop7): last error at time 1790601241: ext4_truncate:4721: inode 16
[  256.928667][T11282] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem
[  256.928707][T11282] loop7: lost filesystem error report for type 5 error -117
[  256.929690][T11282] EXT4-fs (loop7): 1 truncate cleaned up
[  256.930021][T11282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.930098][T11282] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.034047][T11288] IPVS: set_ctl: invalid protocol: 183 255.255.255.255:20001
[  257.058988][T11288] IPVS: set_ctl: invalid protocol: 103 172.20.20.14:20001
[  257.226006][T10276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.323389][T11292] device-mapper: dirty region log: invalid region size 1024
[  257.323419][T11292] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  257.323453][T11292] device-mapper: ioctl: error adding target to table
[  257.355268][T11292] cgroup: Need name or subsystem set
[  257.392998][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2300'.
[  257.421122][T11290] 8021q: adding VLAN 0 to HW filter on device bond4
[  257.468796][   T29] audit: type=1326 audit(1790601242.155:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.468972][   T29] audit: type=1326 audit(1790601242.155:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.470358][   T29] audit: type=1326 audit(1790601242.155:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.470572][   T29] audit: type=1326 audit(1790601242.155:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.471140][   T29] audit: type=1326 audit(1790601242.155:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.471429][   T29] audit: type=1326 audit(1790601242.155:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.471766][   T29] audit: type=1326 audit(1790601242.155:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.7.2304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff83f39e159 code=0x7ffc0000
[  257.553098][T11303] netlink: 'syz.7.2304': attribute type 11 has an invalid length.
[  257.778430][T11315] FAULT_INJECTION: forcing a failure.
[  257.778430][T11315] name fail_futex, interval 1, probability 0, space 0, times 0
[  257.778460][T11315] CPU: 0 UID: 0 PID: 11315 Comm: syz.6.2309 Not tainted syzkaller #0 PREEMPT(lazy) 
[  257.778486][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  257.778499][T11315] Call Trace:
[  257.778521][T11315]  <TASK>
[  257.778530][T11315]  __dump_stack+0x1d/0x30
[  257.778558][T11315]  dump_stack_lvl+0x95/0xd0
[  257.778585][T11315]  dump_stack+0x15/0x1b
[  257.778652][T11315]  should_fail_ex+0x262/0x280
[  257.778684][T11315]  should_fail+0xb/0x20
[  257.778712][T11315]  get_futex_key+0x12d/0xb10
[  257.778790][T11315]  futex_wake+0x89/0x400
[  257.778815][T11315]  do_futex+0x3f8/0x460
[  257.778852][T11315]  __se_sys_futex+0x2f6/0x370
[  257.778886][T11315]  __x64_sys_futex+0x78/0x90
[  257.778988][T11315]  x64_sys_call+0x22e2/0x2550
[  257.779018][T11315]  do_syscall_64+0x112/0x360
[  257.779047][T11315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.779080][T11315] RIP: 0033:0x7f6c8810e159
[  257.779097][T11315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.779188][T11315] RSP: 002b:00007f6c86b670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  257.779213][T11315] RAX: ffffffffffffffda RBX: 00007f6c88395fa8 RCX: 00007f6c8810e159
[  257.779227][T11315] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c88395fac
[  257.779240][T11315] RBP: 00007f6c88395fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  257.779254][T11315] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  257.779267][T11315] R13: 00007f6c88396038 R14: 00007ffc1aec0cb0 R15: 00007ffc1aec0d98
[  257.779334][T11315]  </TASK>
[  257.970731][T11318] Invalid argument reading file caps for ./file0
[  257.971204][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'.
[  258.233760][T11331] loop3: detected capacity change from 0 to 512
[  258.235636][T11331] EXT4-fs: Ignoring removed nobh option
[  258.248307][T11331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.259782][T11335] device-mapper: dirty region log: invalid region size 1024
[  258.259809][T11335] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  258.259848][T11335] device-mapper: ioctl: error adding target to table
[  258.282447][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.2311: corrupted inode contents
[  258.282693][T11331] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #3: comm syz.3.2311: mark_inode_dirty error
[  258.283069][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.2311: corrupted inode contents
[  258.283221][T11331] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.2311: mark_inode_dirty error
[  258.286812][T11335] cgroup: Need name or subsystem set
[  258.286964][T11331] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.2311: Failed to acquire dquot type 0
[  258.286986][T11331] loop3: lost filesystem error report for type 5 error -117
[  258.294585][    C0] EXT4-fs (loop3): error count since last fsck: 5
[  258.294606][    C0] EXT4-fs (loop3): initial error at time 1790601242: ext4_do_update_inode:5801: inode 3
[  258.294638][    C0] EXT4-fs (loop3): last error at time 1790601242: ext4_acquire_dquot:7069
[  258.314774][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2311: corrupted inode contents
[  258.326820][T11331] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #16: comm syz.3.2311: mark_inode_dirty error
[  258.327014][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2311: corrupted inode contents
[  258.327129][T11331] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2311: mark_inode_dirty error
[  258.327269][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2311: corrupted inode contents
[  258.327393][T11331] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem
[  258.327412][T11331] loop3: lost filesystem error report for type 5 error -117
[  258.327654][T11331] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2311: corrupted inode contents
[  258.327751][T11331] EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.2311: mark_inode_dirty error
[  258.327914][T11331] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem
[  258.327932][T11331] loop3: lost filesystem error report for type 5 error -117
[  258.328407][T11331] EXT4-fs (loop3): 1 truncate cleaned up
[  258.328765][T11331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.328849][T11331] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.392619][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2316'.
[  258.428697][T11343] 8021q: adding VLAN 0 to HW filter on device bond21
[  258.613540][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'.
[  258.616199][T11348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2318'.
[  258.647045][T11348] netlink: 'syz.4.2318': attribute type 4 has an invalid length.
[  258.652949][T11348] .`: renamed from bond0
[  258.713304][T11355] FAULT_INJECTION: forcing a failure.
[  258.713304][T11355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.713390][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.4.2321 Not tainted syzkaller #0 PREEMPT(lazy) 
[  258.713405][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.713413][T11355] Call Trace:
[  258.713418][T11355]  <TASK>
[  258.713423][T11355]  __dump_stack+0x1d/0x30
[  258.713440][T11355]  dump_stack_lvl+0x95/0xd0
[  258.713491][T11355]  dump_stack+0x15/0x1b
[  258.713515][T11355]  should_fail_ex+0x262/0x280
[  258.713531][T11355]  should_fail+0xb/0x20
[  258.713545][T11355]  should_fail_usercopy+0x1a/0x20
[  258.713563][T11355]  _copy_from_user+0x1c/0xb0
[  258.713582][T11355]  get_user_ifreq+0x52/0x110
[  258.713599][T11355]  inet_ioctl+0x24f/0x3a0
[  258.713620][T11355]  sock_do_ioctl+0x73/0x230
[  258.713693][T11355]  sock_ioctl+0x439/0x610
[  258.713710][T11355]  ? __pfx_sock_ioctl+0x10/0x10
[  258.713726][T11355]  __se_sys_ioctl+0xce/0x140
[  258.713747][T11355]  __x64_sys_ioctl+0x43/0x50
[  258.713811][T11355]  x64_sys_call+0x239d/0x2550
[  258.713835][T11355]  do_syscall_64+0x112/0x360
[  258.713913][T11355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.713940][T11355] RIP: 0033:0x7f0c9031e159
[  258.713959][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.713982][T11355] RSP: 002b:00007f0c8ed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.714016][T11355] RAX: ffffffffffffffda RBX: 00007f0c905a5fa0 RCX: 00007f0c9031e159
[  258.714034][T11355] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  258.714050][T11355] RBP: 00007f0c903b506b R08: 0000000000000000 R09: 0000000000000000
[  258.714114][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.714130][T11355] R13: 00007f0c905a6038 R14: 00007f0c905a5fa0 R15: 00007ffecdea5118
[  258.714160][T11355]  </TASK>
[  258.717561][T11355] Invalid argument reading file caps for ./file0
[  258.769067][T11359] loop4: detected capacity change from 0 to 128
[  258.777109][  T321] IPVS: starting estimator thread 0...
[  258.873181][T11361] IPVS: using max 2448 ests per chain, 122400 per kthread
[  258.998838][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.553336][T11377] loop3: detected capacity change from 0 to 128
[  259.554284][T11377] msdos: Unknown parameter '01777777777777777777777'
[  259.628777][T11379] device-mapper: dirty region log: invalid region size 1024
[  259.628805][T11379] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  259.628847][T11379] device-mapper: ioctl: error adding target to table
[  259.658342][T11379] cgroup: Need name or subsystem set
[  259.868572][T11383] loop7: detected capacity change from 0 to 512
[  259.894054][T11383] EXT4-fs: Ignoring removed nobh option
[  259.946669][T11383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.960108][T11383] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.972909][T11389] __nla_validate_parse: 4 callbacks suppressed
[  259.972925][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  260.009968][T11389] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.050038][T11383] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #2: comm syz.7.2329: corrupted inode contents
[  260.052428][T11383] EXT4-fs (loop7): Remounting filesystem read-only
[  260.060249][T11398] device-mapper: dirty region log: invalid region size 1024
[  260.060412][T11398] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  260.060441][T11398] device-mapper: ioctl: error adding target to table
[  260.158616][T11401] FAULT_INJECTION: forcing a failure.
[  260.158616][T11401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.158695][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.5.2333 Not tainted syzkaller #0 PREEMPT(lazy) 
[  260.158792][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  260.158808][T11401] Call Trace:
[  260.158815][T11401]  <TASK>
[  260.158881][T11401]  __dump_stack+0x1d/0x30
[  260.158911][T11401]  dump_stack_lvl+0x95/0xd0
[  260.158935][T11401]  dump_stack+0x15/0x1b
[  260.158957][T11401]  should_fail_ex+0x262/0x280
[  260.159045][T11401]  should_fail+0xb/0x20
[  260.159074][T11401]  should_fail_usercopy+0x1a/0x20
[  260.159105][T11401]  _copy_from_user+0x1c/0xb0
[  260.159143][T11401]  get_user_ifreq+0x52/0x110
[  260.159227][T11401]  inet_ioctl+0x24f/0x3a0
[  260.159267][T11401]  sock_do_ioctl+0x73/0x230
[  260.159352][T11401]  sock_ioctl+0x439/0x610
[  260.159431][T11401]  ? __pfx_sock_ioctl+0x10/0x10
[  260.159464][T11401]  __se_sys_ioctl+0xce/0x140
[  260.159518][T11401]  __x64_sys_ioctl+0x43/0x50
[  260.159556][T11401]  x64_sys_call+0x239d/0x2550
[  260.159588][T11401]  do_syscall_64+0x112/0x360
[  260.159644][T11401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.159749][T11401] RIP: 0033:0x7f3aa940e159
[  260.159771][T11401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.159790][T11401] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.159809][T11401] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  260.159846][T11401] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  260.159862][T11401] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  260.159992][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.160008][T11401] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  260.160032][T11401]  </TASK>
[  260.175099][T11401] Invalid argument reading file caps for ./file0
[  260.175650][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2333'.
[  260.518781][T10276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.660965][T11417] loop7: detected capacity change from 0 to 512
[  260.661285][T11417] EXT4-fs: Ignoring removed nobh option
[  260.661672][T11417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.690572][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2337: corrupted inode contents
[  260.690692][T11417] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #3: comm syz.7.2337: mark_inode_dirty error
[  260.691181][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2337: corrupted inode contents
[  260.691451][T11417] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.2337: mark_inode_dirty error
[  260.691623][T11417] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.2337: Failed to acquire dquot type 0
[  260.691714][T11417] loop7: lost filesystem error report for type 5 error -117
[  260.692180][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2337: corrupted inode contents
[  260.692362][    C0] EXT4-fs (loop7): error count since last fsck: 6
[  260.692383][    C0] EXT4-fs (loop7): initial error at time 1790601245: ext4_do_update_inode:5801: inode 3
[  260.692422][    C0] EXT4-fs (loop7): last error at time 1790601245: ext4_do_update_inode:5801: inode 16
[  260.693207][T11417] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #16: comm syz.7.2337: mark_inode_dirty error
[  260.693349][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2337: corrupted inode contents
[  260.693494][T11417] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2337: mark_inode_dirty error
[  260.693669][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2337: corrupted inode contents
[  260.693801][T11417] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem
[  260.693820][T11417] loop7: lost filesystem error report for type 5 error -117
[  260.693973][T11417] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2337: corrupted inode contents
[  260.694243][T11417] EXT4-fs error (device loop7): ext4_truncate:4721: inode #16: comm syz.7.2337: mark_inode_dirty error
[  260.694357][T11417] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem
[  260.694437][T11417] loop7: lost filesystem error report for type 5 error -117
[  260.754035][T11417] EXT4-fs (loop7): 1 truncate cleaned up
[  260.754568][T11417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.754632][T11417] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.943831][T11431] device-mapper: dirty region log: invalid region size 1024
[  260.943846][T11431] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  260.943988][T11431] device-mapper: ioctl: error adding target to table
[  260.957984][T11431] cgroup: Need name or subsystem set
[  261.251351][T11439] loop4: detected capacity change from 0 to 128
[  261.254882][T11439] msdos: Unknown parameter '01777777777777777777777'
[  261.379494][T10276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.493383][T11441] FAULT_INJECTION: forcing a failure.
[  261.493383][T11441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.493452][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.7.2345 Not tainted syzkaller #0 PREEMPT(lazy) 
[  261.493482][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  261.493499][T11441] Call Trace:
[  261.493508][T11441]  <TASK>
[  261.493518][T11441]  __dump_stack+0x1d/0x30
[  261.493627][T11441]  dump_stack_lvl+0x95/0xd0
[  261.493716][T11441]  dump_stack+0x15/0x1b
[  261.493736][T11441]  should_fail_ex+0x262/0x280
[  261.493767][T11441]  should_fail+0xb/0x20
[  261.493826][T11441]  should_fail_usercopy+0x1a/0x20
[  261.493858][T11441]  _copy_from_user+0x1c/0xb0
[  261.493948][T11441]  get_user_ifreq+0x52/0x110
[  261.494026][T11441]  inet_ioctl+0x24f/0x3a0
[  261.494120][T11441]  sock_do_ioctl+0x73/0x230
[  261.494181][T11441]  sock_ioctl+0x439/0x610
[  261.494263][T11441]  ? __pfx_sock_ioctl+0x10/0x10
[  261.494332][T11441]  __se_sys_ioctl+0xce/0x140
[  261.494402][T11441]  __x64_sys_ioctl+0x43/0x50
[  261.494439][T11441]  x64_sys_call+0x239d/0x2550
[  261.494471][T11441]  do_syscall_64+0x112/0x360
[  261.494535][T11441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.494637][T11441] RIP: 0033:0x7ff83f39e159
[  261.494655][T11441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.494726][T11441] RSP: 002b:00007ff83ddf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  261.494749][T11441] RAX: ffffffffffffffda RBX: 00007ff83f625fa0 RCX: 00007ff83f39e159
[  261.494765][T11441] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  261.494856][T11441] RBP: 00007ff83f43506b R08: 0000000000000000 R09: 0000000000000000
[  261.494870][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.494884][T11441] R13: 00007ff83f626038 R14: 00007ff83f625fa0 R15: 00007ffe53bc03a8
[  261.494904][T11441]  </TASK>
[  261.513434][T11441] Invalid argument reading file caps for ./file0
[  261.521986][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2345'.
[  261.763215][T11445] FAULT_INJECTION: forcing a failure.
[  261.763215][T11445] name failslab, interval 1, probability 0, space 0, times 0
[  261.763259][T11445] CPU: 0 UID: 0 PID: 11445 Comm: syz.6.2347 Not tainted syzkaller #0 PREEMPT(lazy) 
[  261.763334][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  261.763349][T11445] Call Trace:
[  261.763357][T11445]  <TASK>
[  261.763365][T11445]  __dump_stack+0x1d/0x30
[  261.763398][T11445]  dump_stack_lvl+0x95/0xd0
[  261.763421][T11445]  dump_stack+0x15/0x1b
[  261.763447][T11445]  should_fail_ex+0x262/0x280
[  261.763590][T11445]  ? fsnotify_alloc_group+0x5a/0x160
[  261.763620][T11445]  should_failslab+0x8c/0xb0
[  261.763710][T11445]  __kmalloc_cache_noprof+0x7a/0x400
[  261.763748][T11445]  ? fsnotify_alloc_group+0x5a/0x160
[  261.763780][T11445]  fsnotify_alloc_group+0x5a/0x160
[  261.763843][T11445]  do_inotify_init+0x58/0x280
[  261.763878][T11445]  __x64_sys_inotify_init1+0x1e/0x30
[  261.763967][T11445]  x64_sys_call+0x188d/0x2550
[  261.763997][T11445]  do_syscall_64+0x112/0x360
[  261.764021][T11445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.764071][T11445] RIP: 0033:0x7f6c8810e159
[  261.764122][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.764145][T11445] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  261.764170][T11445] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  261.764188][T11445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  261.764241][T11445] RBP: 00007f6c881a506b R08: 0000000000000000 R09: 0000000000000000
[  261.764258][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.764275][T11445] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  261.764377][T11445]  </TASK>
[  261.996352][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  261.997648][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  261.997660][   T29] audit: type=1400 audit(1790601246.783:831): avc:  denied  { view } for  pid=11453 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  262.040999][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2349'.
[  262.042039][T11455] syz_tun: entered promiscuous mode
[  262.056528][T11455] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  262.066041][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.083194][T11457] 8021q: adding VLAN 0 to HW filter on device bond2
[  262.110903][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.112969][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.113015][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.113052][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.113087][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.113121][T11455] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  262.149744][T11467] FAULT_INJECTION: forcing a failure.
[  262.149744][T11467] name failslab, interval 1, probability 0, space 0, times 0
[  262.149807][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.5.2352 Not tainted syzkaller #0 PREEMPT(lazy) 
[  262.149834][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  262.149879][T11467] Call Trace:
[  262.149899][T11467]  <TASK>
[  262.149908][T11467]  __dump_stack+0x1d/0x30
[  262.149937][T11467]  dump_stack_lvl+0x95/0xd0
[  262.149962][T11467]  dump_stack+0x15/0x1b
[  262.149986][T11467]  should_fail_ex+0x262/0x280
[  262.150059][T11467]  ? fsnotify_alloc_group+0x5a/0x160
[  262.150087][T11467]  should_failslab+0x8c/0xb0
[  262.150147][T11467]  __kmalloc_cache_noprof+0x7a/0x400
[  262.150185][T11467]  ? fsnotify_alloc_group+0x5a/0x160
[  262.150286][T11467]  fsnotify_alloc_group+0x5a/0x160
[  262.150315][T11467]  do_inotify_init+0x58/0x280
[  262.150349][T11467]  __x64_sys_inotify_init1+0x1e/0x30
[  262.150432][T11467]  x64_sys_call+0x188d/0x2550
[  262.150462][T11467]  do_syscall_64+0x112/0x360
[  262.150521][T11467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.150545][T11467] RIP: 0033:0x7f3aa940e159
[  262.150563][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.150591][T11467] RSP: 002b:00007f3aa7e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  262.150630][T11467] RAX: ffffffffffffffda RBX: 00007f3aa9696090 RCX: 00007f3aa940e159
[  262.150647][T11467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  262.150662][T11467] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  262.150677][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.150738][T11467] R13: 00007f3aa9696128 R14: 00007f3aa9696090 R15: 00007fffc613d1b8
[  262.150760][T11467]  </TASK>
[  262.201017][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.208966][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.279206][T11471] device-mapper: dirty region log: invalid region size 1024
[  262.279221][T11471] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  262.279317][T11471] device-mapper: ioctl: error adding target to table
[  262.360332][T11477] cgroup: Need name or subsystem set
[  262.368968][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'.
[  262.472020][T11469] 8021q: adding VLAN 0 to HW filter on device bond26
[  262.473646][T11474] syzkaller0: entered promiscuous mode
[  262.473662][T11474] syzkaller0: entered allmulticast mode
[  262.577992][T11493] FAULT_INJECTION: forcing a failure.
[  262.577992][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.578022][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.7.2361 Not tainted syzkaller #0 PREEMPT(lazy) 
[  262.578096][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  262.578108][T11493] Call Trace:
[  262.578116][T11493]  <TASK>
[  262.578123][T11493]  __dump_stack+0x1d/0x30
[  262.578151][T11493]  dump_stack_lvl+0x95/0xd0
[  262.578238][T11493]  dump_stack+0x15/0x1b
[  262.578262][T11493]  should_fail_ex+0x262/0x280
[  262.578304][T11493]  should_fail+0xb/0x20
[  262.578332][T11493]  should_fail_usercopy+0x1a/0x20
[  262.578434][T11493]  _copy_from_user+0x1c/0xb0
[  262.578469][T11493]  get_user_ifreq+0x52/0x110
[  262.578507][T11493]  inet_ioctl+0x24f/0x3a0
[  262.578546][T11493]  sock_do_ioctl+0x73/0x230
[  262.578630][T11493]  sock_ioctl+0x439/0x610
[  262.578661][T11493]  ? __pfx_sock_ioctl+0x10/0x10
[  262.578688][T11493]  __se_sys_ioctl+0xce/0x140
[  262.578755][T11493]  __x64_sys_ioctl+0x43/0x50
[  262.578791][T11493]  x64_sys_call+0x239d/0x2550
[  262.578822][T11493]  do_syscall_64+0x112/0x360
[  262.578912][T11493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.578935][T11493] RIP: 0033:0x7ff83f39e159
[  262.579027][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.579064][T11493] RSP: 002b:00007ff83ddf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.579087][T11493] RAX: ffffffffffffffda RBX: 00007ff83f625fa0 RCX: 00007ff83f39e159
[  262.579102][T11493] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  262.579115][T11493] RBP: 00007ff83f43506b R08: 0000000000000000 R09: 0000000000000000
[  262.579129][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.579202][T11493] R13: 00007ff83f626038 R14: 00007ff83f625fa0 R15: 00007ffe53bc03a8
[  262.579224][T11493]  </TASK>
[  262.596399][T11493] Invalid argument reading file caps for ./file0
[  262.600171][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2361'.
[  262.668061][T11495] loop7: detected capacity change from 0 to 128
[  262.668373][T11495] msdos: Unknown parameter '01777777777777777777777'
[  263.399662][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'.
[  263.443618][T11516] device-mapper: dirty region log: invalid region size 1024
[  263.443689][T11516] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL)
[  263.443759][T11516] device-mapper: ioctl: error adding target to table
[  263.451053][T11513] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.495923][T11516] cgroup: Need name or subsystem set
[  263.786228][T11524] FAULT_INJECTION: forcing a failure.
[  263.786228][T11524] name failslab, interval 1, probability 0, space 0, times 0
[  263.786294][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.6.2370 Not tainted syzkaller #0 PREEMPT(lazy) 
[  263.786364][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  263.786381][T11524] Call Trace:
[  263.786389][T11524]  <TASK>
[  263.786399][T11524]  __dump_stack+0x1d/0x30
[  263.786446][T11524]  dump_stack_lvl+0x95/0xd0
[  263.786471][T11524]  dump_stack+0x15/0x1b
[  263.786496][T11524]  should_fail_ex+0x262/0x280
[  263.786529][T11524]  ? fsnotify_alloc_group+0x5a/0x160
[  263.786577][T11524]  should_failslab+0x8c/0xb0
[  263.786608][T11524]  __kmalloc_cache_noprof+0x7a/0x400
[  263.786643][T11524]  ? fsnotify_alloc_group+0x5a/0x160
[  263.786675][T11524]  fsnotify_alloc_group+0x5a/0x160
[  263.786751][T11524]  do_inotify_init+0x58/0x280
[  263.786781][T11524]  __x64_sys_inotify_init1+0x1e/0x30
[  263.786816][T11524]  x64_sys_call+0x188d/0x2550
[  263.786923][T11524]  do_syscall_64+0x112/0x360
[  263.786956][T11524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.787052][T11524] RIP: 0033:0x7f6c8810e159
[  263.787071][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.787164][T11524] RSP: 002b:00007f6c86b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  263.787189][T11524] RAX: ffffffffffffffda RBX: 00007f6c88395fa0 RCX: 00007f6c8810e159
[  263.787229][T11524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  263.787245][T11524] RBP: 00007f6c881a506b R08: 0000000000000000 R09: 0000000000000000
[  263.787261][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.787277][T11524] R13: 00007f6c88396038 R14: 00007f6c88395fa0 R15: 00007ffc1aec0d98
[  263.787300][T11524]  </TASK>
[  264.065645][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.070902][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.229946][T11539] syzkaller0: entered promiscuous mode
[  264.230310][T11539] syzkaller0: entered allmulticast mode
[  264.549520][T11547] loop6: detected capacity change from 0 to 128
[  264.557855][T11547] msdos: Unknown parameter '01777777777777777777777'
[  264.765441][T11559] FAULT_INJECTION: forcing a failure.
[  264.765441][T11559] name failslab, interval 1, probability 0, space 0, times 0
[  264.765566][T11559] CPU: 0 UID: 0 PID: 11559 Comm: syz.5.2382 Not tainted syzkaller #0 PREEMPT(lazy) 
[  264.765595][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  264.765674][T11559] Call Trace:
[  264.765682][T11559]  <TASK>
[  264.765690][T11559]  __dump_stack+0x1d/0x30
[  264.765716][T11559]  dump_stack_lvl+0x95/0xd0
[  264.765741][T11559]  dump_stack+0x15/0x1b
[  264.765761][T11559]  should_fail_ex+0x262/0x280
[  264.765819][T11559]  ? fsnotify_alloc_group+0x5a/0x160
[  264.765850][T11559]  should_failslab+0x8c/0xb0
[  264.765972][T11559]  __kmalloc_cache_noprof+0x7a/0x400
[  264.766084][T11559]  ? fsnotify_alloc_group+0x5a/0x160
[  264.766127][T11559]  fsnotify_alloc_group+0x5a/0x160
[  264.766155][T11559]  do_inotify_init+0x58/0x280
[  264.766235][T11559]  __x64_sys_inotify_init1+0x1e/0x30
[  264.766265][T11559]  x64_sys_call+0x188d/0x2550
[  264.766290][T11559]  do_syscall_64+0x112/0x360
[  264.766400][T11559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.766472][T11559] RIP: 0033:0x7f3aa940e159
[  264.766502][T11559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.766520][T11559] RSP: 002b:00007f3aa7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  264.766540][T11559] RAX: ffffffffffffffda RBX: 00007f3aa9695fa0 RCX: 00007f3aa940e159
[  264.766631][T11559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  264.766644][T11559] RBP: 00007f3aa94a506b R08: 0000000000000000 R09: 0000000000000000
[  264.766657][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.766669][T11559] R13: 00007f3aa9696038 R14: 00007f3aa9695fa0 R15: 00007fffc613d1b8
[  264.766688][T11559]  </TASK>
[  264.901445][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2381'.
[  265.027662][T11565] 8021q: adding VLAN 0 to HW filter on device bond3
[  265.319752][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.352484][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.412306][T11581] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint
[  265.715895][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  265.825148][T11586] FAULT_INJECTION: forcing a failure.
[  265.825148][T11586] name failslab, interval 1, probability 0, space 0, times 0
[  265.825180][T11586] CPU: 1 UID: 0 PID: 11586 Comm: syz.4.2390 Not tainted syzkaller #0 PREEMPT(lazy) 
[  265.825211][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.825227][T11586] Call Trace:
[  265.825235][T11586]  <TASK>
[  265.825244][T11586]  __dump_stack+0x1d/0x30
[  265.825282][T11586]  dump_stack_lvl+0x95/0xd0
[  265.825309][T11586]  dump_stack+0x15/0x1b
[  265.825340][T11586]  should_fail_ex+0x262/0x280
[  265.825369][T11586]  ? do_inotify_init+0x91/0x280
[  265.825406][T11586]  should_failslab+0x8c/0xb0
[  265.825483][T11586]  __kmalloc_cache_noprof+0x7a/0x400
[  265.825522][T11586]  ? do_inotify_init+0x91/0x280
[  265.825609][T11586]  ? mutex_init_generic+0x3e/0x50
[  265.825647][T11586]  do_inotify_init+0x91/0x280
[  265.825701][T11586]  __x64_sys_inotify_init1+0x1e/0x30
[  265.825830][T11586]  x64_sys_call+0x188d/0x2550
[  265.825861][T11586]  do_syscall_64+0x112/0x360
[  265.825934][T11586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.825961][T11586] RIP: 0033:0x7f0c9031e159
[  265.825980][T11586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.826042][T11586] RSP: 002b:00007f0c8ed56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  265.826066][T11586] RAX: ffffffffffffffda RBX: 00007f0c905a6090 RCX: 00007f0c9031e159
[  265.826156][T11586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080800
[  265.826172][T11586] RBP: 00007f0c903b506b R08: 0000000000000000 R09: 0000000000000000
[  265.826189][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.826204][T11586] R13: 00007f0c905a6128 R14: 00007f0c905a6090 R15: 00007ffecdea5118
[  265.826226][T11586]  </TASK>
[  266.174950][T11594] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2387'.
[  266.174979][T11594] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2387'.
[  266.174999][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2387'.
[  266.178290][   T29] audit: type=1400 audit(1790601251.021:832): avc:  denied  { unmount } for  pid=3579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  266.244481][T11598] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  266.291173][T11596] loop6: detected capacity change from 0 to 512
[  267.248810][T11596] EXT4-fs: Ignoring removed bh option
[  267.250222][T11596] EXT4-fs (loop6): unable to read superblock
[  268.980219][T11598] ==================================================================
[  268.980253][T11598] BUG: KCSAN: data-race in probe_sched_switch / tracing_start_sched_switch
[  268.980288][T11598] 
[  268.980298][T11598] write to 0xffffffff895fd1e0 of 4 bytes by task 11578 on cpu 0:
[  268.980319][T11598]  tracing_start_sched_switch+0x8d/0x200
[  268.980343][T11598]  tracing_start_cmdline_record+0x13/0x20
[  268.980367][T11598]  __ftrace_event_enable_disable+0x203/0x4b0
[  268.980401][T11598]  __ftrace_set_clr_event_nolock+0x39e/0x820
[  268.980422][T11598]  ftrace_set_clr_event+0x2a6/0x340
[  268.980454][T11598]  ftrace_event_write+0x170/0x1d0
[  268.980481][T11598]  vfs_write+0x254/0x9a0
[  268.980517][T11598]  ksys_write+0xdc/0x1a0
[  268.980549][T11598]  __x64_sys_write+0x40/0x50
[  268.980584][T11598]  x64_sys_call+0x154e/0x2550
[  268.980611][T11598]  do_syscall_64+0x112/0x360
[  268.980637][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.980665][T11598] 
[  268.980674][T11598] read to 0xffffffff895fd1e0 of 4 bytes by task 11598 on cpu 1:
[  268.980696][T11598]  probe_sched_switch+0x46/0xa0
[  268.980720][T11598]  __traceiter_sched_switch+0x3f/0x60
[  268.980752][T11598]  __schedule+0xc34/0xd20
[  268.980778][T11598]  schedule+0x5b/0xa0
[  268.980802][T11598]  schedule_timeout+0x53/0x180
[  268.980825][T11598]  unix_wait_for_peer+0x135/0x1a0
[  268.980858][T11598]  unix_dgram_sendmsg+0x8c2/0x1030
[  268.980890][T11598]  ____sys_sendmsg+0x532/0x580
[  268.980919][T11598]  ___sys_sendmsg+0x195/0x1e0
[  268.980944][T11598]  __sys_sendmmsg+0x185/0x320
[  268.980966][T11598]  __x64_sys_sendmmsg+0x57/0x70
[  268.980990][T11598]  x64_sys_call+0x1fb4/0x2550
[  268.981016][T11598]  do_syscall_64+0x112/0x360
[  268.981039][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.981067][T11598] 
[  268.981074][T11598] value changed: 0x000006e9 -> 0x000006ea
[  268.981087][T11598] 
[  268.981095][T11598] Reported by Kernel Concurrency Sanitizer on:
[  268.981107][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.5.2393 Not tainted syzkaller #0 PREEMPT(lazy) 
[  268.981138][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  268.981153][T11598] ==================================================================