last executing test programs:

48.683808399s ago: executing program 4 (id=221):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18180000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

48.572792832s ago: executing program 4 (id=224):
fsopen(0x0, 0x1) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async)
r1 = socket$netlink(0x10, 0x3, 0x10) (async)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

47.707843853s ago: executing program 4 (id=231):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl")
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'errors=remount-ro'}, {0x20, 'errors=remount-ro'}, {0x20, 'errors=remount-ro'}, {0x20, 'orlov'}], 0xa, "803674c77adeeac771f4f433023e8a4f86b4b05b463400fff7eedf041713d11c7e42551880466558435e481da7ec1e630881c033534c05afdc8656eb88a1edf32a613a299caf9c4b43833845cd0ec6a00ee51283027b3680459e2cee84dab57dc2fac55023d86ee2d13987b46b840ee07dc1b4bf849bb2c0136b91aaf05f3b0b70beebf23a52"}, 0x1be)
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60840, 0x162)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880))
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40240, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000400)={'dvmrp1\x00', 0x200})
syz_emit_ethernet(0x86, &(0x7f0000000780)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x50, 0x3a, 0xff, @private1, @mcast2, {[@dstopts={0x104, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x21d}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [@srh={0x87, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}]}}}}}}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90)

47.366116011s ago: executing program 4 (id=236):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0xf, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$rds(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00')
r0 = socket(0x2, 0x80805, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TCFLSH(r2, 0x89f3, 0x20001116)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="0100230100203402000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e207f00000100000000000000001400020002004e207f0000010000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x8004)
r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r5, 0x409, 0xb)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

45.829799548s ago: executing program 4 (id=247):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x2)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x3806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xffff}]}, 0x3c}}, 0x4810)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1000, 0x830d}, 0x1116c8, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @empty}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000806bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001011ff20010000000800000000000000000000ff0200000000000000000000000000014f194e200010907882080001167bb59e"], 0x4a)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

42.983714326s ago: executing program 4 (id=266):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108e600000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x30000009})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x11)
epoll_wait(r4, &(0x7f00000002c0)=[{}], 0x1, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4, @ANYRES16, @ANYRES16], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x440c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

42.482132478s ago: executing program 32 (id=266):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108e600000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x30000009})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x11)
epoll_wait(r4, &(0x7f00000002c0)=[{}], 0x1, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4, @ANYRES16, @ANYRES16], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x440c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

3.687775532s ago: executing program 0 (id=648):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="3100215cd5389f8008000a", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYBLOB="08000300400000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000)

3.630709463s ago: executing program 1 (id=649):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)={0x68, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x4, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'})
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9", 0x72})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0xb}}, './file0\x00'})
connect$rds(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f0000000080)={0x3c, 0x7166, 0xfff})

3.531624115s ago: executing program 0 (id=652):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010528bd70000000000000000000", @ANYBLOB="08080500000004001400128009000100766574680000000004000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (fail_nth: 5)

3.33969242s ago: executing program 1 (id=653):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x3, 0x1, 0x1000, 0x1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d)
syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000078000000000001907864010102ac1414aa05009078e00000e04700fffc0000000000110002ac1414aa0003e0000001000040e254ea00020000"], 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfffff9cd, '\x00', 0x0, r7, 0x4, 0x3, 0x2}, 0x50)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r8, 0x180000000)
r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
close(r9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5fd8157b0345a97f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00000000075005001c0012800b00010062726964676500000c00028005002d0006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r11)

3.144686725s ago: executing program 0 (id=654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
futex_waitv(&(0x7f0000001b00)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1)
r0 = io_uring_setup(0x358f, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f00000001c0)={0xfffffffd, 0xffdfffff, 0x8, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/256, 0x100, 0x1, 0xffffffff}, {}, 0x0, 0x1000}, 0x1)
syz_io_uring_setup(0x36e2, &(0x7f0000000240)={0x0, 0x3cf6, 0x8000, 0x0, 0x2c4, 0x0, r0}, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000001c0)={[0x3ff]}, 0x8)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x2d794960, 0x0, 0x28)

2.703280495s ago: executing program 3 (id=655):
unshare(0x6020400)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newchain={0x2c, 0x64, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfffd, 0x2}, {0xfffc}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x51, 0x5f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff800, 0x9, 0x80000000, 0x6, 0x5aa, 0x4, 0x3, 0x3, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)

2.404618242s ago: executing program 1 (id=657):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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")
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60840, 0x162)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880))
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40240, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000400)={'dvmrp1\x00', 0x200})
syz_emit_ethernet(0x86, &(0x7f0000000780)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x50, 0x3a, 0xff, @private1, @mcast2, {[@dstopts={0x104, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x21d}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [@srh={0x87, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}]}}}}}}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90)

2.294792555s ago: executing program 3 (id=660):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
readv(r0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1)

2.244644326s ago: executing program 0 (id=661):
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x402001) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2000004c}, 0x4000000) (async)
rseq(0x0, 0x20, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1) (async, rerun: 32)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@xdp={0x2c, 0x1, 0x0, 0x3b}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
setreuid(0x0, 0xee00) (async, rerun: 32)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) (rerun: 32)
ioprio_set$uid(0x3, r4, 0x0)

1.896663945s ago: executing program 5 (id=663):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
socket$inet(0x2, 0x4, 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x14081, 0x44440}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x10040050)
syz_emit_ethernet(0x11dc0, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="441681ed0da8", @ipv4={'\x00', '\xff\xff', @multicast1}, @link_local, @local}}}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x16, &(0x7f0000000940)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xf00, 0x71, 0x10, 0x70}, [@alu={0x4, 0xd1b53522207d3686, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x6, 0x7cc005e7945eb62a, 0x8, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x58, 0xe, 0x7, 0xc32a, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @exit, @tail_call, @tail_call]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xffff}, {0x8, 0x8}, {0xfff1, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40085)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r8 = dup(r7)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r10=>0x0})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r11, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='L', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff7fffa}, 0x1c, 0x0}}], 0x2, 0x931766f6319e6d44)
shutdown(r11, 0x1)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r9)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x854}, 0x4)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x10, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x8, 0x0, 0x53, 0x0})

1.851902646s ago: executing program 0 (id=664):
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x800003ff, 0x0, 0x2}, r2, 0x9, 0xffffffffffffffff, 0x0)
setrlimit(0xd, &(0x7f0000000100)={0x1, 0x3})
timer_create(0x0, 0x0, 0x0)
timer_delete(0x0)
socket$inet6(0xa, 0x3, 0x8b86)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048102}, 0x80)

1.755487548s ago: executing program 1 (id=665):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
socket$inet(0x2, 0x4, 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x14081, 0x44440}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x10040050)
syz_emit_ethernet(0x11dc0, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="441681ed0da8", @ipv4={'\x00', '\xff\xff', @multicast1}, @link_local, @local}}}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xffff}, {0x8, 0x8}, {0xfff1, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40085)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r8 = dup(r7)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r10=>0x0})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r11, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='L', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff7fffa}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319e6d44)
shutdown(r11, 0x1)
syz_genetlink_get_family_id$team(&(0x7f0000000540), r9)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x10, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x8, 0x0, 0x53, 0x0})

1.700610529s ago: executing program 3 (id=667):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB="85822c00"], 0x5, 0xa30, &(0x7f0000001a00)="$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")
socket(0x23, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstat(0xffffffffffffffff, &(0x7f0000000180))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
write(r3, 0x0, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x40001}, 0xc)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16)
write(r3, &(0x7f0000000000)='\"', 0xfdef)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x4, 0xfc, "cff03f4c0040fbffff9bffffffff00"})
syz_open_pts(0xffffffffffffffff, 0x4c0800)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r4, &(0x7f0000000140)="1000", 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f00000001c0)="240000001a005f0400f9f40700090401802000ff03000000000000000800020000000045", 0x24)

1.326068388s ago: executing program 5 (id=670):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x6, r1})
mprotect(&(0x7f0000310000/0x1000)=nil, 0x1000, 0x3)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x880)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x10001, 0xbf}, 0x1}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r7=>0x0})
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x10000, @vifc_lcl_ifindex=r7, @empty}, 0x10)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14)

1.282640439s ago: executing program 1 (id=671):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x872a, 0x85, 0x7, 0x2}]})
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x90, 0x7, 0x81, 0x6}, {0x7, 0x2e, 0xe7, 0xffffffff}]})
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)

1.180735462s ago: executing program 2 (id=672):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB="85822c00"], 0x5, 0xa30, &(0x7f0000001a00)="$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")
socket(0x23, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstat(0xffffffffffffffff, &(0x7f0000000180))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
write(r3, 0x0, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x40001}, 0xc)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16)
write(r3, &(0x7f0000000000)='\"', 0xfdef)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x4, 0xfc, "cff03f4c0040fbffff9bffffffff00"})
syz_open_pts(0xffffffffffffffff, 0x4c0800)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="1000", 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f00000001c0)="240000001a005f0400f9f40700090401802000ff03000000000000000800020000000045", 0x24)

1.180510782s ago: executing program 1 (id=673):
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108e600000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

1.069271404s ago: executing program 3 (id=674):
clock_gettime(0x578fed44caa332b9, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x420, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbff}, 0x50}}, 0x5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660a000000000000611190ff00000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x4}, 0x0, 0x1, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
close(r0)

1.007620426s ago: executing program 5 (id=675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e008900000dfb6c575b43f86dd60", 0x13}, {&(0x7f00000001c0)="0000ff00000002f814a74cb3addda147fb682a6bf9d594503d1009f073dab11b65a5923005721bdb241e8d85776cd4", 0x2f}], 0x2)

979.038537ms ago: executing program 3 (id=676):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xac182)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, 0x0, 0x200008c0)
close(0x3)
shmget$private(0x100000000000000, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r5 = socket$inet(0x2, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000d00)='nf   127.0.0.1 -\\000\\:000 l\\calhost\n', 0x24)
setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000ffffffffff00000000000000000000000000000000000000000000000200000000000000002000000000000000000000000000006215cc7397d0edd7e9f4c3bcd3477731acb48e146c59e001f022d6300d3ccc529a945e2c261160efabb3c91d2bc33b0000000000e84c621bb30b19012b317f21cbfd8b63f55c0bac3cc7397a21501d60365189a6f7ff7bb88a2ef3fdbe7cc200"], 0xb8}}, 0x2c000010)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1dcc1, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000022c0211"], 0x27c}}, 0x0)
sendfile(r0, r9, 0x0, 0x2)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x204800, &(0x7f0000000000)=ANY=[@ANYBLOB='map=off,unhide\x00check=strict,block=0x0000000000000800,utf8,check=strictAgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d61636f726e2c636865636b3d72656c617865742c6d61703d6f66662c6d6170396e6f726d616c2c73686f77611ba626a1fe0e"], 0x0, 0x6d8, &(0x7f00000002c0)="$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")

942.823668ms ago: executing program 2 (id=677):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x16, &(0x7f0000000940)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xf00, 0x71, 0x10, 0x70}, [@alu={0x4, 0xd1b53522207d3686, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x6, 0x7cc005e7945eb62a, 0x8, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x58, 0xe, 0x7, 0xc32a, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @exit, @tail_call, @tail_call]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0x8, 0x8}, {0xfff1, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40085)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r4 = dup(r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='L', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff7fffa}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319e6d44)
shutdown(r6, 0x1)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x854}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x10, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x8, 0x0, 0x53, 0x0})

855.23104ms ago: executing program 0 (id=678):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x4, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8d, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x5, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x7ff, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x9, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x84, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x8, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000240)={{0x67, @loopback, 0x4e21, 0x4, 'dh\x00', 0x4, 0xfffffffd, 0x75}, {@multicast1, 0x4e21, 0x2000, 0x9, 0x1, 0x5}}, 0x44)
io_setup(0x3, &(0x7f0000000180)=<r2=>0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000004c0)=<r3=>0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x23, 0x5, 0x9, 0x9, 0x0, 0x4, 0x48a87, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9, 0x8}, 0x28, 0x8, 0xe, 0x7, 0xba, 0x7, 0xfff9, 0x0, 0x6, 0x0, 0x2}, r3, 0x7, r1, 0x8)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xaa, r0, &(0x7f0000000000)="5f1acb35857f42d7be91c6693802230b45615e9a1c5c3bdbe235ebef2c0e080d54e95ce9e45113761ba1ad2c40ca3d0eb6f2ead14f8d7ca5", 0x38, 0x7, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f0000000140), 0x0, 0x7fffffffffffffff, 0x0, 0x0, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f00000002c0)="ad727959ed1a5ad81e68c957d21086b11ee9e568c5d410ef86624b1c6dc30cb757a2af237ddb73a1d0d3d590badf37dd5b", 0x31, 0xe, 0x0, 0x1, r1}])
io_submit(r2, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}])
listen(0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r6 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

633.319285ms ago: executing program 5 (id=679):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)={0x6c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0xa9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'})
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9", 0x72})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0xb}}, './file0\x00'})
connect$rds(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f0000000080)={0x3c, 0x7166, 0xfff})

519.562438ms ago: executing program 5 (id=680):
syz_emit_ethernet(0x36, &(0x7f0000000480)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "000001", 0x0, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}}}}, 0x0)

501.809258ms ago: executing program 2 (id=681):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (fail_nth: 5)

424.34791ms ago: executing program 5 (id=682):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x30000009})
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11)
epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3, @ANYRES16, @ANYRES16], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x440c0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

320.595462ms ago: executing program 2 (id=683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pread64(r0, &(0x7f0000000000), 0x0, 0x1)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0xcd, 0x4, 0x38, 0x0, 0x7, 0xe0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x1, 0x8, 0x0, 0xf, 0x7, 0x6, 0x0, 0x4, 0x0, 0x3}, r1, 0x8, 0xffffffffffffffff, 0x2)
lseek(r0, 0xa, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r2, {0x5b, 0x1}}, '\x00'})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{0x1, 0x10, 0x4, 0xba3f}, {0xf4, 0xf9, 0xb, 0x5}, {0x5, 0x2, 0x7, 0xfffffff5}, {0x8, 0x3, 0x3, 0x9}, {0x1ff, 0x81, 0x4, 0x6}, {0x7, 0x7, 0x40, 0x8}, {0xfff, 0x5, 0x6, 0x8000}, {0x3, 0x9, 0x80, 0x7}]})
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x7)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000000540)={&(0x7f0000000340)=0x1400000000, 0x4, &(0x7f0000000380)=[{}, {}], &(0x7f0000000500)})
syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = pidfd_getfd(r4, r4, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000600)=0x1, 0x4)
mount(&(0x7f0000000640)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='exofs\x00', 0x200000, 0x0)
bind(r0, &(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff}, 0x80)
getdents(r5, &(0x7f0000000780)=""/155, 0x9b)
r6 = creat(&(0x7f0000000840)='./file0\x00', 0x42)
getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=<r7=>0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000880)=@md0, r7, &(0x7f0000000980))
ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000a00))
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48021)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x61a09bbcbb840a17}, 0x4000000)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1)

221.263975ms ago: executing program 2 (id=684):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x248, 0x3e8, 0x0, 0x4d8, 0x4d8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x18000)
r2 = socket(0x10, 0x3, 0x4000000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x8d91e000)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, &(0x7f0000000100), 0x4)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010528bd70000000000000000000", @ANYBLOB="08080500000004001400128009000100766574680000000004000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

136.390577ms ago: executing program 2 (id=685):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x4}}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@acl}, {@dax_always}, {@dax}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
pwrite64(r1, &(0x7f00000007c0)="cfac", 0x2, 0x7ff)
setns(0xc9, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
listen(r2, 0x100)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x20, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}}, 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9b, 0x1ff, 0xc, 0x10002, 0xffffffffffffffff, 0x0, '\x00', r5, r1, 0x1, 0x5, 0x0, 0x0, @void, @value, @value=r1}, 0x50)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x2, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x47}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084)

0s ago: executing program 3 (id=686):
clock_gettime(0x578fed44caa332b9, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x420, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbff}, 0x50}}, 0x5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660a000000000000611190ff00000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x4}, 0x0, 0x1, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
close(r0)

kernel console output (not intermixed with test programs):

ocket permissive=1
[   47.112635][   T29] audit: type=1400 audit(1788431504.565:240): avc:  denied  { create } for  pid=3838 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   47.112661][   T29] audit: type=1400 audit(1788431504.565:241): avc:  denied  { setopt } for  pid=3838 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   47.112682][   T29] audit: type=1400 audit(1788431504.565:242): avc:  denied  { create } for  pid=3838 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   47.182858][   T29] audit: type=1400 audit(1788431504.635:243): avc:  denied  { ioctl } for  pid=3838 comm="syz.0.68" path="socket:[5839]" dev="sockfs" ino=5839 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   47.183535][   T29] audit: type=1400 audit(1788431504.635:244): avc:  denied  { connect } for  pid=3838 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   47.235977][   T29] audit: type=1400 audit(1788431504.705:245): avc:  denied  { mount } for  pid=3838 comm="syz.0.68" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   47.278608][ T3839] netlink: 'syz.0.68': attribute type 6 has an invalid length.
[   47.523336][   T29] audit: type=1400 audit(1788431504.995:246): avc:  denied  { write } for  pid=3825 comm="syz.1.64" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.577512][ T3844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.64'.
[   47.657732][   T29] audit: type=1400 audit(1788431505.135:247): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   47.784959][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.893504][ T3867] loop3: detected capacity change from 0 to 1024
[   47.894956][ T3849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3849 comm=syz.4.70
[   47.897342][ T3867] EXT4-fs: Ignoring removed orlov option
[   47.901087][ T3867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.150928][ T3854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3854 comm=syz.0.71
[   48.152048][ T3882] netlink: 132 bytes leftover after parsing attributes in process `syz.3.73'.
[   48.158496][ T3868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3868 comm=syz.1.72
[   48.198168][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.763188][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'.
[   48.763421][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'.
[   49.892941][ T3897] loop3: detected capacity change from 0 to 32768
[   49.925666][ T3897]  loop3: p1 p3 < >
[   50.423533][ T3922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3922 comm=syz.1.83
[   50.762558][ T3936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3936 comm=syz.4.87
[   50.771751][ T3950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3950 comm=syz.1.88
[   50.865393][ T3960] sg_write: data in/out 2131112924/50 bytes for SCSI command 0x0-- guessing data in;
[   50.865393][ T3960]    program syz.1.91 not setting count and/or reply_len properly
[   50.977277][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   50.989546][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   50.989651][ T3966] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   51.078448][ T3954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3954 comm=syz.4.89
[   51.262458][ T3964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3964 comm=syz.0.92
[   51.368807][ T3977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3977 comm=syz.0.94
[   51.537080][ T3983] loop0: detected capacity change from 0 to 1024
[   51.556461][ T3983] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   51.556497][ T3983] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   51.581689][ T3983] JBD2: no valid journal superblock found
[   51.581798][ T3983] EXT4-fs (loop0): Could not load journal inode
[   51.691914][ T3889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   51.884997][ T3987] loop1: detected capacity change from 0 to 1024
[   51.891787][ T3987] EXT4-fs: Ignoring removed orlov option
[   51.927740][ T3987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.173489][   T29] kauditd_printk_skb: 30 callbacks suppressed
[   52.173512][   T29] audit: type=1400 audit(1788431509.645:278): avc:  denied  { write } for  pid=3985 comm="syz.1.96" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.174583][ T3994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'.
[   52.432729][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.549150][   T29] audit: type=1400 audit(1788431510.025:279): avc:  denied  { create } for  pid=4001 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   52.593775][ T4003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4003 comm=syz.3.97
[   52.729964][   T29] audit: type=1400 audit(1788431510.205:280): avc:  denied  { listen } for  pid=4001 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   53.883267][   T29] audit: type=1400 audit(1788431511.225:281): avc:  denied  { create } for  pid=4014 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.883310][   T29] audit: type=1400 audit(1788431511.315:282): avc:  denied  { write } for  pid=4014 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   54.423937][   T29] audit: type=1400 audit(1788431511.895:283): avc:  denied  { name_bind } for  pid=4028 comm="syz.1.106" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   54.459900][   T29] audit: type=1400 audit(1788431511.935:284): avc:  denied  { map } for  pid=4028 comm="syz.1.106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   54.483957][   T29] audit: type=1400 audit(1788431511.935:285): avc:  denied  { read write } for  pid=4028 comm="syz.1.106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   54.655297][ T4034] loop0: detected capacity change from 0 to 1024
[   54.655651][ T4034] EXT4-fs: Ignoring removed orlov option
[   54.660165][ T4034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.667504][   T29] audit: type=1400 audit(1788431512.135:286): avc:  denied  { write } for  pid=4033 comm="syz.0.107" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   54.713391][ T4034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.107'.
[   54.729636][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.731239][   T29] audit: type=1400 audit(1788431512.185:287): avc:  denied  { write } for  pid=4033 comm="syz.0.107" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.749560][ T4063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4063 comm=syz.0.110
[   55.787720][ T4064] loop2: detected capacity change from 0 to 1024
[   55.798445][ T4064] EXT4-fs: Ignoring removed orlov option
[   55.808610][ T4064] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   55.962929][ T4064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.962946][ T4064] IPv6: NLM_F_CREATE should be set when creating new route
[   55.962961][ T4064] IPv6: NLM_F_CREATE should be set when creating new route
[   55.962971][ T4064] IPv6: NLM_F_CREATE should be set when creating new route
[   56.146695][ T4071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.115'.
[   56.147788][ T4071] bridge_slave_0: left allmulticast mode
[   56.147814][ T4071] bridge_slave_0: left promiscuous mode
[   56.147909][ T4071] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.286751][ T4084] loop2: detected capacity change from 0 to 512
[   57.026862][ T4084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.170667][ T4084] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.112: bad orphan inode 16
[   57.170732][ T4084] loop2: lost filesystem error report for type 5 error -117
[   57.180816][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   57.180835][    C1] EXT4-fs (loop2): initial error at time 1788431514: ext4_orphan_get:1429
[   57.180857][    C1] EXT4-fs (loop2): last error at time 1788431514: ext4_orphan_get:1429
[   57.180903][ T4084] ext4_test_bit(bit=15, block=18) = 1
[   57.180914][ T4084] is_bad_inode(inode)=0
[   57.180920][ T4084] NEXT_ORPHAN(inode)=83886080
[   57.180927][ T4084] max_ino=32
[   57.180933][ T4084] i_nlink=0
[   57.205134][ T4084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.205241][ T4084] ext4 filesystem being mounted at /21/myconfig supports timestamps until 2038-01-19 (0x7fffffff)
[   57.230608][   T51] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   57.230718][   T51] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1
[   57.949545][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.953543][ T4095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4095 comm=syz.3.118
[   59.335254][ T4114] loop0: detected capacity change from 0 to 1764
[   59.343530][ T4114] iso9660: Unknown parameter '…‚'
[   59.359088][   T29] audit: type=1400 audit(1788431516.835:288): avc:  denied  { create } for  pid=4113 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   59.973501][   T29] audit: type=1326 audit(1788431517.435:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02c3f0e159 code=0x0
[   60.002558][ T4131] loop1: detected capacity change from 0 to 1024
[   60.010470][ T4131] EXT4-fs: Ignoring removed orlov option
[   60.023403][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.042994][   T29] audit: type=1400 audit(1788431517.525:290): avc:  denied  { write } for  pid=4130 comm="syz.1.127" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.140507][   T29] audit: type=1400 audit(1788431517.615:291): avc:  denied  { write } for  pid=4130 comm="syz.1.127" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.164612][ T4131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.127'.
[   60.307536][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.555736][ T4148] loop3: detected capacity change from 0 to 1024
[   60.568215][ T4148] =======================================================
[   60.568215][ T4148] WARNING: The mand mount option has been deprecated and
[   60.568215][ T4148]          and is ignored by this kernel. Remove the mand
[   60.568215][ T4148]          option from the mount to silence this warning.
[   60.568215][ T4148] =======================================================
[   60.852415][ T4148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.852553][ T4148] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.886201][   T29] audit: type=1400 audit(1788431518.365:292): avc:  denied  { write } for  pid=4147 comm="syz.3.132" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.886302][   T29] audit: type=1400 audit(1788431518.365:293): avc:  denied  { rmdir } for  pid=4147 comm="syz.3.132" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.930605][ T4148] EXT4-fs warning (device loop3): ext4_empty_dir:3106: inode #12: comm syz.3.132: directory missing '..'
[   60.942254][ T4157] MTRR 0 not used
[   61.110293][   T29] audit: type=1400 audit(1788431518.585:294): avc:  denied  { getopt } for  pid=4147 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   61.110903][   T29] audit: type=1400 audit(1788431518.585:295): avc:  denied  { write } for  pid=4147 comm="syz.3.132" path="socket:[7482]" dev="sockfs" ino=7482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   61.111259][   T29] audit: type=1400 audit(1788431518.585:296): avc:  denied  { setattr } for  pid=4147 comm="syz.3.132" name="CAN_ISOTP" dev="sockfs" ino=7482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   61.360726][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   63.393315][ T4200] loop1: detected capacity change from 0 to 1024
[   63.398256][ T4200] EXT4-fs: Ignoring removed orlov option
[   63.455662][ T4200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.543249][   T29] audit: type=1400 audit(1788431521.015:297): avc:  denied  { write } for  pid=4197 comm="syz.1.142" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.613004][   T29] audit: type=1400 audit(1788431521.085:298): avc:  denied  { write } for  pid=4197 comm="syz.1.142" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.634491][ T4192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4192 comm=syz.2.141
[   63.635190][ T4200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.142'.
[   63.659809][   T29] audit: type=1326 audit(1788431521.145:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.143" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff123e3e159 code=0x0
[   63.724193][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.871557][ T4211] MTRR 0 not used
[   64.355337][ T4222] loop1: detected capacity change from 0 to 1024
[   64.364725][ T4222] EXT4-fs: Ignoring removed orlov option
[   64.393753][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.416931][   T29] audit: type=1400 audit(1788431521.895:300): avc:  denied  { write } for  pid=4218 comm="syz.1.146" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.484457][ T4230] loop3: detected capacity change from 0 to 1024
[   64.491286][ T4230] EXT4-fs: Ignoring removed orlov option
[   64.500677][ T4230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.517727][   T29] audit: type=1400 audit(1788431521.995:301): avc:  denied  { write } for  pid=4229 comm="syz.3.151" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.621675][ T4222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.146'.
[   64.622049][   T29] audit: type=1400 audit(1788431522.095:302): avc:  denied  { write } for  pid=4218 comm="syz.1.146" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.972840][   T29] audit: type=1400 audit(1788431522.445:303): avc:  denied  { write } for  pid=4229 comm="syz.3.151" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.989583][ T4230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.151'.
[   65.591865][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.774763][ T4235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4235 comm=syz.2.152
[   65.789789][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.392106][   T29] audit: type=1400 audit(1788431523.865:304): avc:  denied  { sqpoll } for  pid=4257 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   66.650694][ T4265] MTRR 0 not used
[   66.840008][   T29] audit: type=1326 audit(1788431524.315:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.0.162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff123e3e159 code=0x0
[   67.084595][   T29] audit: type=1326 audit(1788431524.555:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300b7fe159 code=0x0
[   67.327490][ T4304] xt_hashlimit: size too large, truncated to 1048576
[   67.392451][ T4320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4320 comm=syz.1.165
[   67.512595][ T4300] syz.1.165 (4300) used greatest stack depth: 9864 bytes left
[   68.126643][ T4312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4312 comm=syz.3.168
[   68.828614][ T4339] loop0: detected capacity change from 0 to 1764
[   68.829371][ T4339] iso9660: Unknown parameter '…‚'
[   68.946436][ T4349] loop2: detected capacity change from 0 to 128
[   68.955922][ T4347] MTRR 0 not used
[   68.992191][ T4349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   69.006814][ T4349] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.117989][   T29] kauditd_printk_skb: 1 callbacks suppressed
[   69.118011][   T29] audit: type=1400 audit(1788431526.595:308): avc:  denied  { write } for  pid=4348 comm="syz.2.176" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.118041][   T29] audit: type=1400 audit(1788431526.595:309): avc:  denied  { create } for  pid=4348 comm="syz.2.176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   69.159371][   T29] audit: type=1400 audit(1788431526.635:310): avc:  denied  { module_request } for  pid=4356 comm="syz.0.178" kmod="net-pf-2-proto-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   69.206136][   T29] audit: type=1400 audit(1788431526.675:311): avc:  denied  { bpf } for  pid=4356 comm="syz.0.178" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.206168][   T29] audit: type=1400 audit(1788431526.675:312): avc:  denied  { perfmon } for  pid=4356 comm="syz.0.178" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.432358][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.864493][   T29] audit: type=1400 audit(1788431527.275:313): avc:  denied  { block_suspend } for  pid=4367 comm="syz.1.181" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.955871][   T29] audit: type=1400 audit(1788431527.435:314): avc:  denied  { write } for  pid=4380 comm="syz.2.182" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   69.955936][   T29] audit: type=1400 audit(1788431527.435:315): avc:  denied  { open } for  pid=4380 comm="syz.2.182" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.028421][   T29] audit: type=1400 audit(1788431527.505:316): avc:  denied  { write } for  pid=4380 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.121220][ T4381] bond1: entered promiscuous mode
[   70.140648][ T4381] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.251078][   T29] audit: type=1400 audit(1788431527.725:317): avc:  denied  { wake_alarm } for  pid=4394 comm="syz.2.187" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   70.405281][ T4409] loop2: detected capacity change from 0 to 1764
[   70.412074][ T4409] iso9660: Unknown parameter '…‚'
[   70.588874][ T4418] netlink: 68 bytes leftover after parsing attributes in process `syz.2.191'.
[   70.731884][ T4406] MTRR 0 not used
[   70.935837][ T4418] @: renamed from bridge_slave_0 (while UP)
[   70.939071][ T4418] @: left allmulticast mode
[   70.939100][ T4418] @: left promiscuous mode
[   70.939564][ T4418] bridge0: port 1(@) entered disabled state
[   71.692160][ T4453] sctp: [Deprecated]: syz.0.196 (pid 4453) Use of int in maxseg socket option.
[   71.692160][ T4453] Use struct sctp_assoc_value instead
[   72.705155][ T4499] loop0: detected capacity change from 0 to 1024
[   72.713921][ T4499] EXT4-fs: Ignoring removed orlov option
[   72.725838][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.877256][ T4499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.206'.
[   72.900842][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.228706][ T4511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4511 comm=syz.2.207
[   73.404073][ T4485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4485 comm=syz.4.203
[   73.411826][ T4520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4520 comm=syz.1.209
[   73.416517][ T4528] loop0: detected capacity change from 0 to 128
[   73.441348][ T4528] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.442075][ T4528] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.498243][ T4528] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   73.806366][ T4557] netlink: 68 bytes leftover after parsing attributes in process `syz.1.218'.
[   73.824601][ T4557] @: renamed from bridge_slave_0 (while UP)
[   73.842915][ T4557] @: left allmulticast mode
[   73.842943][ T4557] @: left promiscuous mode
[   73.843085][ T4557] bridge0: port 1(@) entered disabled state
[   73.868587][ T4542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4542 comm=syz.2.213
[   74.060531][ T4567] loop2: detected capacity change from 0 to 164
[   74.128941][   T29] kauditd_printk_skb: 28 callbacks suppressed
[   74.128987][   T29] audit: type=1400 audit(1788431531.605:346): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   74.148777][ T4572] FAULT_INJECTION: forcing a failure.
[   74.148777][ T4572] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   74.148818][ T4572] CPU: 0 UID: 0 PID: 4572 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(lazy) 
[   74.148882][ T4572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.148903][ T4572] Call Trace:
[   74.148910][ T4572]  <TASK>
[   74.148918][ T4572]  __dump_stack+0x1d/0x30
[   74.148946][ T4572]  dump_stack_lvl+0x95/0xd0
[   74.148969][ T4572]  dump_stack+0x15/0x1b
[   74.149039][ T4572]  should_fail_ex+0x262/0x280
[   74.149063][ T4572]  should_fail+0xb/0x20
[   74.149082][ T4572]  should_fail_usercopy+0x1a/0x20
[   74.149107][ T4572]  _copy_from_user+0x1c/0xb0
[   74.149210][ T4572]  ___sys_sendmsg+0xc1/0x1e0
[   74.149250][ T4572]  __sys_sendmmsg+0x185/0x320
[   74.149289][ T4572]  __x64_sys_sendmmsg+0x57/0x70
[   74.149367][ T4572]  x64_sys_call+0x1fb4/0x2550
[   74.149393][ T4572]  do_syscall_64+0x112/0x360
[   74.149505][ T4572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.149529][ T4572] RIP: 0033:0x7efd36fde159
[   74.149549][ T4572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.149661][ T4572] RSP: 002b:00007efd35a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   74.149714][ T4572] RAX: ffffffffffffffda RBX: 00007efd37265fa0 RCX: 00007efd36fde159
[   74.149730][ T4572] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[   74.149745][ T4572] RBP: 00007efd35a37090 R08: 0000000000000000 R09: 0000000000000000
[   74.149765][ T4572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.149779][ T4572] R13: 00007efd37266038 R14: 00007efd37265fa0 R15: 00007ffee8253128
[   74.149844][ T4572]  </TASK>
[   74.294447][ T4573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.446096][ T4573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.669457][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.800259][ T4573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.871386][ T4573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.971489][   T42] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.993479][   T42] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.013833][ T4599] FAULT_INJECTION: forcing a failure.
[   75.013833][ T4599] name failslab, interval 1, probability 0, space 0, times 1
[   75.013905][   T42] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.014017][   T42] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.015139][ T4599] CPU: 0 UID: 0 PID: 4599 Comm: syz.1.230 Not tainted syzkaller #0 PREEMPT(lazy) 
[   75.015165][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.015252][ T4599] Call Trace:
[   75.015258][ T4599]  <TASK>
[   75.015265][ T4599]  __dump_stack+0x1d/0x30
[   75.015291][ T4599]  dump_stack_lvl+0x95/0xd0
[   75.015314][ T4599]  dump_stack+0x15/0x1b
[   75.015334][ T4599]  should_fail_ex+0x262/0x280
[   75.015381][ T4599]  ? __se_sys_memfd_create+0x1df/0x3b0
[   75.015408][ T4599]  should_failslab+0x8c/0xb0
[   75.015436][ T4599]  __kmalloc_cache_noprof+0x7a/0x400
[   75.015472][ T4599]  ? __se_sys_memfd_create+0x1df/0x3b0
[   75.015501][ T4599]  __se_sys_memfd_create+0x1df/0x3b0
[   75.015529][ T4599]  __x64_sys_memfd_create+0x31/0x40
[   75.015556][ T4599]  x64_sys_call+0x1955/0x2550
[   75.015637][ T4599]  do_syscall_64+0x112/0x360
[   75.015666][ T4599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.015690][ T4599] RIP: 0033:0x7f300b7fe159
[   75.015706][ T4599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.015773][ T4599] RSP: 002b:00007f300a257028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[   75.015794][ T4599] RAX: ffffffffffffffda RBX: 00007f300ba85fa0 RCX: 00007f300b7fe159
[   75.015809][ T4599] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   75.015822][ T4599] RBP: 00007f300a257090 R08: 0000000000000000 R09: 0000000000000000
[   75.015836][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.015850][ T4599] R13: 00007f300ba86038 R14: 00007f300ba85fa0 R15: 00007ffd667e0f48
[   75.015883][ T4599]  </TASK>
[   75.028042][ T4597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4597 comm=syz.0.229
[   75.148616][ T4605] loop4: detected capacity change from 0 to 1024
[   75.150858][ T4605] EXT4-fs: Ignoring removed orlov option
[   75.176793][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.193379][   T29] audit: type=1400 audit(1788431532.665:347): avc:  denied  { write } for  pid=4604 comm="syz.4.231" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.193409][   T29] audit: type=1400 audit(1788431532.665:348): avc:  denied  { create } for  pid=4604 comm="syz.4.231" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.194803][   T29] audit: type=1400 audit(1788431532.675:349): avc:  denied  { read open } for  pid=4604 comm="syz.4.231" path="/48/file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.219315][ T4609] loop3: detected capacity change from 0 to 1024
[   75.222454][ T4609] EXT4-fs: Ignoring removed orlov option
[   75.233298][ T4609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.243984][   T29] audit: type=1400 audit(1788431532.725:350): avc:  denied  { write } for  pid=4608 comm="syz.3.233" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.256898][ T4612] loop2: detected capacity change from 0 to 512
[   75.277097][ T4612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.277169][ T4612] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.287973][   T29] audit: type=1400 audit(1788431532.765:351): avc:  denied  { write } for  pid=4610 comm="syz.2.234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.288796][   T29] audit: type=1400 audit(1788431532.765:352): avc:  denied  { append } for  pid=4610 comm="syz.2.234" path="/46/file0/freezer.parent_freezing" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.294883][   T29] audit: type=1400 audit(1788431532.775:353): avc:  denied  { setattr } for  pid=4610 comm="syz.2.234" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.307711][   T29] audit: type=1400 audit(1788431532.785:354): avc:  denied  { write } for  pid=4610 comm="syz.2.234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.308396][   T29] audit: type=1400 audit(1788431532.785:355): avc:  denied  { read write } for  pid=4610 comm="syz.2.234" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   75.315990][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.316095][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.329551][ T4605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.231'.
[   75.335895][ T4609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.233'.
[   75.368837][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.414728][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.558545][ T4631] loop4: detected capacity change from 0 to 512
[   75.888830][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.989528][ T4651] syz_tun: left allmulticast mode
[   75.989557][ T4651] syz_tun: left promiscuous mode
[   75.989722][ T4651] bridge0: port 3(syz_tun) entered disabled state
[   76.090702][ T4651] bridge_slave_1: left allmulticast mode
[   76.091128][ T4651] bridge_slave_1: left promiscuous mode
[   76.106534][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.197507][ T4651] bond0: (slave bond_slave_0): Releasing backup interface
[   76.232029][ T4651] bond0: (slave bond_slave_1): Releasing backup interface
[   76.268339][ T4651] team0: Port device team_slave_0 removed
[   76.316851][ T4651] team0: Port device team_slave_1 removed
[   76.334965][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.344744][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.371313][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.371335][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.425730][ T4651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   76.557760][ T4659] team0: Port device xfrm0 added
[   76.565634][ T4662] tipc: Started in network mode
[   76.565785][ T4662] tipc: Node identity f6c32ebb8678, cluster identity 4711
[   76.565843][ T4662] tipc: Enabled bearer <eth:team0>, priority 0
[   76.827500][ T4658] syz.3.241 (4658) used greatest stack depth: 9744 bytes left
[   76.860863][ T3297] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   76.860950][ T3297] FAT-fs (loop4): Filesystem has been set read-only
[   76.861044][ T3297] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   76.891050][ T3297] bridge0: port 3(syz_tun) entered disabled state
[   76.894332][ T3297] syz_tun (unregistering): left allmulticast mode
[   76.894380][ T3297] syz_tun (unregistering): left promiscuous mode
[   76.894462][ T3297] bridge0: port 3(syz_tun) entered disabled state
[   77.080935][ T4689] loop2: detected capacity change from 0 to 1024
[   77.091215][ T4689] EXT4-fs: Ignoring removed orlov option
[   77.101093][ T4689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.192524][ T4689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.249'.
[   77.265192][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.400509][ T4697] FAULT_INJECTION: forcing a failure.
[   77.400509][ T4697] name failslab, interval 1, probability 0, space 0, times 0
[   77.400563][ T4697] CPU: 0 UID: 0 PID: 4697 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(lazy) 
[   77.400587][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   77.400601][ T4697] Call Trace:
[   77.400617][ T4697]  <TASK>
[   77.400624][ T4697]  __dump_stack+0x1d/0x30
[   77.400647][ T4697]  dump_stack_lvl+0x95/0xd0
[   77.400684][ T4697]  dump_stack+0x15/0x1b
[   77.400706][ T4697]  should_fail_ex+0x262/0x280
[   77.400728][ T4697]  ? bpf_prog_alloc_no_stats+0xc4/0x390
[   77.400753][ T4697]  should_failslab+0x8c/0xb0
[   77.400849][ T4697]  __kmalloc_cache_noprof+0x7a/0x400
[   77.400954][ T4697]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   77.401025][ T4697]  ? bpf_prog_alloc_no_stats+0xc4/0x390
[   77.401049][ T4697]  bpf_prog_alloc_no_stats+0xc4/0x390
[   77.401079][ T4697]  bpf_prog_alloc+0x3c/0x150
[   77.401099][ T4697]  bpf_prog_load+0x54b/0x1060
[   77.401186][ T4697]  ? avc_has_perm_noaudit+0xa3/0x120
[   77.401216][ T4697]  ? vfs_write+0x7b0/0x9a0
[   77.401241][ T4697]  __sys_bpf+0xbae/0xc30
[   77.401265][ T4697]  ? vfs_write+0x7b0/0x9a0
[   77.401317][ T4697]  ? vfs_write+0x7b0/0x9a0
[   77.401346][ T4697]  __x64_sys_bpf+0x69/0x80
[   77.401368][ T4697]  x64_sys_call+0xf26/0x2550
[   77.401425][ T4697]  do_syscall_64+0x112/0x360
[   77.401454][ T4697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.401556][ T4697] RIP: 0033:0x7f02c3f0e159
[   77.401573][ T4697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.401591][ T4697] RSP: 002b:00007f02c2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   77.401613][ T4697] RAX: ffffffffffffffda RBX: 00007f02c4195fa0 RCX: 00007f02c3f0e159
[   77.401672][ T4697] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[   77.401686][ T4697] RBP: 00007f02c2967090 R08: 0000000000000000 R09: 0000000000000000
[   77.401700][ T4697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.401713][ T4697] R13: 00007f02c4196038 R14: 00007f02c4195fa0 R15: 00007fff8e17a3d8
[   77.401731][ T4697]  </TASK>
[   77.446563][ T4699] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[   77.451660][ T4700] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   77.588809][ T4704] capability: warning: `syz.2.253' uses 32-bit capabilities (legacy support in use)
[   77.687605][ T3376] tipc: Node number set to 1891315387
[   78.136966][ T4712] loop2: detected capacity change from 0 to 4096
[   78.169852][ T4712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.316118][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.044697][ T4730] bridge0: entered allmulticast mode
[   79.140795][ T4737] bridge0: port 1(syz_tun) entered blocking state
[   79.140838][ T4737] bridge0: port 1(syz_tun) entered disabled state
[   79.140928][ T4737] syz_tun: entered allmulticast mode
[   79.141449][ T4737] syz_tun: entered promiscuous mode
[   79.214456][ T4741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.214674][ T4741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.355781][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   79.413662][ T4737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4737 comm=syz.1.261
[   79.430842][ T4748] loop3: detected capacity change from 0 to 1024
[   79.434660][ T4748] EXT4-fs: Ignoring removed orlov option
[   79.450775][ T4746] loop2: detected capacity change from 0 to 512
[   79.460707][ T4748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.476811][ T4746] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.262: Invalid inode bitmap blk 4 in block_group 0
[   79.476923][ T4746] loop2: lost filesystem error report for type 5 error -117
[   79.493425][ T4746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.532474][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   79.532498][   T29] audit: type=1400 audit(1788431537.005:389): avc:  denied  { write } for  pid=4747 comm="syz.3.263" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.535288][ T4746] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.262: inode has both inline data and extents flags
[   79.536081][   T29] audit: type=1400 audit(1788431537.005:388): avc:  denied  { write } for  pid=4745 comm="syz.2.262" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.546444][   T29] audit: type=1400 audit(1788431537.025:390): avc:  denied  { write } for  pid=4745 comm="syz.2.262" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.560281][   T29] audit: type=1400 audit(1788431537.035:391): avc:  denied  { create } for  pid=4747 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.580711][   T29] audit: type=1400 audit(1788431537.055:392): avc:  denied  { setopt } for  pid=4747 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.691946][   T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.712941][   T29] audit: type=1400 audit(1788431537.185:393): avc:  denied  { write } for  pid=4747 comm="syz.3.263" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.719010][ T4748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.263'.
[   79.756377][   T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.232513][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.247001][   T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.248624][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.302498][   T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.338803][   T29] audit: type=1400 audit(1788431537.815:394): avc:  denied  { read } for  pid=4763 comm="syz.3.267" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   80.338840][   T29] audit: type=1400 audit(1788431537.815:395): avc:  denied  { open } for  pid=4763 comm="syz.3.267" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   80.341897][ T4762] loop2: detected capacity change from 0 to 1764
[   80.344927][ T4762] iso9660: Unknown parameter '…‚'
[   80.681886][   T12] bridge_slave_1: left allmulticast mode
[   80.681973][   T12] bridge_slave_1: left promiscuous mode
[   80.682107][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.693738][   T12] bridge_slave_0: left allmulticast mode
[   80.693759][   T12] bridge_slave_0: left promiscuous mode
[   80.693884][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.828963][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.839554][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.840385][   T12] bond0 (unregistering): Released all slaves
[   81.068263][   T12] hsr_slave_0: left promiscuous mode
[   81.087296][   T29] audit: type=1400 audit(1788431538.565:396): avc:  denied  { write } for  pid=4784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.093723][   T12] hsr_slave_1: left promiscuous mode
[   81.094286][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.094299][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.112248][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.112328][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.141119][   T12] veth1_macvtap: left promiscuous mode
[   81.141146][   T12] veth0_macvtap: left promiscuous mode
[   81.141198][   T12] veth1_vlan: left promiscuous mode
[   81.141231][   T12] veth0_vlan: left promiscuous mode
[   81.160596][   T29] audit: type=1400 audit(1788431538.635:397): avc:  denied  { write } for  pid=4802 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.251320][ T4777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4777 comm=syz.3.272
[   81.348049][   T12] team0 (unregistering): Port device team_slave_1 removed
[   81.350526][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.419063][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1
[   81.570182][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[   81.663089][ T4818] loop1: detected capacity change from 0 to 1024
[   81.663495][ T4818] journal_path: Lookup failure for './file0'
[   81.663557][ T4818] EXT4-fs: error: could not find journal device path
[   81.712967][ T4813] vcan0 speed is unknown, defaulting to 1000
[   81.713815][ T4813] vcan0 speed is unknown, defaulting to 1000
[   81.714081][ T4813] vcan0 speed is unknown, defaulting to 1000
[   81.780031][ T4813] infiniband syz0: set active
[   81.780050][ T4813] infiniband syz0: added vcan0
[   81.780135][ T4058] vcan0 speed is unknown, defaulting to 1000
[   81.789286][ T4813] RDS/IB: syz0: added
[   81.789354][ T4813] smc: adding ib device syz0 with port count 1
[   81.789368][ T4813] smc:    ib device syz0 port 1 has no pnetid
[   81.789520][ T4813] vcan0 speed is unknown, defaulting to 1000
[   81.790468][ T4058] vcan0 speed is unknown, defaulting to 1000
[   82.029232][ T4818] vcan0 speed is unknown, defaulting to 1000
[   82.391545][ T4837] FAULT_INJECTION: forcing a failure.
[   82.391545][ T4837] name failslab, interval 1, probability 0, space 0, times 0
[   82.391947][ T4837] CPU: 1 UID: 0 PID: 4837 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(lazy) 
[   82.391976][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.392030][ T4837] Call Trace:
[   82.392038][ T4837]  <TASK>
[   82.392046][ T4837]  __dump_stack+0x1d/0x30
[   82.392070][ T4837]  dump_stack_lvl+0x95/0xd0
[   82.392092][ T4837]  dump_stack+0x15/0x1b
[   82.392154][ T4837]  should_fail_ex+0x262/0x280
[   82.392173][ T4837]  ? alloc_empty_file+0x70/0x1e0
[   82.392198][ T4837]  should_failslab+0x8c/0xb0
[   82.392319][ T4837]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   82.392346][ T4837]  ? alloc_empty_file+0x70/0x1e0
[   82.392369][ T4837]  alloc_empty_file+0x70/0x1e0
[   82.392440][ T4837]  alloc_file_pseudo+0x92/0x120
[   82.392461][ T4837]  __shmem_file_setup+0x226/0x260
[   82.392492][ T4837]  shmem_file_setup+0x3b/0x50
[   82.392537][ T4837]  memfd_alloc_file+0x4e/0x300
[   82.392583][ T4837]  __se_sys_memfd_create+0x2e1/0x3b0
[   82.392614][ T4837]  __x64_sys_memfd_create+0x31/0x40
[   82.392644][ T4837]  x64_sys_call+0x1955/0x2550
[   82.392777][ T4837]  do_syscall_64+0x112/0x360
[   82.392807][ T4837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.392831][ T4837] RIP: 0033:0x7f02c3f0e159
[   82.392847][ T4837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.392872][ T4837] RSP: 002b:00007f02c2946028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[   82.392951][ T4837] RAX: ffffffffffffffda RBX: 00007f02c4196090 RCX: 00007f02c3f0e159
[   82.392966][ T4837] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000
[   82.392980][ T4837] RBP: 00007f02c2946090 R08: 0000000000000000 R09: 0000000000000000
[   82.392994][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.393006][ T4837] R13: 00007f02c4196128 R14: 00007f02c4196090 R15: 00007fff8e17a3d8
[   82.393025][ T4837]  </TASK>
[   82.830573][ T4830] vcan0 speed is unknown, defaulting to 1000
[   82.830636][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.830745][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.830896][ T4765] bridge_slave_0: entered allmulticast mode
[   82.831301][ T4765] bridge_slave_0: entered promiscuous mode
[   82.857446][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.857485][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.857543][ T4765] bridge_slave_1: entered allmulticast mode
[   82.861403][ T4765] bridge_slave_1: entered promiscuous mode
[   82.926135][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2
[   82.931862][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.024949][ T4859] loop0: detected capacity change from 0 to 1764
[   83.033600][ T4859] iso9660: Unknown parameter '…‚'
[   83.079286][ T4765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.086216][ T4765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.086342][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.174551][ T4765] team0: Port device team_slave_0 added
[   83.175472][ T4765] team0: Port device team_slave_1 added
[   83.232989][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.233008][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.233039][ T4765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.278246][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.288002][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.288018][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.288053][ T4765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.378019][ T4765] hsr_slave_0: entered promiscuous mode
[   83.390222][ T4765] hsr_slave_1: entered promiscuous mode
[   83.390501][ T4765] debugfs: 'hsr0' already exists in 'hsr'
[   83.390520][ T4765] Cannot create hsr debugfs directory
[   83.533126][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.568848][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.605034][ T4813] vcan0 speed is unknown, defaulting to 1000
[   83.631198][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3
[   83.896046][ T4895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.287'.
[   84.304644][ T4902] dummy0: entered allmulticast mode
[   84.310347][ T4902] dummy0: left allmulticast mode
[   84.366707][ T4765] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   84.376676][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.377308][ T4765] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   84.441750][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.446337][ T4765] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   84.470513][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.522881][ T4765] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   84.540381][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.570850][ T4914] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   84.570879][ T4914] bridge1: entered promiscuous mode
[   84.570895][ T4914] bridge1: entered allmulticast mode
[   84.621833][   T29] kauditd_printk_skb: 68 callbacks suppressed
[   84.621855][   T29] audit: type=1400 audit(1788431542.095:466): avc:  denied  { write } for  pid=4905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.674123][   T29] audit: type=1400 audit(1788431542.155:467): avc:  denied  { create } for  pid=4927 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   84.680965][   T29] audit: type=1400 audit(1788431542.155:468): avc:  denied  { ioctl } for  pid=4927 comm="syz.0.293" path="socket:[10605]" dev="sockfs" ino=10605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   84.708919][   T29] audit: type=1400 audit(1788431542.185:469): avc:  denied  { write } for  pid=4937 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.736464][ T4765] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.755549][ T4765] 8021q: adding VLAN 0 to HW filter on device team0
[   84.769052][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.769091][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.776452][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.776485][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.783937][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4
[   85.045634][ T4934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'.
[   85.105873][   T29] audit: type=1400 audit(1788431542.585:470): avc:  denied  { write } for  pid=4931 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.135326][   T29] audit: type=1400 audit(1788431542.615:471): avc:  denied  { read } for  pid=4931 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.215771][   T29] audit: type=1400 audit(1788431542.695:472): avc:  denied  { write } for  pid=4948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.263821][ T4765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.292696][   T29] audit: type=1400 audit(1788431542.765:473): avc:  denied  { write } for  pid=4971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.463666][   T29] audit: type=1400 audit(1788431542.925:474): avc:  denied  { write } for  pid=4959 comm="syz.1.297" name="route" dev="proc" ino=4026532453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   85.463802][   T29] audit: type=1400 audit(1788431542.925:475): avc:  denied  { allowed } for  pid=4959 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   85.956301][ T4940] IPVS: Error connecting to the multicast addr
[   86.094987][ T5001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5001 comm=syz.3.298
[   86.175729][ T4765] veth0_vlan: entered promiscuous mode
[   86.189093][ T4765] veth1_vlan: entered promiscuous mode
[   86.236076][ T4765] veth0_macvtap: entered promiscuous mode
[   86.265627][ T4765] veth1_macvtap: entered promiscuous mode
[   86.291024][ T5018] FAULT_INJECTION: forcing a failure.
[   86.291024][ T5018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.291081][ T5018] CPU: 0 UID: 0 PID: 5018 Comm: syz.3.303 Not tainted syzkaller #0 PREEMPT(lazy) 
[   86.291135][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.291148][ T5018] Call Trace:
[   86.291154][ T5018]  <TASK>
[   86.291162][ T5018]  __dump_stack+0x1d/0x30
[   86.291190][ T5018]  dump_stack_lvl+0x95/0xd0
[   86.291214][ T5018]  dump_stack+0x15/0x1b
[   86.291265][ T5018]  should_fail_ex+0x262/0x280
[   86.291288][ T5018]  should_fail+0xb/0x20
[   86.291307][ T5018]  should_fail_usercopy+0x1a/0x20
[   86.291331][ T5018]  _copy_from_user+0x1c/0xb0
[   86.291382][ T5018]  sock_do_ioctl+0xe5/0x230
[   86.291406][ T5018]  sock_ioctl+0x439/0x610
[   86.291426][ T5018]  ? __se_sys_ioctl+0xbc/0x140
[   86.291456][ T5018]  ? __pfx_sock_ioctl+0x10/0x10
[   86.291476][ T5018]  __se_sys_ioctl+0xce/0x140
[   86.291559][ T5018]  __x64_sys_ioctl+0x43/0x50
[   86.291657][ T5018]  x64_sys_call+0x239d/0x2550
[   86.291684][ T5018]  do_syscall_64+0x112/0x360
[   86.291713][ T5018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.291774][ T5018] RIP: 0033:0x7efd36fde159
[   86.291791][ T5018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.291844][ T5018] RSP: 002b:00007efd35a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.291865][ T5018] RAX: ffffffffffffffda RBX: 00007efd37265fa0 RCX: 00007efd36fde159
[   86.291881][ T5018] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005
[   86.291895][ T5018] RBP: 00007efd35a37090 R08: 0000000000000000 R09: 0000000000000000
[   86.291941][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.291955][ T5018] R13: 00007efd37266038 R14: 00007efd37265fa0 R15: 00007ffee8253128
[   86.291973][ T5018]  </TASK>
[   86.295182][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.296453][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.423554][ T3530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.423638][ T3530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.423677][ T3530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.423711][ T3530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.540988][ T5034] loop2: detected capacity change from 0 to 1764
[   86.546279][ T5034] iso9660: Unknown parameter '…‚'
[   86.601678][ T5039] loop5: detected capacity change from 0 to 1764
[   86.602010][ T5039] iso9660: Unknown parameter '…‚'
[   86.852003][ T5055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   86.876810][ T5058] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   86.883863][ T5059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5059 comm=syz.0.308
[   87.155418][ T5068] vcan0 speed is unknown, defaulting to 1000
[   88.284232][ T5090] vcan0 speed is unknown, defaulting to 1000
[   88.358127][ T5101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'.
[   89.084196][ T5126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5126 comm=syz.5.326
[   89.399849][ T5141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'.
[   89.470515][ T5142] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   89.749940][ T5145] loop1: detected capacity change from 0 to 128
[   89.757234][ T5145] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   89.757317][   T29] kauditd_printk_skb: 643 callbacks suppressed
[   89.757328][   T29] audit: type=1400 audit(1788431547.225:1119): avc:  denied  { mounton } for  pid=5138 comm="syz.1.330" path="/69/bus" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   89.776592][ T5145] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   89.780284][   T29] audit: type=1400 audit(1788431547.255:1120): avc:  denied  { mount } for  pid=5138 comm="syz.1.330" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   89.790301][ T5146] 9p: Bad value for 'rfdno'
[   89.803054][   T29] audit: type=1400 audit(1788431547.265:1121): avc:  denied  { create } for  pid=5143 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.833458][   T29] audit: type=1400 audit(1788431547.305:1122): avc:  denied  { map_create } for  pid=5149 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   89.839880][   T29] audit: type=1400 audit(1788431547.315:1123): avc:  denied  { create } for  pid=5149 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.840146][   T29] audit: type=1400 audit(1788431547.315:1124): avc:  denied  { ioctl } for  pid=5149 comm="syz.3.332" path="socket:[11115]" dev="sockfs" ino=11115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.840543][   T29] audit: type=1400 audit(1788431547.315:1125): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   90.151261][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'.
[   90.152571][ T5154] bridge_slave_0: left allmulticast mode
[   90.152597][ T5154] bridge_slave_0: left promiscuous mode
[   90.174395][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.278650][   T29] audit: type=1400 audit(1788431547.755:1126): avc:  denied  { mount } for  pid=5155 comm="syz.5.336" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   90.314169][ T3658] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.620411][   T29] audit: type=1400 audit(1788431548.075:1127): avc:  denied  { connect } for  pid=5160 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   90.637372][   T29] audit: type=1400 audit(1788431548.115:1128): avc:  denied  { ioctl } for  pid=5160 comm="syz.1.334" path="socket:[11395]" dev="sockfs" ino=11395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   90.716137][ T5159] vcan0 speed is unknown, defaulting to 1000
[   91.211324][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.341'.
[   91.502438][ T5178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5178 comm=syz.3.339
[   91.557309][ T5175] MTRR 0 not used
[   91.697092][ T5217] tipc: Can't bind to reserved service type 2
[   91.982555][ T5240] loop2: detected capacity change from 0 to 1764
[   91.989513][ T5240] iso9660: Unknown parameter '…‚'
[   92.096913][ T5250] bridge0: port 3(syz_tun) entered blocking state
[   92.096951][ T5250] bridge0: port 3(syz_tun) entered disabled state
[   92.097085][ T5250] syz_tun: entered allmulticast mode
[   92.122325][ T5250] syz_tun: entered promiscuous mode
[   92.122508][ T5250] bridge0: port 3(syz_tun) entered blocking state
[   92.122543][ T5250] bridge0: port 3(syz_tun) entered forwarding state
[   92.178932][ T5257] loop3: detected capacity change from 0 to 128
[   92.191844][ T5257] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.205052][ T5257] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.313022][ T5257] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   92.336160][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5250 comm=syz.5.350
[   92.361303][ T5217] loop0: detected capacity change from 0 to 512
[   92.399289][ T5217] EXT4-fs: dax option not supported
[   92.416338][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.504571][ T5274] netlink: 'syz.3.355': attribute type 20 has an invalid length.
[   92.504596][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'.
[   92.540698][ T5274] netlink: 'syz.3.355': attribute type 20 has an invalid length.
[   92.540724][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'.
[   92.553457][  T313] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.553645][  T313] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.553679][  T313] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.553713][  T313] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.660933][ T5217] netlink: 164 bytes leftover after parsing attributes in process `syz.0.345'.
[   92.673487][ T5276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5276 comm=syz.1.356
[   92.730675][ T5287] netlink: 'syz.5.359': attribute type 8 has an invalid length.
[   92.730720][ T5287] netlink: 48 bytes leftover after parsing attributes in process `syz.5.359'.
[   92.731755][ T5287] bridge_slave_0: left allmulticast mode
[   92.731773][ T5287] bridge_slave_0: left promiscuous mode
[   92.731913][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.991243][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5303 comm=syz.0.365
[   93.224070][ T5325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'.
[   93.315612][ T5329] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[   93.431120][ T5333] FAULT_INJECTION: forcing a failure.
[   93.431120][ T5333] name failslab, interval 1, probability 0, space 0, times 0
[   93.431152][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(lazy) 
[   93.431175][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.431227][ T5333] Call Trace:
[   93.431234][ T5333]  <TASK>
[   93.431243][ T5333]  __dump_stack+0x1d/0x30
[   93.431271][ T5333]  dump_stack_lvl+0x95/0xd0
[   93.431294][ T5333]  dump_stack+0x15/0x1b
[   93.431313][ T5333]  should_fail_ex+0x262/0x280
[   93.431389][ T5333]  ? __se_sys_mount+0xef/0x2e0
[   93.431425][ T5333]  should_failslab+0x8c/0xb0
[   93.431452][ T5333]  __kmalloc_cache_noprof+0x7a/0x400
[   93.431503][ T5333]  ? __se_sys_mount+0xef/0x2e0
[   93.431601][ T5333]  ? memdup_user+0x99/0xd0
[   93.431700][ T5333]  __se_sys_mount+0xef/0x2e0
[   93.431737][ T5333]  ? fput+0x91/0xc0
[   93.431783][ T5333]  ? ksys_write+0x194/0x1a0
[   93.431810][ T5333]  __x64_sys_mount+0x67/0x80
[   93.431850][ T5333]  x64_sys_call+0xc3b/0x2550
[   93.431875][ T5333]  do_syscall_64+0x112/0x360
[   93.431922][ T5333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.431968][ T5333] RIP: 0033:0x7ff123e3e159
[   93.431984][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.432001][ T5333] RSP: 002b:00007ff122897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   93.432025][ T5333] RAX: ffffffffffffffda RBX: 00007ff1240c5fa0 RCX: 00007ff123e3e159
[   93.432119][ T5333] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000
[   93.432132][ T5333] RBP: 00007ff122897090 R08: 00002000000002c0 R09: 0000000000000000
[   93.432145][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.432157][ T5333] R13: 00007ff1240c6038 R14: 00007ff1240c5fa0 R15: 00007ffea7bbcca8
[   93.432197][ T5333]  </TASK>
[   93.808371][ T5347] FAULT_INJECTION: forcing a failure.
[   93.808371][ T5347] name failslab, interval 1, probability 0, space 0, times 0
[   93.808475][ T5347] CPU: 1 UID: 0 PID: 5347 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(lazy) 
[   93.808568][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.808583][ T5347] Call Trace:
[   93.808591][ T5347]  <TASK>
[   93.808600][ T5347]  __dump_stack+0x1d/0x30
[   93.808676][ T5347]  dump_stack_lvl+0x95/0xd0
[   93.808697][ T5347]  dump_stack+0x15/0x1b
[   93.808718][ T5347]  should_fail_ex+0x262/0x280
[   93.808765][ T5347]  ? do_eventfd+0x5b/0x1b0
[   93.808787][ T5347]  should_failslab+0x8c/0xb0
[   93.808951][ T5347]  __kmalloc_cache_noprof+0x7a/0x400
[   93.808996][ T5347]  ? do_eventfd+0x5b/0x1b0
[   93.809019][ T5347]  do_eventfd+0x5b/0x1b0
[   93.809041][ T5347]  __x64_sys_eventfd2+0x2d/0x40
[   93.809132][ T5347]  x64_sys_call+0x17ed/0x2550
[   93.809161][ T5347]  do_syscall_64+0x112/0x360
[   93.809213][ T5347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.809232][ T5347] RIP: 0033:0x7f02c3f0e159
[   93.809257][ T5347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.809330][ T5347] RSP: 002b:00007f02c2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[   93.809353][ T5347] RAX: ffffffffffffffda RBX: 00007f02c4195fa0 RCX: 00007f02c3f0e159
[   93.809392][ T5347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   93.809405][ T5347] RBP: 00007f02c3fa5024 R08: 0000000000000000 R09: 0000000000000000
[   93.809419][ T5347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.809433][ T5347] R13: 00007f02c4196038 R14: 00007f02c4195fa0 R15: 00007fff8e17a3d8
[   93.809454][ T5347]  </TASK>
[   93.820005][ T5349] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   93.916231][ T5340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5340 comm=syz.1.372
[   94.162517][ T5356] loop2: detected capacity change from 0 to 1764
[   94.169838][ T5356] iso9660: Unknown parameter '…‚'
[   94.191707][ T5354] vcan0 speed is unknown, defaulting to 1000
[   94.426034][ T5384] netlink: 'syz.2.381': attribute type 5 has an invalid length.
[   94.432337][ T5359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5359 comm=syz.0.379
[   94.455548][ T5384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.381'.
[   94.492241][ T5388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'.
[   94.652300][ T5407] netlink: 'syz.0.387': attribute type 15 has an invalid length.
[   94.652322][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'.
[   94.689950][ T5407] loop0: detected capacity change from 0 to 512
[   94.707074][ T5407] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   95.037346][ T5419] MTRR 0 not used
[   95.085037][ T5422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5422 comm=syz.3.389
[   95.161172][ T5424] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   95.306457][   T29] kauditd_printk_skb: 212 callbacks suppressed
[   95.306481][   T29] audit: type=1400 audit(1788431552.785:1341): avc:  denied  { search } for  pid=5427 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.306560][   T29] audit: type=1400 audit(1788431552.785:1342): avc:  denied  { search } for  pid=5427 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.306586][   T29] audit: type=1400 audit(1788431552.785:1343): avc:  denied  { search } for  pid=5427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.306612][   T29] audit: type=1400 audit(1788431552.785:1344): avc:  denied  { search } for  pid=5427 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.364860][   T29] audit: type=1400 audit(1788431552.845:1345): avc:  denied  { read } for  pid=5428 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.364891][   T29] audit: type=1400 audit(1788431552.845:1346): avc:  denied  { read open } for  pid=5428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.366142][   T29] audit: type=1400 audit(1788431552.845:1347): avc:  denied  { getattr } for  pid=5428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.366172][   T29] audit: type=1400 audit(1788431552.845:1348): avc:  denied  { getattr } for  pid=5428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   95.421823][   T29] audit: type=1400 audit(1788431552.895:1349): avc:  denied  { read } for  pid=5431 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   95.421855][   T29] audit: type=1400 audit(1788431552.895:1350): avc:  denied  { open } for  pid=5431 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   95.549350][ T5438] loop2: detected capacity change from 0 to 1024
[   95.551456][ T5438] EXT4-fs: Ignoring removed orlov option
[   95.578509][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.840614][ T5438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.393'.
[   95.992347][ T5450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5450 comm=syz.3.395
[   96.626889][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.835167][ T5489] vcan0 speed is unknown, defaulting to 1000
[   96.974197][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   96.974303][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.020947][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.020979][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.045413][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.045442][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'.
[   97.046885][ T5521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5521 comm=syz.5.402
[   97.256204][ T5540] loop2: detected capacity change from 0 to 512
[   97.299965][ T5540] loop2: detected capacity change from 0 to 512
[   97.350482][ T5540] loop2: detected capacity change from 0 to 512
[   97.421121][ T5540] loop2: detected capacity change from 0 to 512
[   97.475614][ T5540] loop2: detected capacity change from 0 to 512
[   97.594414][ T5540] loop2: detected capacity change from 0 to 512
[   97.648828][ T5540] loop2: detected capacity change from 0 to 512
[   97.679447][ T5560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5560 comm=syz.5.408
[   97.693471][ T5540] loop2: detected capacity change from 0 to 512
[   97.742400][ T5540] loop2: detected capacity change from 0 to 512
[   97.905997][ T5544] MTRR 0 not used
[   97.935048][ T5478] infiniband !yz2: set active
[   97.938156][ T5478] infiniband !yz2: added veth0_to_batadv
[   97.938435][ T5478] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[   97.938632][ T5478] infiniband !yz2: Couldn't open port 1
[   97.956931][ T5478] RDS/IB: !yz2: added
[   97.956948][ T5478] smc: adding ib device !yz2 with port count 1
[   97.956963][ T5478] smc:    ib device !yz2 port 1 has no pnetid
[   98.349936][ T5579] vcan0 speed is unknown, defaulting to 1000
[   98.829165][ T5581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5581 comm=syz.2.417
[   98.854434][ T5592] can: request_module (can-proto-0) failed.
[   98.895771][ T5592] vcan0: Master is either lo or non-ether device
[   99.347213][ T5618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5618 comm=syz.2.421
[   99.405263][ T5611] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.419708][ T5611] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   99.491691][ T5617] vcan0 speed is unknown, defaulting to 1000
[   99.682072][ T5478] syz.1.399 (5478) used greatest stack depth: 9600 bytes left
[   99.695359][ T4765] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.877515][ T5624] netlink: 'syz.2.427': attribute type 5 has an invalid length.
[   99.999908][ T5629] __nla_validate_parse: 125 callbacks suppressed
[  100.000403][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.427'.
[  100.642053][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  100.642074][   T29] audit: type=1400 audit(1788431558.115:1398): avc:  denied  { create } for  pid=5648 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  100.671984][   T29] audit: type=1400 audit(1788431558.145:1399): avc:  denied  { ioctl } for  pid=5648 comm="syz.2.431" path="socket:[11952]" dev="sockfs" ino=11952 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  100.705768][ T5639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5639 comm=syz.3.429
[  100.712225][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[  100.718635][ T5650] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.431'.
[  100.735244][   T29] audit: type=1400 audit(1788431558.215:1400): avc:  denied  { write } for  pid=5648 comm="syz.2.431" name="snmp" dev="proc" ino=4026532429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  100.806305][ T5661] set_capacity_and_notify: 11 callbacks suppressed
[  100.806329][ T5661] loop0: detected capacity change from 0 to 1764
[  100.806652][ T5661] iso9660: Unknown parameter '…‚'
[  101.089491][ T5672] loop1: detected capacity change from 0 to 128
[  101.113260][ T5672] vfat: Unknown parameter 'Ta%›”ˆJQē²hļx»5mŹsŅĒī O˜®ŖĻōAp9½ź}„eg&›­
[  101.113260][ T5672] õų[œu…]æŠ&'
[  101.200949][ T5687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5687 comm=syz.5.439
[  101.306656][   T29] audit: type=1326 audit(1788431558.785:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.5.442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  101.307029][   T29] audit: type=1326 audit(1788431558.785:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.5.442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  101.307059][   T29] audit: type=1326 audit(1788431558.785:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.5.442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  101.308690][   T29] audit: type=1326 audit(1788431558.785:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.5.442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  101.308852][   T29] audit: type=1326 audit(1788431558.785:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.2.443" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3f0e159 code=0x7ffc0000
[  101.309087][   T29] audit: type=1326 audit(1788431558.785:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.2.443" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f02c3f0e159 code=0x7ffc0000
[  101.309219][   T29] audit: type=1326 audit(1788431558.785:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.2.443" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c3f0e159 code=0x7ffc0000
[  101.361496][ T5672] loop1: detected capacity change from 0 to 512
[  101.390995][ T5672] EXT4-fs: Ignoring removed i_version option
[  101.453819][ T5672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.454434][ T5672] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.572757][ T5695] MTRR 0 not used
[  101.637220][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.655335][ T5706] netlink: 'syz.2.445': attribute type 5 has an invalid length.
[  101.655362][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'.
[  101.790206][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'.
[  101.921185][ T5721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5721 comm=syz.5.449
[  102.289866][ T5757] vcan0 speed is unknown, defaulting to 1000
[  102.352413][ T5763] netlink: 'syz.0.457': attribute type 5 has an invalid length.
[  102.352438][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'.
[  102.352684][ T5763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  102.442419][ T5766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5766 comm=syz.2.453
[  102.662016][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  102.691163][ T5776] capability: warning: `syz.3.460' uses deprecated v2 capabilities in a way that may be insecure
[  102.872828][ T5784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5784 comm=syz.1.462
[  102.875534][ T5776] loop3: detected capacity change from 0 to 512
[  102.910339][ T5776] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.918275][ T5776] EXT4-fs: journaled quota format not specified
[  103.101132][ T5797] loop5: detected capacity change from 0 to 128
[  103.109596][ T5797] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.122655][ T5797] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.611734][ T5800] vcan0 speed is unknown, defaulting to 1000
[  103.806312][ T3658] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.941308][ T5828] GUP no longer grows the stack in syz.5.473 (5828): 200000005000-200000008000 (200000004000)
[  103.941414][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.5.473 Not tainted syzkaller #0 PREEMPT(lazy) 
[  103.941439][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.941452][ T5828] Call Trace:
[  103.941482][ T5828]  <TASK>
[  103.941490][ T5828]  __dump_stack+0x1d/0x30
[  103.941518][ T5828]  dump_stack_lvl+0x95/0xd0
[  103.941542][ T5828]  dump_stack+0x15/0x1b
[  103.941563][ T5828]  fixup_user_fault+0x4fe/0x550
[  103.941638][ T5828]  fault_in_user_writeable+0x5c/0xc0
[  103.941667][ T5828]  futex_lock_pi+0x5f4/0x7c0
[  103.941775][ T5828]  ? __pfx_futex_wake_mark+0x10/0x10
[  103.941866][ T5828]  do_futex+0x2ea/0x460
[  103.941948][ T5828]  __se_sys_futex+0x2f6/0x370
[  103.941977][ T5828]  ? xfd_validate_state+0x45/0xf0
[  103.942082][ T5828]  __x64_sys_futex+0x78/0x90
[  103.942175][ T5828]  x64_sys_call+0x22e2/0x2550
[  103.942203][ T5828]  do_syscall_64+0x112/0x360
[  103.942233][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.942257][ T5828] RIP: 0033:0x7fbdda53e159
[  103.942274][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.942302][ T5828] RSP: 002b:00007fbdd8f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  103.942323][ T5828] RAX: ffffffffffffffda RBX: 00007fbdda7c5fa0 RCX: 00007fbdda53e159
[  103.942350][ T5828] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[  103.942365][ T5828] RBP: 00007fbdda5d5024 R08: 0000000000000000 R09: 0000000000000001
[  103.942379][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.942394][ T5828] R13: 00007fbdda7c6038 R14: 00007fbdda7c5fa0 R15: 00007ffdd0cd30e8
[  103.942414][ T5828]  </TASK>
[  103.967283][ T5812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5812 comm=syz.3.469
[  103.987853][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[  104.321229][ T5846] netlink: 'syz.1.477': attribute type 5 has an invalid length.
[  104.321253][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'.
[  104.560524][ T5872] netlink: 'syz.1.482': attribute type 10 has an invalid length.
[  104.560560][ T5872] ipvlan1: entered allmulticast mode
[  104.560581][ T5872] veth0_vlan: entered allmulticast mode
[  104.563696][ T5872] team0: Device ipvlan1 failed to register rx_handler
[  104.656256][ T5875] loop2: detected capacity change from 0 to 1024
[  104.656676][ T5875] EXT4-fs: Ignoring removed orlov option
[  104.666376][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.699102][ T5875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.484'.
[  104.742867][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.887882][ T5876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5876 comm=syz.3.485
[  105.008758][ T5896] loop3: detected capacity change from 0 to 1024
[  105.009074][ T5896] EXT4-fs: Ignoring removed orlov option
[  105.016212][ T5896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.057191][ T5896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.489'.
[  105.078333][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.198514][ T5906] loop2: detected capacity change from 0 to 1764
[  105.198763][ T5906] iso9660: Unknown parameter '…‚'
[  105.287434][ T5908] loop1: detected capacity change from 0 to 512
[  105.329534][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.349819][ T5913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.494'.
[  105.362799][ T5914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.494'.
[  105.384780][ T5914] loop0: detected capacity change from 0 to 128
[  105.411100][ T5914] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  105.411685][ T5914] ext4 filesystem being mounted at /94/  supports timestamps until 2038-01-19 (0x7fffffff)
[  105.602000][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5928 comm=syz.3.497
[  105.641678][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.686592][ T3020] veth0_vlan: left promiscuous mode
[  105.699460][   T11] veth0_vlan: entered promiscuous mode
[  105.803442][ T5958] netlink: 'syz.3.500': attribute type 10 has an invalid length.
[  105.803557][ T5958] ipvlan1: entered allmulticast mode
[  105.803653][ T5958] veth0_vlan: entered allmulticast mode
[  105.836985][ T5958] team0: Device ipvlan1 failed to register rx_handler
[  105.877229][ T5962] 9p: Bad value for 'rfdno'
[  105.940466][ T5968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5968 comm=syz.5.499
[  106.168611][ T5983] tap0: tun_chr_ioctl cmd 1074025677
[  106.168701][ T5983] tap0: linktype set to 768
[  106.192516][ T5984] vcan0 speed is unknown, defaulting to 1000
[  106.286764][ T5983] tap0: tun_chr_ioctl cmd 1074812117
[  106.333494][   T29] kauditd_printk_skb: 391 callbacks suppressed
[  106.333535][   T29] audit: type=1400 audit(1788431563.775:1799): avc:  denied  { bind } for  pid=5982 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.333590][   T29] audit: type=1400 audit(1788431563.785:1800): avc:  denied  { ioctl } for  pid=5982 comm="syz.0.505" path="socket:[12160]" dev="sockfs" ino=12160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.333619][   T29] audit: type=1400 audit(1788431563.795:1801): avc:  denied  { append } for  pid=5982 comm="syz.0.505" name="uprobe_events" dev="tracefs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  106.446770][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.466303][   T29] audit: type=1400 audit(1788431563.945:1802): avc:  denied  { write } for  pid=5960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.506814][   T29] audit: type=1400 audit(1788431563.985:1803): avc:  denied  { write } for  pid=5989 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.512247][   T29] audit: type=1400 audit(1788431563.985:1804): avc:  denied  { ioctl } for  pid=5993 comm="syz.5.509" path="socket:[13497]" dev="sockfs" ino=13497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  106.513691][   T29] audit: type=1400 audit(1788431563.985:1805): avc:  denied  { mounton } for  pid=5993 comm="syz.5.509" path="/40/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  106.535363][ T5991] loop1: detected capacity change from 0 to 512
[  106.535959][ T5991] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.615460][ T6001] loop0: detected capacity change from 0 to 164
[  106.620864][ T6001] iso9660: Unknown parameter 'sh'
[  106.654677][ T6001] loop0: detected capacity change from 0 to 512
[  106.660268][ T6001] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.661364][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'.
[  106.792203][ T6006] vcan0 speed is unknown, defaulting to 1000
[  107.223508][   T29] audit: type=1400 audit(1788431564.645:1806): avc:  denied  { write } for  pid=6004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.311361][   T29] audit: type=1400 audit(1788431564.785:1807): avc:  denied  { write } for  pid=6026 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.754978][ T6025] vcan0 speed is unknown, defaulting to 1000
[  107.839621][ T6033] vcan0 speed is unknown, defaulting to 1000
[  108.013647][ T6040] loop3: detected capacity change from 0 to 128
[  108.020615][ T6040] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.067280][ T6040] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  108.108482][ T6046] loop0: detected capacity change from 0 to 1024
[  108.108784][ T6046] EXT4-fs: Ignoring removed orlov option
[  108.125221][ T6040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6040 comm=syz.3.517
[  108.146057][ T6046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.229499][   T29] audit: type=1400 audit(1788431565.705:1808): avc:  denied  { write } for  pid=6043 comm="syz.0.518" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.287937][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.518'.
[  108.294433][ T6067] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  108.342964][ T6061] syz.2.521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  108.454420][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.671154][ T6066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6066 comm=syz.1.523
[  108.826934][ T6097] vcan0 speed is unknown, defaulting to 1000
[  108.946561][ T6115] loop1: detected capacity change from 0 to 512
[  108.957003][ T6096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6096 comm=syz.0.526
[  108.995692][ T6123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.532'.
[  108.998046][ T6123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.532'.
[  109.058648][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.058792][ T6115] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.093480][ T6133] FAULT_INJECTION: forcing a failure.
[  109.093480][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.093516][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.0.535 Not tainted syzkaller #0 PREEMPT(lazy) 
[  109.093541][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.093554][ T6133] Call Trace:
[  109.093560][ T6133]  <TASK>
[  109.093568][ T6133]  __dump_stack+0x1d/0x30
[  109.093659][ T6133]  dump_stack_lvl+0x95/0xd0
[  109.093719][ T6133]  dump_stack+0x15/0x1b
[  109.093740][ T6133]  should_fail_ex+0x262/0x280
[  109.093801][ T6133]  should_fail+0xb/0x20
[  109.093821][ T6133]  should_fail_usercopy+0x1a/0x20
[  109.093845][ T6133]  set_fd_set+0x29/0x90
[  109.093877][ T6133]  core_sys_select+0x569/0x730
[  109.093959][ T6133]  __se_sys_pselect6+0x23f/0x2a0
[  109.094077][ T6133]  __x64_sys_pselect6+0x78/0x90
[  109.094111][ T6133]  x64_sys_call+0x1dfc/0x2550
[  109.094137][ T6133]  do_syscall_64+0x112/0x360
[  109.094182][ T6133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.094292][ T6133] RIP: 0033:0x7ff123e3e159
[  109.094309][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.094327][ T6133] RSP: 002b:00007ff122897028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  109.094350][ T6133] RAX: ffffffffffffffda RBX: 00007ff1240c5fa0 RCX: 00007ff123e3e159
[  109.094437][ T6133] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000
[  109.094451][ T6133] RBP: 00007ff123ed5024 R08: 0000200000000280 R09: 0000200000000300
[  109.094467][ T6133] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  109.094480][ T6133] R13: 00007ff1240c6038 R14: 00007ff1240c5fa0 R15: 00007ffea7bbcca8
[  109.094555][ T6133]  </TASK>
[  109.425904][ T6149] loop5: detected capacity change from 0 to 1024
[  109.434046][ T6149] EXT4-fs: Ignoring removed orlov option
[  109.441595][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.518960][   T42] Bluetooth: hci0: Frame reassembly failed (-84)
[  109.526966][ T6149] netlink: 132 bytes leftover after parsing attributes in process `syz.5.537'.
[  109.622479][ T6159] netlink: 'syz.3.540': attribute type 5 has an invalid length.
[  109.622504][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'.
[  109.648905][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.649397][ T4765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.745233][ T6169] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  109.927862][ T6179] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in;
[  109.927862][ T6179]    program syz.5.546 not setting count and/or reply_len properly
[  110.021300][ T6180] vcan0 speed is unknown, defaulting to 1000
[  110.556006][ T6188] syzkaller0: entered promiscuous mode
[  110.556036][ T6188] syzkaller0: entered allmulticast mode
[  110.722818][ T6189] vcan0 speed is unknown, defaulting to 1000
[  110.944418][ T6192] loop3: detected capacity change from 0 to 512
[  110.956841][ T6192] EXT4-fs: dax option not supported
[  111.072863][ T6204] netlink: 'syz.1.553': attribute type 5 has an invalid length.
[  111.072888][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'.
[  111.115970][ T6192] netlink: 164 bytes leftover after parsing attributes in process `syz.3.549'.
[  111.168165][ T6211] netlink: 'syz.1.554': attribute type 11 has an invalid length.
[  111.168224][ T6211] netlink: 140 bytes leftover after parsing attributes in process `syz.1.554'.
[  111.234742][ T6199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6199 comm=syz.5.552
[  111.321408][ T6223] loop1: detected capacity change from 0 to 128
[  111.335385][ T6223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  111.335455][ T6223] System zones: 1-3, 19-19, 35-36
[  111.383804][ T6223] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  111.397410][ T6223] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  111.442680][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  111.442740][   T29] audit: type=1400 audit(1788431568.915:1845): avc:  denied  { write } for  pid=6220 comm="syz.1.557" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  111.494967][ T6233] loop5: detected capacity change from 0 to 1764
[  111.495262][ T6233] iso9660: Unknown parameter '…‚'
[  111.539964][ T6235] MTRR 0 not used
[  111.566326][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.583498][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  111.655042][   T29] audit: type=1400 audit(1788431569.125:1846): avc:  denied  { read write } for  pid=6241 comm="syz.1.561" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  111.679231][   T29] audit: type=1400 audit(1788431569.135:1847): avc:  denied  { open } for  pid=6241 comm="syz.1.561" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  111.814095][ T6255] netlink: 'syz.0.565': attribute type 5 has an invalid length.
[  111.814122][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'.
[  111.819166][ T6239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6239 comm=syz.3.562
[  111.888708][ T6261] netlink: 'syz.3.567': attribute type 7 has an invalid length.
[  112.118985][ T6254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6254 comm=syz.5.564
[  112.214286][ T6274] vcan0 speed is unknown, defaulting to 1000
[  112.343181][   T29] audit: type=1326 audit(1788431569.815:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.343646][   T29] audit: type=1326 audit(1788431569.825:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.343685][   T29] audit: type=1326 audit(1788431569.825:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.343843][   T29] audit: type=1326 audit(1788431569.825:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.394461][   T29] audit: type=1326 audit(1788431569.875:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.394512][   T29] audit: type=1326 audit(1788431569.875:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.394540][   T29] audit: type=1326 audit(1788431569.875:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda53e159 code=0x7ffc0000
[  112.712416][ T6309] netlink: 92 bytes leftover after parsing attributes in process `syz.5.577'.
[  113.222403][ T6318] FAULT_INJECTION: forcing a failure.
[  113.222403][ T6318] name failslab, interval 1, probability 0, space 0, times 0
[  113.222437][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.3.579 Not tainted syzkaller #0 PREEMPT(lazy) 
[  113.222469][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  113.222484][ T6318] Call Trace:
[  113.222492][ T6318]  <TASK>
[  113.222503][ T6318]  __dump_stack+0x1d/0x30
[  113.222571][ T6318]  dump_stack_lvl+0x95/0xd0
[  113.222592][ T6318]  dump_stack+0x15/0x1b
[  113.222616][ T6318]  should_fail_ex+0x262/0x280
[  113.222636][ T6318]  ? sk_prot_alloc+0xa8/0x180
[  113.222690][ T6318]  should_failslab+0x8c/0xb0
[  113.222759][ T6318]  __kmalloc_noprof+0xd0/0x4d0
[  113.222860][ T6318]  ? sk_prot_alloc+0xa8/0x180
[  113.222889][ T6318]  sk_prot_alloc+0xa8/0x180
[  113.222963][ T6318]  sk_alloc+0x34/0x3e0
[  113.222989][ T6318]  ? __pfx_tun_chr_open+0x10/0x10
[  113.223018][ T6318]  tun_chr_open+0x56/0x2e0
[  113.223091][ T6318]  ? __pfx_tun_chr_open+0x10/0x10
[  113.223118][ T6318]  misc_open+0x1df/0x220
[  113.223144][ T6318]  chrdev_open+0x2eb/0x3a0
[  113.223205][ T6318]  do_dentry_open+0x49f/0xa60
[  113.223226][ T6318]  ? __pfx_chrdev_open+0x10/0x10
[  113.223339][ T6318]  ? may_open+0x1ee/0x350
[  113.223444][ T6318]  vfs_open+0x37/0x1e0
[  113.223488][ T6318]  path_openat+0xc01/0x10d0
[  113.223513][ T6318]  do_file_open+0x16c/0x290
[  113.223606][ T6318]  do_sys_openat2+0xa0/0x130
[  113.223626][ T6318]  __x64_sys_openat+0xf2/0x120
[  113.223674][ T6318]  x64_sys_call+0x1f72/0x2550
[  113.223703][ T6318]  do_syscall_64+0x112/0x360
[  113.223731][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.223790][ T6318] RIP: 0033:0x7efd36fde159
[  113.223859][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.223881][ T6318] RSP: 002b:00007efd35a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  113.223922][ T6318] RAX: ffffffffffffffda RBX: 00007efd37266090 RCX: 00007efd36fde159
[  113.223940][ T6318] RDX: 0000000000000100 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  113.223953][ T6318] RBP: 00007efd37075024 R08: 0000000000000000 R09: 0000000000000000
[  113.223965][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.224024][ T6318] R13: 00007efd37266128 R14: 00007efd37266090 R15: 00007ffee8253128
[  113.224046][ T6318]  </TASK>
[  113.314691][ T6313] loop5: detected capacity change from 0 to 512
[  113.318473][ T6301] loop1: detected capacity change from 0 to 512
[  113.322508][ T6301] EXT4-fs: dax option not supported
[  113.352445][ T6313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.638495][ T6326] netlink: 168 bytes leftover after parsing attributes in process `syz.2.580'.
[  113.913310][ T6341] MTRR 0 not used
[  113.942354][ T4765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.974757][ T6350] netlink: 92 bytes leftover after parsing attributes in process `syz.1.588'.
[  114.006829][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'.
[  114.269571][ T6370] pim6reg: entered allmulticast mode
[  114.303803][ T6368] vcan0 speed is unknown, defaulting to 1000
[  114.511390][ T6374] vcan0 speed is unknown, defaulting to 1000
[  114.887608][ T6367] loop0: detected capacity change from 0 to 512
[  114.894152][ T6367] EXT4-fs: dax option not supported
[  115.046275][ T6385] netlink: 'syz.2.598': attribute type 10 has an invalid length.
[  115.058744][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  115.060036][ T6385] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[  115.079382][ T6392] netlink: 92 bytes leftover after parsing attributes in process `syz.3.600'.
[  115.259449][ T6404] loop0: detected capacity change from 0 to 512
[  115.279745][ T6404] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  115.506693][  T313] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  115.769874][ T6396] pim6reg: entered allmulticast mode
[  115.808426][ T6396] pim6reg: left allmulticast mode
[  115.952079][ T6397] loop5: detected capacity change from 0 to 8192
[  115.971509][ T6431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6431 comm=syz.1.612
[  115.986969][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.5.601'.
[  116.009864][ T6419] syz.0.608 (6419) used greatest stack depth: 9136 bytes left
[  116.134990][ T6450] loop0: detected capacity change from 0 to 1024
[  116.145092][ T6450] EXT4-fs: Ignoring removed orlov option
[  116.167522][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.227346][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'.
[  116.268604][ T6454] loop1: detected capacity change from 0 to 1024
[  116.268916][ T6454] EXT4-fs: Ignoring removed orlov option
[  116.336667][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.392086][ T6454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.452787][   T29] kauditd_printk_skb: 273 callbacks suppressed
[  116.452811][   T29] audit: type=1400 audit(1788431573.925:2128): avc:  denied  { write } for  pid=6453 comm="syz.1.616" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  116.490556][ T6461] netlink: 'syz.0.617': attribute type 21 has an invalid length.
[  116.577441][ T6445] loop2: detected capacity change from 0 to 2048
[  116.661102][   T29] audit: type=1400 audit(1788431574.135:2129): avc:  denied  { bind } for  pid=6468 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.681768][   T29] audit: type=1400 audit(1788431574.135:2130): avc:  denied  { write } for  pid=6453 comm="syz.1.616" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  116.703826][   T29] audit: type=1400 audit(1788431574.185:2131): avc:  denied  { map } for  pid=6468 comm="syz.0.620" path="socket:[15427]" dev="sockfs" ino=15427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.703911][   T29] audit: type=1400 audit(1788431574.185:2132): avc:  denied  { write } for  pid=6468 comm="syz.0.620" path="socket:[15427]" dev="sockfs" ino=15427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.705239][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.709880][ T6445] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.717944][ T6454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.616'.
[  116.763593][   T29] audit: type=1400 audit(1788431574.215:2133): avc:  denied  { write } for  pid=6444 comm="syz.2.613" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  116.783317][   T29] audit: type=1400 audit(1788431574.255:2134): avc:  denied  { read } for  pid=6444 comm="syz.2.613" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  116.833593][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.864854][   T29] audit: type=1400 audit(1788431574.345:2135): avc:  denied  { bind } for  pid=6479 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.976113][ T6485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.613: bg 0: block 345: padding at end of block bitmap is not set
[  116.997403][ T6485] EXT4-fs (loop2): Remounting filesystem read-only
[  117.005562][  T313] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5172: inode #15: block 1: len 15: ext4_map_blocks returned -30
[  117.111333][ T6494] vcan0 speed is unknown, defaulting to 1000
[  117.217301][ T6482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6482 comm=syz.5.618
[  117.247277][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.262285][   T29] audit: type=1400 audit(1788431574.745:2136): avc:  denied  { read } for  pid=6488 comm="syz.0.624" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.262326][   T29] audit: type=1400 audit(1788431574.745:2137): avc:  denied  { open } for  pid=6488 comm="syz.0.624" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.443066][ T6499] FAULT_INJECTION: forcing a failure.
[  117.443066][ T6499] name failslab, interval 1, probability 0, space 0, times 0
[  117.443116][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.625 Not tainted syzkaller #0 PREEMPT(lazy) 
[  117.443140][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.443151][ T6499] Call Trace:
[  117.443158][ T6499]  <TASK>
[  117.443192][ T6499]  __dump_stack+0x1d/0x30
[  117.443214][ T6499]  dump_stack_lvl+0x95/0xd0
[  117.443233][ T6499]  dump_stack+0x15/0x1b
[  117.443332][ T6499]  should_fail_ex+0x262/0x280
[  117.443451][ T6499]  ? ucma_alloc_ctx+0x30/0x1d0
[  117.443481][ T6499]  should_failslab+0x8c/0xb0
[  117.443541][ T6499]  __kmalloc_cache_noprof+0x7a/0x400
[  117.443612][ T6499]  ? ucma_alloc_ctx+0x30/0x1d0
[  117.443643][ T6499]  ? should_fail_ex+0xdb/0x280
[  117.443725][ T6499]  ? __pfx_ucma_create_id+0x10/0x10
[  117.443757][ T6499]  ucma_alloc_ctx+0x30/0x1d0
[  117.443804][ T6499]  ucma_create_id+0x15a/0x280
[  117.443902][ T6499]  ? __pfx_ucma_create_id+0x10/0x10
[  117.443932][ T6499]  ucma_write+0x1c9/0x260
[  117.443961][ T6499]  vfs_writev+0x420/0x8c0
[  117.443994][ T6499]  ? __pfx_ucma_write+0x10/0x10
[  117.444087][ T6499]  do_writev+0xe9/0x210
[  117.444120][ T6499]  __x64_sys_writev+0x45/0x50
[  117.444149][ T6499]  x64_sys_call+0x23c9/0x2550
[  117.444213][ T6499]  do_syscall_64+0x112/0x360
[  117.444242][ T6499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.444266][ T6499] RIP: 0033:0x7f02c3f0e159
[  117.444282][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.444301][ T6499] RSP: 002b:00007f02c2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  117.444349][ T6499] RAX: ffffffffffffffda RBX: 00007f02c4195fa0 RCX: 00007f02c3f0e159
[  117.444364][ T6499] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a
[  117.444379][ T6499] RBP: 00007f02c2967090 R08: 0000000000000000 R09: 0000000000000000
[  117.444392][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.444405][ T6499] R13: 00007f02c4196038 R14: 00007f02c4195fa0 R15: 00007fff8e17a3d8
[  117.444425][ T6499]  </TASK>
[  117.578554][ T6506] loop0: detected capacity change from 0 to 1764
[  117.578873][ T6506] iso9660: Unknown parameter '…‚'
[  117.822196][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'.
[  117.940668][ T6524] netlink: 84 bytes leftover after parsing attributes in process `syz.3.634'.
[  118.090001][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'.
[  118.328054][ T6548] vcan0 speed is unknown, defaulting to 1000
[  118.667497][ T6555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6555 comm=syz.1.641
[  118.764122][ T6557] FAULT_INJECTION: forcing a failure.
[  118.764122][ T6557] name failslab, interval 1, probability 0, space 0, times 0
[  118.764188][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.0.643 Not tainted syzkaller #0 PREEMPT(lazy) 
[  118.764216][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.764230][ T6557] Call Trace:
[  118.764237][ T6557]  <TASK>
[  118.764246][ T6557]  __dump_stack+0x1d/0x30
[  118.764318][ T6557]  dump_stack_lvl+0x95/0xd0
[  118.764418][ T6557]  dump_stack+0x15/0x1b
[  118.764439][ T6557]  should_fail_ex+0x262/0x280
[  118.764516][ T6557]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  118.764610][ T6557]  should_failslab+0x8c/0xb0
[  118.764641][ T6557]  __kmalloc_noprof+0xd0/0x4d0
[  118.764741][ T6557]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  118.764780][ T6557]  genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  118.764821][ T6557]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  118.764955][ T6557]  ? selinux_capable+0x31/0x40
[  118.765073][ T6557]  ? security_capable+0x7b/0x90
[  118.765107][ T6557]  ? ns_capable+0x80/0xb0
[  118.765125][ T6557]  genl_rcv_msg+0x42f/0x470
[  118.765255][ T6557]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  118.765280][ T6557]  ? __pfx_nl802154_add_llsec_key+0x10/0x10
[  118.765314][ T6557]  ? __pfx_nl802154_post_doit+0x10/0x10
[  118.765344][ T6557]  netlink_rcv_skb+0x11e/0x220
[  118.765378][ T6557]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.765412][ T6557]  genl_rcv+0x28/0x40
[  118.765495][ T6557]  netlink_unicast+0x5a9/0x680
[  118.765521][ T6557]  netlink_sendmsg+0x5be/0x6f0
[  118.765620][ T6557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.765645][ T6557]  ____sys_sendmsg+0x532/0x580
[  118.765694][ T6557]  ___sys_sendmsg+0x195/0x1e0
[  118.765734][ T6557]  __x64_sys_sendmsg+0xd4/0x160
[  118.765817][ T6557]  x64_sys_call+0x22ab/0x2550
[  118.765847][ T6557]  do_syscall_64+0x112/0x360
[  118.765907][ T6557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.765933][ T6557] RIP: 0033:0x7ff123e3e159
[  118.765977][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.765994][ T6557] RSP: 002b:00007ff122897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.766014][ T6557] RAX: ffffffffffffffda RBX: 00007ff1240c5fa0 RCX: 00007ff123e3e159
[  118.766030][ T6557] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000006
[  118.766045][ T6557] RBP: 00007ff122897090 R08: 0000000000000000 R09: 0000000000000000
[  118.766058][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.766071][ T6557] R13: 00007ff1240c6038 R14: 00007ff1240c5fa0 R15: 00007ffea7bbcca8
[  118.766163][ T6557]  </TASK>
[  119.061606][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'.
[  119.120953][ T6568] netlink: 84 bytes leftover after parsing attributes in process `syz.0.648'.
[  119.214238][ T6575] FAULT_INJECTION: forcing a failure.
[  119.214238][ T6575] name failslab, interval 1, probability 0, space 0, times 0
[  119.214325][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(lazy) 
[  119.214349][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.214360][ T6575] Call Trace:
[  119.214368][ T6575]  <TASK>
[  119.214376][ T6575]  __dump_stack+0x1d/0x30
[  119.214404][ T6575]  dump_stack_lvl+0x95/0xd0
[  119.214471][ T6575]  dump_stack+0x15/0x1b
[  119.214489][ T6575]  should_fail_ex+0x262/0x280
[  119.214524][ T6575]  ? skb_clone+0x151/0x1f0
[  119.214552][ T6575]  should_failslab+0x8c/0xb0
[  119.214596][ T6575]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  119.214626][ T6575]  ? skb_clone+0x151/0x1f0
[  119.214654][ T6575]  skb_clone+0x151/0x1f0
[  119.214723][ T6575]  __netlink_deliver_tap+0x2be/0x510
[  119.214757][ T6575]  netlink_unicast+0x656/0x680
[  119.214779][ T6575]  netlink_sendmsg+0x5be/0x6f0
[  119.214821][ T6575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.214851][ T6575]  ____sys_sendmsg+0x532/0x580
[  119.214883][ T6575]  ___sys_sendmsg+0x195/0x1e0
[  119.214922][ T6575]  __sys_sendmmsg+0x185/0x320
[  119.214967][ T6575]  __x64_sys_sendmmsg+0x57/0x70
[  119.214998][ T6575]  x64_sys_call+0x1fb4/0x2550
[  119.215023][ T6575]  do_syscall_64+0x112/0x360
[  119.215126][ T6575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.215163][ T6575] RIP: 0033:0x7ff123e3e159
[  119.215180][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.215245][ T6575] RSP: 002b:00007ff122897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  119.215267][ T6575] RAX: ffffffffffffffda RBX: 00007ff1240c5fa0 RCX: 00007ff123e3e159
[  119.215284][ T6575] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  119.215297][ T6575] RBP: 00007ff122897090 R08: 0000000000000000 R09: 0000000000000000
[  119.215360][ T6575] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001
[  119.215372][ T6575] R13: 00007ff1240c6038 R14: 00007ff1240c5fa0 R15: 00007ffea7bbcca8
[  119.215392][ T6575]  </TASK>
[  119.369608][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'.
[  120.145492][ T6604] loop5: detected capacity change from 0 to 512
[  120.145803][ T6604] vfat: Unknown parameter '’’’’’’’’'
[  120.208125][ T6599] netlink: 'syz.3.655': attribute type 1 has an invalid length.
[  120.210972][ T6599] netlink: 84 bytes leftover after parsing attributes in process `syz.3.655'.
[  120.357481][ T6617] loop1: detected capacity change from 0 to 1024
[  120.357765][ T6617] EXT4-fs: Ignoring removed orlov option
[  120.382721][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.515631][ T6633] vcan0 speed is unknown, defaulting to 1000
[  120.666391][ T6635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.657'.
[  120.802000][ T6621] loop2: detected capacity change from 0 to 1764
[  120.803249][ T6621] iso9660: Unknown parameter '…‚'
[  121.002537][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.143528][ T6660] loop3: detected capacity change from 0 to 1764
[  121.143903][ T6660] iso9660: Unknown parameter '…‚'
[  121.256175][ T6676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6676 comm=syz.5.663
[  121.521549][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  121.521591][   T29] audit: type=1400 audit(1788431578.995:2159): avc:  denied  { write } for  pid=6696 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.593369][ T6698] loop2: detected capacity change from 0 to 1764
[  121.596310][ T6698] iso9660: Unknown parameter '…‚'
[  121.810230][ T6717] vcan0 speed is unknown, defaulting to 1000
[  121.878214][ T6712] syz.5.675 uses obsolete (PF_INET,SOCK_PACKET)
[  122.037002][   T29] audit: type=1400 audit(1788431579.515:2160): avc:  denied  { write } for  pid=6703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.065652][ T6733] xt_hashlimit: size too large, truncated to 1048576
[  122.128647][   T29] audit: type=1400 audit(1788431579.605:2161): avc:  denied  { write } for  pid=6736 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.151831][ T6724] xt_hashlimit: size too large, truncated to 1048576
[  122.166366][ T6740] loop3: detected capacity change from 0 to 164
[  122.173819][ T6740] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  122.173846][ T6740] isofs_fill_super: root inode is not a directory. Corrupted media?
[  122.310600][ T6748] FAULT_INJECTION: forcing a failure.
[  122.310600][ T6748] name failslab, interval 1, probability 0, space 0, times 0
[  122.310709][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.2.681 Not tainted syzkaller #0 PREEMPT(lazy) 
[  122.310730][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.310792][ T6748] Call Trace:
[  122.310800][ T6748]  <TASK>
[  122.310808][ T6748]  __dump_stack+0x1d/0x30
[  122.310835][ T6748]  dump_stack_lvl+0x95/0xd0
[  122.310929][ T6748]  dump_stack+0x15/0x1b
[  122.310950][ T6748]  should_fail_ex+0x262/0x280
[  122.310977][ T6748]  ? proc_self_get_link+0x96/0x110
[  122.311015][ T6748]  should_failslab+0x8c/0xb0
[  122.311044][ T6748]  __kmalloc_cache_noprof+0x7a/0x400
[  122.311074][ T6748]  ? proc_self_get_link+0x96/0x110
[  122.311159][ T6748]  ? __pfx_proc_self_get_link+0x10/0x10
[  122.311198][ T6748]  proc_self_get_link+0x96/0x110
[  122.311232][ T6748]  pick_link+0x514/0x8e0
[  122.311288][ T6748]  step_into_slowpath+0x36a/0x4c0
[  122.311358][ T6748]  ? inode_permission+0x1da/0x3b0
[  122.311380][ T6748]  link_path_walk+0x947/0xdd0
[  122.311405][ T6748]  path_openat+0xe7/0x10d0
[  122.311432][ T6748]  ? irqentry_exit+0x58f/0x610
[  122.311485][ T6748]  do_file_open+0x16c/0x290
[  122.311518][ T6748]  do_sys_openat2+0xa0/0x130
[  122.311541][ T6748]  __x64_sys_openat+0xf2/0x120
[  122.311588][ T6748]  x64_sys_call+0x1f72/0x2550
[  122.311611][ T6748]  do_syscall_64+0x112/0x360
[  122.311639][ T6748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.311702][ T6748] RIP: 0033:0x7f02c3ece98e
[  122.311758][ T6748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  122.311781][ T6748] RSP: 002b:00007f02c2966ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  122.311802][ T6748] RAX: ffffffffffffffda RBX: 00007f02c29676c0 RCX: 00007f02c3ece98e
[  122.311818][ T6748] RDX: 0000000000000002 RSI: 00007f02c2966f90 RDI: ffffffffffffff9c
[  122.311834][ T6748] RBP: 00007f02c2967090 R08: 0000000000000000 R09: 0000000000000000
[  122.311848][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.311861][ T6748] R13: 00007f02c4196038 R14: 00007f02c4195fa0 R15: 00007fff8e17a3d8
[  122.311881][ T6748]  </TASK>
[  122.600916][ T6754] vcan0 speed is unknown, defaulting to 1000
[  122.708882][  T364] ==================================================================
[  122.708917][  T364] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath
[  122.708954][  T364] 
[  122.708959][  T364] write to 0xffffc900015efae8 of 1 bytes by task 6754 on cpu 1:
[  122.708974][  T364]  rwsem_down_write_slowpath+0x3eb/0xab0
[  122.709000][  T364]  down_write+0xad/0xc0
[  122.709021][  T364]  kernfs_add_one+0x5a/0x350
[  122.709050][  T364]  __kernfs_create_file+0x145/0x180
[  122.709073][  T364]  sysfs_add_file_mode_ns+0x132/0x1b0
[  122.709094][  T364]  internal_create_group+0x43e/0x9e0
[  122.709121][  T364]  sysfs_create_groups+0x3f/0xf0
[  122.709170][  T364]  ib_setup_port_attrs+0xa2c/0x1480
[  122.709206][  T364]  add_one_compat_dev+0x297/0x390
[  122.709231][  T364]  rdma_dev_init_net+0x1b9/0x240
[  122.709256][  T364]  ops_init+0x22a/0x2e0
[  122.709282][  T364]  setup_net+0x9f/0x230
[  122.709303][  T364]  copy_net_ns+0x333/0x490
[  122.709324][  T364]  create_new_namespaces+0x1f6/0x420
[  122.709353][  T364]  unshare_nsproxy_namespaces+0x115/0x150
[  122.709381][  T364]  ksys_unshare+0x42b/0x710
[  122.709405][  T364]  __x64_sys_unshare+0x1f/0x30
[  122.709428][  T364]  x64_sys_call+0x1e33/0x2550
[  122.709455][  T364]  do_syscall_64+0x112/0x360
[  122.709479][  T364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.709499][  T364] 
[  122.709504][  T364] read to 0xffffc900015efae8 of 1 bytes by task 364 on cpu 0:
[  122.709519][  T364]  rwsem_down_write_slowpath+0x462/0xab0
[  122.709547][  T364]  down_write+0xad/0xc0
[  122.709569][  T364]  kernfs_remove_by_name_ns+0x6b/0x110
[  122.709587][  T364]  sysfs_remove_group+0xa5/0x170
[  122.709613][  T364]  sysfs_remove_groups+0x3a/0x80
[  122.709639][  T364]  ib_free_port_attrs+0x8e/0x250
[  122.709672][  T364]  rdma_dev_exit_net+0x1aa/0x330
[  122.709697][  T364]  ops_undo_list+0x285/0x420
[  122.709718][  T364]  cleanup_net+0x37c/0x5b0
[  122.709742][  T364]  process_scheduled_works+0x56a/0xa50
[  122.709773][  T364]  worker_thread+0x569/0x750
[  122.709800][  T364]  kthread+0x223/0x270
[  122.709817][  T364]  ret_from_fork+0x146/0x330
[  122.709847][  T364]  ret_from_fork_asm+0x1a/0x30
[  122.709875][  T364] 
[  122.709879][  T364] value changed: 0x00 -> 0x01
[  122.709889][  T364] 
[  122.709892][  T364] Reported by Kernel Concurrency Sanitizer on:
[  122.709903][  T364] CPU: 0 UID: 0 PID: 364 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(lazy) 
[  122.709927][  T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.709942][  T364] Workqueue: netns cleanup_net
[  122.709962][  T364] ==================================================================
[  122.931694][ T6758] loop2: detected capacity change from 0 to 512
[  122.949516][ T6758] EXT4-fs: dax option not supported