last executing test programs:

4m34.497833517s ago: executing program 32 (id=168):
r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0xc0082)
mount(0x0, &(0x7f0000000540)='./proc\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0)
pread64(r1, 0x0, 0x0, 0x3f00)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)

4m12.093342269s ago: executing program 33 (id=629):
r0 = gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, 0x0, 0x0, 0x400c1c5, 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x2000)

3m42.747304982s ago: executing program 34 (id=1052):
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
futex(r1, 0xd, 0x2, 0x0, 0x0, 0x2)
futex(r1, 0xd, 0x2, 0x0, 0x0, 0x2)
futex$unlock_wake_list64(r1, 0x201, 0x7, 0x0, 0x0, 0x10000)

3m24.692405044s ago: executing program 35 (id=1240):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_udp(0xa, 0x2, 0x0)
set_mempolicy(0x4005, &(0x7f0000000140)=0x16, 0x6)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000180)='\a', 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000540)={0x2, 'lo\x00'}, 0x18)

3m15.747458688s ago: executing program 36 (id=1365):
perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000038c0)='ext4\x00', &(0x7f0000003900)='./file0\x00', 0x1044cc0, &(0x7f0000000480)={[{@grpid}, {@grpquota}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa9}}, {@barrier}, {@data_writeback}]}, 0x4, 0x523, &(0x7f0000000680)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003f40)={0x18, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8d4}, 0x0)

2m42.216096763s ago: executing program 37 (id=1755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r1 = socket$netlink(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xc902, 0xfd, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m17.67672102s ago: executing program 38 (id=1851):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13f99}]}}]}, 0x44}}, 0x0)
write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d)

2m14.70578399s ago: executing program 39 (id=2001):
getpid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m11.751632508s ago: executing program 0 (id=2044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2m11.751462388s ago: executing program 40 (id=2044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

1m5.391663868s ago: executing program 4 (id=3031):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x40000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x4, 0xf9, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)

1m5.354196271s ago: executing program 4 (id=3032):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0xfffffffc, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0x7)
r3 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x60002009})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000280)={0x60000000})
connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20000000)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m5.190221968s ago: executing program 4 (id=3035):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m5.120000145s ago: executing program 4 (id=3036):
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x289, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/1/root/var\x00', 0x1ff)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000b80)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r1, &(0x7f0000000c40)='1', 0x1)

1m4.964292631s ago: executing program 4 (id=3039):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@loopback, @local, @mcast1, 0x0, 0x1, 0x10, 0x400, 0x7, 0x1000000, r1})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x3, 0x6, @remote}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810)

1m4.611643757s ago: executing program 4 (id=3048):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xa5, 0x0, &(0x7f0000000780)='GPL\x00', 0x4b1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000800)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r0)

1m4.611409077s ago: executing program 41 (id=3048):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xa5, 0x0, &(0x7f0000000780)='GPL\x00', 0x4b1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000800)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r0)

44.090616578s ago: executing program 9 (id=3287):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80800c, &(0x7f0000000140)=ANY=[], 0xfe, 0x27a, &(0x7f0000000280)="$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")
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xa, 0x7, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
chdir(&(0x7f0000000500)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000002100)='./file2\x00', 0x42, 0x42)
openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x141a42, 0x15)
listxattr(&(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200)=""/22, 0x16)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3221001, 0x0, 0x0, 0x0, &(0x7f0000000700))
creat(&(0x7f0000001b00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14)

43.645551613s ago: executing program 9 (id=3295):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48)

41.806892769s ago: executing program 9 (id=3312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}})

41.789494481s ago: executing program 9 (id=3313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x240008c0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x3004000, &(0x7f0000000600), 0x2, 0x7ba, &(0x7f00000014c0)="$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")
stat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
open(&(0x7f0000002400)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000002440)=@loop={'/dev/loop', 0x0}, &(0x7f0000002480)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f00000024c0)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000002640)=@loop={'/dev/loop', 0x0}, r1, 0x0)

41.424923727s ago: executing program 9 (id=3316):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5, 0x2c00}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c881}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

41.183257192s ago: executing program 9 (id=3317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28)
recvfrom(r0, &(0x7f0000000f00)=""/4059, 0xfdb, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r0)
recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000002000)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000002040)=0x8, 0x4)

41.167671614s ago: executing program 42 (id=3317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28)
recvfrom(r0, &(0x7f0000000f00)=""/4059, 0xfdb, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r0)
recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000002000)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000002040)=0x8, 0x4)

33.395795088s ago: executing program 8 (id=3398):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f30075"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xe}, 0x94)
perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0xc1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c00", @ANYBLOB="41ba"], 0x48}, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
listen(r1, 0xb)

33.337152614s ago: executing program 8 (id=3399):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x5fffffff)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)

31.851507394s ago: executing program 8 (id=3404):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x1, 0x2, 0xffff})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0102, 0x0)
write$vga_arbiter(r1, 0x0, 0x0)
write$vga_arbiter(r1, &(0x7f0000000100)=@other={'decodes', ' ', 'mem'}, 0xc)
setresgid(0xee00, 0xee01, 0x0)
shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil)
setuid(0xee01)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x829a84ee44d7aeb8)
clock_gettime(0x0, &(0x7f00000001c0))

31.758309334s ago: executing program 8 (id=3408):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@grpjquota}, {@nolazytime}, {@norecovery}, {@grpjquota}, {@barrier}]}, 0xfe, 0x295, &(0x7f0000000340)="$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")
mknod$loop(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3f0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181cc63, 0x0, 0x3d, 0x0, &(0x7f0000000a00))
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000b80))
creat(&(0x7f0000000dc0)='./bus\x00', 0xf2)
syz_mount_image$ext4(0x0, &(0x7f0000000e00)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mount(&(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e80)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000ec0)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
rmdir(&(0x7f0000001000)='./file0\x00')

31.254565864s ago: executing program 8 (id=3425):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x7ffffe, 0x43, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x9100, &(0x7f0000000240)={0x6, 0x8a, 0x40000}, 0x37)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1da)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/20, 0x14}], 0x1)

31.168864223s ago: executing program 8 (id=3418):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x842, 0x1c1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x3004000, &(0x7f0000000300), 0x2, 0x7ba, &(0x7f0000000340)="$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")
symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
creat(&(0x7f0000000e40)='./file1\x00', 0x4)

31.123563837s ago: executing program 43 (id=3418):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x842, 0x1c1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x3004000, &(0x7f0000000300), 0x2, 0x7ba, &(0x7f0000000340)="$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")
symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
creat(&(0x7f0000000e40)='./file1\x00', 0x4)

16.862297447s ago: executing program 5 (id=3572):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000680)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f00000006c0)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000740)=0x1)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0)

16.843049559s ago: executing program 5 (id=3573):
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$kcm(r0, 0x0, 0x2100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x46, 0x0, 0xa, 0x4}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, <r1=>0x0})
sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20008810)
socket$kcm(0x2, 0x1, 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x400, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x32, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffe}}, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8)

16.729323121s ago: executing program 5 (id=3576):
r0 = socket(0x1e, 0x4, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
r2 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

16.560396168s ago: executing program 5 (id=3579):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff35a}, 0x4040, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socket(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1b4)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
read$msr(r0, &(0x7f0000000540)=""/188, 0xbc)

16.185128715s ago: executing program 5 (id=3588):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc0049364, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000b00)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000b40)={0xa, 0x4e23, 0x6, @local, 0xb}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000b80)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x9c, 0x11, 0x0, @local, @local, {[], {0x4ea3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "9167922218d8d8cc829b5011f3aae7f76594125f3ca136e54c15ce81323407e7", "93f4e66f7c22b74c282620aa6762ac19bc005a86fc63c76eeb3c2f169ed59955bd1122095b61de86ebca601638f17770", "29191f62beac52934d0d5911e518ac3dc4f2410f881e19619f469606", {"ad0bd09706ed564b3a07165f761b51d1", "a61ea8fe60d866390eacc4e3188504a5"}}}}}}}}, 0x0)

16.028191091s ago: executing program 5 (id=3590):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x8000000)
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004)

16.027928241s ago: executing program 44 (id=3590):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x8000000)
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004)

6.868462396s ago: executing program 1 (id=3689):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x2d, 0x20040040)
connect$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000680)=@abs={0x0, 0x0, 0x7}, 0x6e)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000700)={0x40000006})
connect$unix(r0, &(0x7f0000000740)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

6.840378989s ago: executing program 1 (id=3690):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000740)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.961292467s ago: executing program 1 (id=3699):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x88, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1d}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x1}, 0x11cb2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x15, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.388396396s ago: executing program 1 (id=3703):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x214802, &(0x7f0000000b40)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000c00)="$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")
open(&(0x7f0000001180)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f00000011c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001200)='./bus\x00', 0x0, 0x5000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = open(&(0x7f0000001280)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000012c0)=0x3f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x5, 0x8ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x42, 0xc8)
pwrite64(r2, &(0x7f0000001380)='\"', 0x1, 0x4fed0)
r3 = open(&(0x7f0000000900)='./file1\x00', 0x66842, 0x21)
pwritev2(r3, &(0x7f00000009c0)=[{&(0x7f0000000a00)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

5.212903823s ago: executing program 1 (id=3705):
socket$netlink(0x10, 0x3, 0x10)
creat(&(0x7f0000002640)='./file1\x00', 0x4)
syz_open_dev$loop(0x0, 0x6, 0x40000)
pipe2(0x0, 0x800)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000002740)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
creat(&(0x7f00000027c0)='./file1\x00', 0x10)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000002840)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r0, &(0x7f0000002880)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)

4.973570178s ago: executing program 7 (id=3709):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x54c}, 0x10ecc8, 0xc, 0x40, 0x8, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000980)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000009c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000a00)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
mount(0x0, &(0x7f0000000a40)='./sys\x00', 0x0, 0x0, 0x0)

4.814672583s ago: executing program 1 (id=3711):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r0})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_rxfh_indir={0x7d06e9c920ef7557, 0x3, [0x7, 0x3ff, 0x5]}})
add_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="a292432341a9fb77f540953b120f3e46a6cd15d70102dab7a21b8e8e40fac8a286df2e815567b4566380f7dbb08a6ccf7730859c404c27b020dc73fdf25dc56edab7b41f6d4238137ea349d3456d783f3fac8c846e5feed112a56660516c450914740e61b3865d68436e057abeadba7622ea7f676283f0c35c0f794cda5cdac8b7e0fe54b0edb66e4d9743d1930c42d10f52f55921720d90bd92c8d0468fb9778d9b0ac69baf65b84e8ad6afd9e47ad88893f81b4dd9906fe96242557bdb953f1c24e6238310a694593594932a340297c96cd150becea3213d947d9993ff9421b0b07a4b25165dd448f453f326", 0xed, r0)
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08000002907800000000e00000012200334f0000000106000001e1010203c0a801010000000000000000"], 0x0)

4.400959536s ago: executing program 45 (id=3711):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r0})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_rxfh_indir={0x7d06e9c920ef7557, 0x3, [0x7, 0x3ff, 0x5]}})
add_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="a292432341a9fb77f540953b120f3e46a6cd15d70102dab7a21b8e8e40fac8a286df2e815567b4566380f7dbb08a6ccf7730859c404c27b020dc73fdf25dc56edab7b41f6d4238137ea349d3456d783f3fac8c846e5feed112a56660516c450914740e61b3865d68436e057abeadba7622ea7f676283f0c35c0f794cda5cdac8b7e0fe54b0edb66e4d9743d1930c42d10f52f55921720d90bd92c8d0468fb9778d9b0ac69baf65b84e8ad6afd9e47ad88893f81b4dd9906fe96242557bdb953f1c24e6238310a694593594932a340297c96cd150becea3213d947d9993ff9421b0b07a4b25165dd448f453f326", 0xed, r0)
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08000002907800000000e00000012200334f0000000106000001e1010203c0a801010000000000000000"], 0x0)

2.57392596s ago: executing program 0 (id=3712):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0)
mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0)

2.57194158s ago: executing program 7 (id=3722):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440), 0xfe, 0x244, &(0x7f0000000480)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa3}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.408696777s ago: executing program 0 (id=3713):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
socket(0x10, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@remote, r2}, 0x78)

2.198200718s ago: executing program 6 (id=3716):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000480)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='aio\x00', 0x21a0405, 0x0)
unshare(0x22020600)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file1\x00', 0x42, 0x20)
pwrite64(r1, &(0x7f0000002cc0)='a', 0x1, 0x9000)
sync_file_range(r1, 0x1, 0x7, 0x6)

2.109521827s ago: executing program 7 (id=3717):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x3ffffffe]}, 0x8, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x400, 0x21)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4004662b, 0x0)

2.090347609s ago: executing program 0 (id=3718):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2800000, &(0x7f0000000080), 0xfe, 0xbc8, &(0x7f0000001340)="$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")
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x859, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000380)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234(', 0x28, 0x0, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x42, 0x98)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@remote, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @local, @multicast, @private1}}}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000800)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

2.031535075s ago: executing program 6 (id=3719):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

1.888031909s ago: executing program 7 (id=3721):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x0, 0x8ffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='./tracing\x00', 0x204858, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000000d40)="$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")
write$binfmt_aout(r4, &(0x7f0000000a40)={{0x10b, 0x2, 0x7, 0x14a, 0x16f, 0x9, 0x4e}}, 0xfffffea9)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1.887169539s ago: executing program 6 (id=3726):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24014401)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x320, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008080)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

1.865786971s ago: executing program 2 (id=3728):
socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
setns(0xc9, 0x0)
socket(0x2a, 0x2, 0x0)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xbc43, 0xc000, 0x2007, 0x19d})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.77557151s ago: executing program 7 (id=3730):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, 0x0)

1.77531549s ago: executing program 6 (id=3731):
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8c, 0x2}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000540), 0xf00)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, 0x0)
bind$can_raw(r1, &(0x7f0000000740)={0x1d, r2}, 0x10)

1.667130151s ago: executing program 2 (id=3732):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
unshare(0x2c020400)
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
gettid()
timer_create(0x4, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x9)

1.498702768s ago: executing program 6 (id=3735):
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20402, 0x0)
r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x4}}, './file1\x00'})

1.48328531s ago: executing program 2 (id=3736):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x1e, 0x0, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0xc1842, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000a40)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000500)={'wg0\x00', 0x400})

1.451308023s ago: executing program 6 (id=3737):
r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x2d0000000000000}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000001000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r4, &(0x7f0000000480)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r4, 0x5)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500030008"], 0x4a)

1.423761496s ago: executing program 3 (id=3738):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x20d42, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x66802, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
unshare(0x26020480)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000e80)='./debug\x00', &(0x7f0000000ec0)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./debug/lru_gen\x00', 0x2, 0x0)
write(r2, &(0x7f0000000f40)='+ 1 0 3', 0x7)

1.271515121s ago: executing program 3 (id=3739):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x11, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0)

1.195255469s ago: executing program 3 (id=3740):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2082, 0x0)
syz_open_dev$usbfs(0x0, 0x205, 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0xc0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000480), 0x208e262)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180), 0x171}}], 0x40000000000018e, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

1.106416218s ago: executing program 2 (id=3741):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x80000006}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
write$tun(r2, &(0x7f0000000400)=ANY=[], 0xfdef)

997.088859ms ago: executing program 2 (id=3742):
setxattr(0x0, 0x0, &(0x7f0000000680)='overlay\x00', 0x8, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x7ffff004)

995.827289ms ago: executing program 0 (id=3743):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

56.705304ms ago: executing program 0 (id=3744):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x1, @loopback, 0x400}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hopopts_2292={{0x28, 0x29, 0xb, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0xb1bbf2d6b755cdf8, 0x0, 0x0, 0x3}}]}}}], 0x28}, 0xff00)
pread64(0xffffffffffffffff, &(0x7f0000000c40)=""/102400, 0x19000, 0x80000000000000)
syz_usb_connect(0x0, 0x62, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x2)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x23, 0x3, 0x12, 0x8, 0x0, 0x53, 0x0})
sendmsg$nl_route(r2, &(0x7f0000019e40)={0x0, 0x0, &(0x7f0000019e80)={&(0x7f0000019ec0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

55.738254ms ago: executing program 7 (id=3754):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000340)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"})
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x80000001})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000003c0)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"})
r1 = memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x71f2, 0x1000007})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r2 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000001640)='4', 0x1)
fcntl$addseals(r1, 0x409, 0xb)

54.084564ms ago: executing program 2 (id=3745):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x39b1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000500), &(0x7f0000000540)=@udp=r2}, 0x20)
recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x4000000, @mcast2, 0x7ff}, 0x1c)

53.801364ms ago: executing program 3 (id=3746):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10001)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780), 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000, 0x81800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x8, 0x10000000, 0x3, 0xc11, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

21.220858ms ago: executing program 3 (id=3747):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x1, 0x2, 0x1, 0x2c45, 0x4, 0x0, 0x10, 0x2}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$P9_RLERROR(r1, &(0x7f0000000340)=ANY=[], 0xb)
sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}], 0x1, 0x4040040)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000580)=0x7f, 0x4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)

0s ago: executing program 3 (id=3748):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2982, 0x0)
ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

denied  { write } for  pid=15008 comm="syz.7.3392" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  297.110982][T15016] loop6: detected capacity change from 0 to 512
[  297.124884][T15016] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777'
[  297.145375][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.275308][T15033] rxe_eth0 speed is unknown, defaulting to 1000
[  298.222075][T15038] loop1: detected capacity change from 0 to 1024
[  298.248460][T15038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.266877][   T30] audit: type=1400 audit(1700000014.550:3218): avc:  denied  { write } for  pid=15037 comm="syz.1.3400" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  298.684258][T14685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.707126][T15051] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  298.750977][T15055] loop6: detected capacity change from 0 to 512
[  298.753901][T15053] Invalid ELF header magic: != ELF
[  298.797638][T15059] loop8: detected capacity change from 0 to 128
[  298.820803][T15055] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory
[  298.820825][T15055] loop6: lost filesystem error report for type 5 error -12
[  298.821034][T15055] EXT4-fs (loop6): 2 truncates cleaned up
[  298.821608][T15055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.859188][   T30] audit: type=1400 audit(1700000015.160:3219): avc:  denied  { write } for  pid=15054 comm="syz.6.3405" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  298.864096][T15055] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.3405: bg 0: block 5: invalid block bitmap
[  298.864385][T15055] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 59 with error 28
[  298.864434][T15055] EXT4-fs (loop6): This should not happen!! Data will be lost
[  298.864434][T15055] 
[  298.864449][T15055] EXT4-fs (loop6): Total free blocks count 0
[  298.864464][T15055] EXT4-fs (loop6): Free/Dirty block details
[  298.864478][T15055] EXT4-fs (loop6): free_blocks=0
[  298.864492][T15055] EXT4-fs (loop6): dirty_blocks=59
[  298.864505][T15055] EXT4-fs (loop6): Block reservation details
[  298.864516][T15055] EXT4-fs (loop6): i_reserved_data_blocks=59
[  298.959146][T15059] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.959354][T15059] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  298.965814][   T30] audit: type=1400 audit(1700000015.260:3220): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.033796][   T30] audit: type=1400 audit(1700000015.320:3221): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.033827][   T30] audit: type=1400 audit(1700000015.320:3222): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.037906][T15059] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 33: comm syz.8.3408: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  299.038009][   T30] audit: type=1400 audit(1700000015.340:3223): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.038168][T15059] EXT4-fs error (device loop8) in do_split:2029: Corrupt filesystem
[  299.040684][   T30] audit: type=1400 audit(1700000015.340:3224): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.042296][   T30] audit: type=1400 audit(1700000015.340:3225): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.097356][   T30] audit: type=1400 audit(1700000015.400:3226): avc:  denied  { write } for  pid=15058 comm="syz.8.3408" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.129624][T10217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.138335][T15059] loop8: detected capacity change from 128 to 64
[  299.140505][T15067] EXT4-fs warning (device loop8): ext4_dx_find_entry:1728: inode #2: lblock 1: comm syz.8.3408: error -ENOMEM reading directory block
[  299.171515][T15071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3414'.
[  299.171754][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'.
[  299.176490][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3414'.
[  299.246353][T13502] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz-executor: error -ENOMEM reading directory block
[  299.246413][T13502] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7435: Out of memory
[  299.247092][T13502] EXT4-fs error (device loop8): ext4_dirty_inode:7655: inode #2: comm syz-executor: mark_inode_dirty error
[  299.332933][T13502] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.334279][T15079] loop7: detected capacity change from 0 to 1024
[  299.354749][T15079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.368172][   T30] audit: type=1400 audit(1700000015.670:3227): avc:  denied  { write } for  pid=15078 comm="syz.7.3417" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  299.426688][T15085] Invalid ELF header magic: != ELF
[  299.460184][T15077] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.460281][T15077] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.536951][T15077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.539309][T15077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.616484][ T6210] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.616766][ T6210] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.616873][ T6210] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.680451][T15083] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.686752][T15083] 8021q: adding VLAN 0 to HW filter on device team0
[  299.704238][T15083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.729812][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.748821][T15083] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.748855][T15083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.753254][T15083] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.753287][T15083] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.770440][T15083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.772055][T15083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.779392][T15083] veth1_vlan: left promiscuous mode
[  299.780040][T15083] veth0_vlan: left promiscuous mode
[  299.782755][T15083] veth0_vlan: entered promiscuous mode
[  299.784864][T15083] veth1_vlan: entered promiscuous mode
[  299.789993][T15083] veth1_macvtap: left promiscuous mode
[  299.790734][T15083] veth0_macvtap: left promiscuous mode
[  299.791886][T15083] veth0_macvtap: entered promiscuous mode
[  299.793039][T15083] veth1_macvtap: entered promiscuous mode
[  299.798119][T15083] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  299.799050][T15083] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  299.799731][T15083] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  299.800314][T15083] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  299.805765][ T6210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.805864][ T6210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.805898][ T6210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.926254][T15099] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3423'.
[  299.996740][T15105] loop7: detected capacity change from 0 to 2048
[  300.024238][T15105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.033454][   T30] audit: type=1400 audit(1700000016.330:3228): avc:  denied  { write } for  pid=15104 comm="syz.7.3424" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  300.036838][T15090] rxe_eth0 speed is unknown, defaulting to 1000
[  300.107792][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.200083][T15115] xt_CT: You must specify a L4 protocol and not use inversions on it
[  300.231870][T15118] tipc: Failed to remove unknown binding: 66,0,0/4:2642044189/2642044190
[  300.233929][T15118] tipc: Failed to remove unknown binding: 66,0,0/4:2642044189/2642044190
[  300.284662][T15121] iso9660: Unknown parameter 'checkVstr	54¬'
[  300.309910][T15121] vfat: Unknown parameter 'uni_xrrors'
[  300.323028][T15125] Unable to read rock-ridge attributes
[  300.335360][T15125] Unable to read rock-ridge attributes
[  300.341406][T15125] iso9660: Corrupted directory entry in block 1 of inode 1792
[  300.375778][T15090] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.375823][T15090] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.375925][T15090] bridge_slave_0: entered allmulticast mode
[  300.376338][T15090] bridge_slave_0: entered promiscuous mode
[  300.406194][T15090] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.406229][T15090] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.406384][T15090] bridge_slave_1: entered allmulticast mode
[  300.407546][T15090] bridge_slave_1: entered promiscuous mode
[  300.449517][T15090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.450767][T15090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.480225][T15090] team0: Port device team_slave_0 added
[  300.481108][T15090] team0: Port device team_slave_1 added
[  300.493478][T15090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.493493][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.493527][T15090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.493933][T15090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.493944][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.493993][T15090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.513382][T15090] hsr_slave_0: entered promiscuous mode
[  300.513803][T15090] hsr_slave_1: entered promiscuous mode
[  300.514010][T15090] debugfs: 'hsr0' already exists in 'hsr'
[  300.514022][T15090] Cannot create hsr debugfs directory
[  300.614249][T15145] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  300.646241][T15090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  300.649232][T15090] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.649710][T15090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  300.654662][T15090] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.655101][T15090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  300.658684][T15090] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  300.659144][T15090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  300.661314][T15145] FAULT_INJECTION: forcing a failure.
[  300.661314][T15145] name failslab, interval 1, probability 0, space 0, times 0
[  300.661388][T15145] CPU: 1 UID: 0 PID: 15145 Comm: syz.6.3437 Not tainted syzkaller #0 PREEMPT(lazy) 
[  300.661414][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  300.661471][T15145] Call Trace:
[  300.661478][T15145]  <TASK>
[  300.661486][T15145]  __dump_stack+0x1d/0x30
[  300.661512][T15145]  dump_stack_lvl+0x95/0xd0
[  300.661536][T15145]  dump_stack+0x15/0x1b
[  300.661570][T15145]  should_fail_ex+0x259/0x270
[  300.661601][T15145]  ? hash_netportnet_create+0x2f8/0x7c0
[  300.661625][T15145]  should_failslab+0x8c/0xb0
[  300.661698][T15145]  __kmalloc_cache_noprof+0x5d/0x3e0
[  300.661733][T15145]  ? hash_netportnet_create+0x2f8/0x7c0
[  300.661802][T15145]  hash_netportnet_create+0x2f8/0x7c0
[  300.661827][T15145]  ? __pfx_hash_netportnet_create+0x10/0x10
[  300.661852][T15145]  ip_set_create+0x3cc/0x970
[  300.661963][T15145]  ? __nla_parse+0x40/0x60
[  300.662045][T15145]  nfnetlink_rcv_msg+0x4e2/0x5b0
[  300.662067][T15145]  ? __list_del_entry_valid_or_report+0x65/0x130
[  300.662158][T15145]  netlink_rcv_skb+0x11e/0x220
[  300.662182][T15145]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  300.662209][T15145]  nfnetlink_rcv+0x15f/0x1740
[  300.662316][T15145]  ? kmem_cache_free+0x106/0x3b0
[  300.662338][T15145]  ? __kfree_skb+0x109/0x150
[  300.662359][T15145]  ? nlmon_xmit+0x4f/0x60
[  300.662389][T15145]  ? consume_skb+0x4b/0x130
[  300.662409][T15145]  ? nlmon_xmit+0x4f/0x60
[  300.662446][T15145]  ? dev_hard_start_xmit+0x34e/0x380
[  300.662471][T15145]  ? __dev_queue_xmit+0x1361/0x1ec0
[  300.662494][T15145]  ? __dev_queue_xmit+0x151/0x1ec0
[  300.662594][T15145]  ? skb_clone+0x151/0x1f0
[  300.662621][T15145]  ? __netlink_deliver_tap+0x3a7/0x3e0
[  300.662754][T15145]  netlink_unicast+0x665/0x740
[  300.662806][T15145]  netlink_sendmsg+0x5ef/0x740
[  300.662833][T15145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.662857][T15145]  ____sys_sendmsg+0x54a/0x590
[  300.662882][T15145]  ___sys_sendmsg+0x196/0x1e0
[  300.662956][T15145]  __x64_sys_sendmsg+0xd4/0x160
[  300.662982][T15145]  x64_sys_call+0x22ab/0x2550
[  300.663009][T15145]  do_syscall_64+0x116/0x380
[  300.663078][T15145]  ? clear_bhb_loop+0x70/0xc0
[  300.663102][T15145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.663196][T15145] RIP: 0033:0x7f9216988f19
[  300.663213][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.663258][T15145] RSP: 002b:00007f92153cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.663281][T15145] RAX: ffffffffffffffda RBX: 00007f9216c05fa0 RCX: 00007f9216988f19
[  300.663484][T15145] RDX: 0000000000004840 RSI: 0000200000000140 RDI: 0000000000000006
[  300.663498][T15145] RBP: 00007f9216a17f6d R08: 0000000000000000 R09: 0000000000000000
[  300.663511][T15145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.663525][T15145] R13: 00007f9216c06038 R14: 00007f9216c05fa0 R15: 00007ffdaa5a9c88
[  300.663545][T15145]  </TASK>
[  300.670482][T15090] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.705677][ T5189] net_ratelimit: 26 callbacks suppressed
[  300.705694][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  300.711262][T15090] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.711299][T15090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.711379][T15090] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.711427][T15090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.722677][T15147] Invalid ELF header magic: != ELF
[  300.826756][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.831208][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.862249][T15090] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.875679][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  300.878571][T15090] 8021q: adding VLAN 0 to HW filter on device team0
[  300.889155][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.889187][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.892742][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.892853][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.976001][    C1] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  300.985684][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.096769][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.199222][T15090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.206693][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.316042][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.336931][T15090] veth0_vlan: entered promiscuous mode
[  301.339646][T15090] veth1_vlan: entered promiscuous mode
[  301.363640][T15090] veth0_macvtap: entered promiscuous mode
[  301.368914][T15090] veth1_macvtap: entered promiscuous mode
[  301.375378][T15090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.381284][T15090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.388525][ T6210] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.388676][ T6210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.388761][ T6210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.388825][ T6210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.425656][ T5191] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.511205][   T30] audit: type=1400 audit(1700000017.800:3229): avc:  denied  { read } for  pid=15180 comm="syz.5.3420" path="socket:[46219]" dev="sockfs" ino=46219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  301.536280][ T5191] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  301.569680][T15188] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  301.569720][T15188] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  301.789162][T15199] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.789316][T15199] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.834154][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.836644][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.892033][T15199] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  301.915210][T15202] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.924556][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.980265][T15202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.987457][T15202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.997157][T15202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  301.997233][T15202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.002053][T15202] veth1_vlan: left promiscuous mode
[  302.005899][T15202] veth0_vlan: left promiscuous mode
[  302.006772][T15202] veth0_vlan: entered promiscuous mode
[  302.012290][T15202] veth1_vlan: entered promiscuous mode
[  302.022318][T15202] veth1_macvtap: left promiscuous mode
[  302.022804][T15202] veth0_macvtap: left promiscuous mode
[  302.024978][T15202] veth0_macvtap: entered promiscuous mode
[  302.025549][T15202] veth1_macvtap: entered promiscuous mode
[  302.037858][T15202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  302.038387][T15202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  302.042598][T15202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  302.043242][T15202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  302.080673][T15202] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.082090][T15202] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.086956][T15202] batman_adv: batadv0: Interface activated: ip6gretap2
[  302.090257][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.090289][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.091422][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.091517][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.283096][T15209] set_capacity_and_notify: 4 callbacks suppressed
[  302.283113][T15209] loop7: detected capacity change from 0 to 512
[  302.283466][T15209] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  302.312273][T15209] FAULT_INJECTION: forcing a failure.
[  302.312273][T15209] name failslab, interval 1, probability 0, space 0, times 0
[  302.312299][T15209] CPU: 1 UID: 0 PID: 15209 Comm: syz.7.3449 Not tainted syzkaller #0 PREEMPT(lazy) 
[  302.312373][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  302.312387][T15209] Call Trace:
[  302.312395][T15209]  <TASK>
[  302.312403][T15209]  __dump_stack+0x1d/0x30
[  302.312431][T15209]  dump_stack_lvl+0x95/0xd0
[  302.312485][T15209]  dump_stack+0x15/0x1b
[  302.312509][T15209]  should_fail_ex+0x259/0x270
[  302.312541][T15209]  ? hash_netportnet_create+0x2f8/0x7c0
[  302.312646][T15209]  should_failslab+0x8c/0xb0
[  302.312680][T15209]  __kmalloc_cache_noprof+0x5d/0x3e0
[  302.312789][T15209]  ? hash_netportnet_create+0x2f8/0x7c0
[  302.312892][T15209]  hash_netportnet_create+0x2f8/0x7c0
[  302.312919][T15209]  ? __pfx_hash_netportnet_create+0x10/0x10
[  302.312944][T15209]  ip_set_create+0x3cc/0x970
[  302.312976][T15209]  ? __nla_parse+0x40/0x60
[  302.313083][T15209]  nfnetlink_rcv_msg+0x4e2/0x5b0
[  302.313121][T15209]  netlink_rcv_skb+0x11e/0x220
[  302.313141][T15209]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  302.313183][T15209]  nfnetlink_rcv+0x15f/0x1740
[  302.313225][T15209]  ? xas_load+0x413/0x430
[  302.313248][T15209]  ? __rcu_read_unlock+0x4e/0x70
[  302.313275][T15209]  ? xa_load+0xb1/0xe0
[  302.313366][T15209]  ? __account_obj_stock+0x27f/0x2d0
[  302.313511][T15209]  ? __rcu_read_unlock+0x4e/0x70
[  302.313534][T15209]  ? __memcg_slab_post_alloc_hook+0x35e/0x8c0
[  302.313570][T15209]  ? should_fail_ex+0x31/0x270
[  302.313596][T15209]  ? security_inode_alloc+0x37/0x100
[  302.313703][T15209]  ? should_failslab+0x8c/0xb0
[  302.313735][T15209]  ? kmem_cache_alloc_noprof+0x179/0x3d0
[  302.313763][T15209]  ? security_inode_alloc+0x37/0x100
[  302.313831][T15209]  ? timerqueue_linked_add+0x149/0x1f0
[  302.313857][T15209]  ? rb_insert_color+0x6e/0x2a0
[  302.313882][T15209]  ? selinux_nlmsg_lookup+0x9b/0x870
[  302.314116][T15209]  ? selinux_netlink_send+0x6c2/0x720
[  302.314195][T15209]  ? should_fail_ex+0xdb/0x270
[  302.314220][T15209]  ? __rcu_read_unlock+0x33/0x70
[  302.314244][T15209]  ? __netlink_lookup+0x274/0x2a0
[  302.314272][T15209]  netlink_unicast+0x665/0x740
[  302.314359][T15209]  netlink_sendmsg+0x5ef/0x740
[  302.314460][T15209]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.314540][T15209]  ____sys_sendmsg+0x54a/0x590
[  302.314572][T15209]  ___sys_sendmsg+0x196/0x1e0
[  302.314609][T15209]  __x64_sys_sendmsg+0xd4/0x160
[  302.314638][T15209]  x64_sys_call+0x22ab/0x2550
[  302.314667][T15209]  do_syscall_64+0x116/0x380
[  302.314690][T15209]  ? clear_bhb_loop+0x70/0xc0
[  302.314736][T15209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.314759][T15209] RIP: 0033:0x7f8286a18f19
[  302.314833][T15209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.314885][T15209] RSP: 002b:00007f8285467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.314908][T15209] RAX: ffffffffffffffda RBX: 00007f8286c95fa0 RCX: 00007f8286a18f19
[  302.314972][T15209] RDX: 0000000000004840 RSI: 0000200000000140 RDI: 0000000000000006
[  302.314989][T15209] RBP: 00007f8286aa7f6d R08: 0000000000000000 R09: 0000000000000000
[  302.315004][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.315018][T15209] R13: 00007f8286c96038 R14: 00007f8286c95fa0 R15: 00007fff4d880a98
[  302.315036][T15209]  </TASK>
[  302.352972][T15211] tipc: Failed to remove unknown binding: 66,0,0/0:3539377855/3539377857
[  302.352997][T15211] tipc: Failed to remove unknown binding: 66,0,0/0:3539377855/3539377856
[  302.353233][T15211] tipc: Failed to remove unknown binding: 66,0,0/0:3539377855/3539377857
[  302.353254][T15211] tipc: Failed to remove unknown binding: 66,0,0/0:3539377855/3539377856
[  302.984267][T15228] loop5: detected capacity change from 0 to 512
[  303.002164][T15228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.002304][T15228] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.269641][T15090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.432050][T15238] FAULT_INJECTION: forcing a failure.
[  303.432050][T15238] name failslab, interval 1, probability 0, space 0, times 0
[  303.432081][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.5.3462 Not tainted syzkaller #0 PREEMPT(lazy) 
[  303.432108][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  303.432123][T15238] Call Trace:
[  303.432131][T15238]  <TASK>
[  303.432141][T15238]  __dump_stack+0x1d/0x30
[  303.432294][T15238]  dump_stack_lvl+0x95/0xd0
[  303.432320][T15238]  dump_stack+0x15/0x1b
[  303.432345][T15238]  should_fail_ex+0x259/0x270
[  303.432421][T15238]  ? __trace_uprobe_create+0x1c3/0xa40
[  303.432500][T15238]  should_failslab+0x8c/0xb0
[  303.432608][T15238]  __kmalloc_node_track_caller_noprof+0xb6/0x4d0
[  303.432720][T15238]  ? argv_split+0x2e/0x250
[  303.432742][T15238]  ? __trace_uprobe_create+0x1c3/0xa40
[  303.432801][T15238]  kstrdup+0x3e/0xd0
[  303.432821][T15238]  __trace_uprobe_create+0x1c3/0xa40
[  303.432899][T15238]  ? __pfx___trace_uprobe_create+0x10/0x10
[  303.432950][T15238]  trace_probe_create+0x87/0xd0
[  303.432978][T15238]  trace_uprobe_create+0x1c/0x30
[  303.433007][T15238]  dyn_event_create+0x3e/0x70
[  303.433047][T15238]  create_or_delete_trace_uprobe+0x54/0x80
[  303.433081][T15238]  trace_parse_run_command+0x198/0x2d0
[  303.433118][T15238]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  303.433235][T15238]  probes_write+0x34/0x50
[  303.433265][T15238]  ? __pfx_probes_write+0x10/0x10
[  303.433340][T15238]  vfs_write+0x24f/0x990
[  303.433374][T15238]  ? __fget_files+0x184/0x1c0
[  303.433401][T15238]  ? mutex_lock+0x52/0x90
[  303.433563][T15238]  ksys_write+0xdc/0x1a0
[  303.433593][T15238]  __x64_sys_write+0x40/0x50
[  303.433661][T15238]  x64_sys_call+0x154e/0x2550
[  303.433691][T15238]  do_syscall_64+0x116/0x380
[  303.433714][T15238]  ? clear_bhb_loop+0x70/0xc0
[  303.433735][T15238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.433780][T15238] RIP: 0033:0x7fdc2e668f19
[  303.433796][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.433816][T15238] RSP: 002b:00007fdc2d0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  303.433834][T15238] RAX: ffffffffffffffda RBX: 00007fdc2e8e5fa0 RCX: 00007fdc2e668f19
[  303.433848][T15238] RDX: 0000000000000009 RSI: 0000200000000f80 RDI: 0000000000000004
[  303.433859][T15238] RBP: 00007fdc2e6f7f6d R08: 0000000000000000 R09: 0000000000000000
[  303.433874][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.433888][T15238] R13: 00007fdc2e8e6038 R14: 00007fdc2e8e5fa0 R15: 00007ffdb03e22a8
[  303.433974][T15238]  </TASK>
[  304.038901][T15248] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.039203][T15248] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.116259][T15252] loop3: detected capacity change from 0 to 512
[  304.132184][T15252] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777'
[  304.240110][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  304.240127][   T30] audit: type=1326 audit(1700000020.540:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.240216][   T30] audit: type=1326 audit(1700000020.540:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247786][   T30] audit: type=1326 audit(1700000020.540:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247841][   T30] audit: type=1326 audit(1700000020.540:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247874][   T30] audit: type=1326 audit(1700000020.540:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247906][   T30] audit: type=1326 audit(1700000020.540:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247970][   T30] audit: type=1326 audit(1700000020.540:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.247998][   T30] audit: type=1326 audit(1700000020.540:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.248038][   T30] audit: type=1326 audit(1700000020.540:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.248066][   T30] audit: type=1326 audit(1700000020.540:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.3.3468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc014448f19 code=0x7ffc0000
[  304.261246][T15248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.271775][T15248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.560185][T15250] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.562384][T15250] 8021q: adding VLAN 0 to HW filter on device team0
[  304.580215][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.600187][T15250] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.600288][T15250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.602266][T15250] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.602299][T15250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.639212][T15250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.641041][T15250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.663462][T15250] veth1_vlan: left promiscuous mode
[  304.664140][T15250] veth0_vlan: left promiscuous mode
[  304.665579][T15250] veth0_vlan: entered promiscuous mode
[  304.685162][T15250] veth1_vlan: entered promiscuous mode
[  304.696474][T15250] veth1_macvtap: left promiscuous mode
[  304.697403][T15250] veth0_macvtap: left promiscuous mode
[  304.698683][T15250] veth0_macvtap: entered promiscuous mode
[  304.700231][T15250] veth1_macvtap: entered promiscuous mode
[  304.704528][T15250] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  304.705171][T15250] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  304.744246][T15250] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  304.744925][T15250] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  305.014728][T15269] loop6: detected capacity change from 0 to 512
[  305.018568][T15269] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  305.018583][T15269] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  305.053049][T15269] EXT4-fs (loop6): 1 truncate cleaned up
[  305.053546][T15269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.186037][T10217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.243169][T15275] loop6: detected capacity change from 0 to 4096
[  305.268703][T15275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.806354][   T83] net_ratelimit: 24 callbacks suppressed
[  305.806373][   T83] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  305.883260][T15295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  305.930147][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  306.043060][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  306.124409][T15300] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.124506][T15300] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.187912][T15300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.190558][T15300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.322559][T10217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.371971][T15301] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.375506][T15301] 8021q: adding VLAN 0 to HW filter on device team0
[  306.388264][T15301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.522845][T15307] loop7: detected capacity change from 0 to 512
[  306.537546][T15307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.537664][T15307] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.562857][T15301] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.562892][T15301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.564804][T15301] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.564836][T15301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.579689][T15301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.581097][T15301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.589004][T15301] veth1_vlan: left promiscuous mode
[  306.589752][T15301] veth0_vlan: left promiscuous mode
[  306.591141][T15301] veth0_vlan: entered promiscuous mode
[  306.593430][T15301] veth1_vlan: entered promiscuous mode
[  306.636285][T15301] veth1_macvtap: left promiscuous mode
[  306.636917][T15301] veth0_macvtap: left promiscuous mode
[  306.638033][T15301] veth0_macvtap: entered promiscuous mode
[  306.639456][T15301] veth1_macvtap: entered promiscuous mode
[  306.643784][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  306.644969][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  306.645550][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  306.646988][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  306.687333][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  306.757136][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.794535][T15318] FAULT_INJECTION: forcing a failure.
[  306.794535][T15318] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  306.794561][T15318] CPU: 1 UID: 0 PID: 15318 Comm: syz.7.3488 Not tainted syzkaller #0 PREEMPT(lazy) 
[  306.794601][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  306.794617][T15318] Call Trace:
[  306.794624][T15318]  <TASK>
[  306.794633][T15318]  __dump_stack+0x1d/0x30
[  306.794720][T15318]  dump_stack_lvl+0x95/0xd0
[  306.794757][T15318]  dump_stack+0x15/0x1b
[  306.794781][T15318]  should_fail_ex+0x259/0x270
[  306.794825][T15318]  should_fail_alloc_page+0xf2/0x100
[  306.794863][T15318]  alloc_pages_bulk_noprof+0xe5/0x600
[  306.794890][T15318]  copy_splice_read+0xf3/0x6b0
[  306.794920][T15318]  sock_splice_read+0xa5/0xb0
[  306.794958][T15318]  ? __pfx_sock_splice_read+0x10/0x10
[  306.794986][T15318]  splice_file_to_pipe+0x275/0x3c0
[  306.795131][T15318]  do_splice+0xa1a/0xfd0
[  306.795217][T15318]  ? __rcu_read_unlock+0x4e/0x70
[  306.795258][T15318]  ? __fget_files+0x184/0x1c0
[  306.795405][T15318]  __se_sys_splice+0x26c/0x3a0
[  306.795435][T15318]  __x64_sys_splice+0x78/0x90
[  306.795458][T15318]  x64_sys_call+0x1797/0x2550
[  306.795543][T15318]  do_syscall_64+0x116/0x380
[  306.795563][T15318]  ? clear_bhb_loop+0x70/0xc0
[  306.795595][T15318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.795618][T15318] RIP: 0033:0x7f8286a18f19
[  306.795700][T15318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.795774][T15318] RSP: 002b:00007f8285467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  306.795796][T15318] RAX: ffffffffffffffda RBX: 00007f8286c95fa0 RCX: 00007f8286a18f19
[  306.795812][T15318] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004
[  306.795825][T15318] RBP: 00007f8286aa7f6d R08: 000000007ffff000 R09: 0000000000000000
[  306.795839][T15318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.795853][T15318] R13: 00007f8286c96038 R14: 00007f8286c95fa0 R15: 00007fff4d880a98
[  306.795908][T15318]  </TASK>
[  306.800327][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  306.906018][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  306.909682][T15327] loop5: detected capacity change from 0 to 512
[  306.910168][T15327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.913854][T15327] EXT4-fs (loop5): orphan cleanup on readonly fs
[  306.914138][T15327] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.3492: EA inode 11 has unexpected i_nlink=2 ref_count=0
[  306.914167][T15327] loop5: lost filesystem error report for type 5 error -117
[  306.914380][T15327] EXT4-fs (loop5): Remounting filesystem read-only
[  306.914406][T15327] EXT4-fs (loop5): 1 orphan inode deleted
[  306.914853][T15327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  306.919249][T15323] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3490'.
[  306.964069][T15090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.993407][T15330] netlink: 'syz.6.3494': attribute type 1 has an invalid length.
[  306.993424][T15330] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.3494'.
[  307.000161][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3493'.
[  307.016158][ T6210] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  307.105250][ T5185] nci: nci_rsp_packet: unknown rsp opcode 0x7
[  307.125739][ T5185] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  307.236466][ T6210] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  308.050929][T15402] tipc: Failed to remove unknown binding: 66,0,0/0:613833408/613833409
[  308.051384][T15402] tipc: Failed to remove unknown binding: 66,0,0/0:613833408/613833409
[  308.181702][T15422] loop7: detected capacity change from 0 to 512
[  308.199805][T15422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.199872][T15422] ext4 filesystem being mounted at /579/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.264359][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.301656][T15432] ªªªªªª: renamed from hsr0
[  308.448190][T15436] FAULT_INJECTION: forcing a failure.
[  308.448190][T15436] name failslab, interval 1, probability 0, space 0, times 0
[  308.448220][T15436] CPU: 1 UID: 0 PID: 15436 Comm: syz.5.3507 Not tainted syzkaller #0 PREEMPT(lazy) 
[  308.448250][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  308.448263][T15436] Call Trace:
[  308.448269][T15436]  <TASK>
[  308.448317][T15436]  __dump_stack+0x1d/0x30
[  308.448342][T15436]  dump_stack_lvl+0x95/0xd0
[  308.448376][T15436]  dump_stack+0x15/0x1b
[  308.448428][T15436]  should_fail_ex+0x259/0x270
[  308.448492][T15436]  ? subflow_ulp_init+0x98/0x2d0
[  308.448528][T15436]  should_failslab+0x8c/0xb0
[  308.448622][T15436]  __kmalloc_cache_noprof+0x5d/0x3e0
[  308.448658][T15436]  ? mptcp_getsockopt+0x72d/0x1830
[  308.448679][T15436]  ? subflow_ulp_init+0x98/0x2d0
[  308.448764][T15436]  subflow_ulp_init+0x98/0x2d0
[  308.448868][T15436]  tcp_set_ulp+0x1eb/0x230
[  308.448895][T15436]  mptcp_subflow_create_socket+0x21f/0x500
[  308.448997][T15436]  __mptcp_nmpc_sk+0xb5/0x3d0
[  308.449017][T15436]  mptcp_getsockopt+0x72d/0x1830
[  308.449035][T15436]  ? __rcu_read_unlock+0x4e/0x70
[  308.449060][T15436]  ? mt_find+0x8c1/0xa10
[  308.449131][T15436]  ? cmp_ex_search+0x25/0x40
[  308.449156][T15436]  ? bsearch+0x91/0xc0
[  308.449263][T15436]  ? __pfx_cmp_ex_search+0x10/0x10
[  308.449371][T15436]  ? rep_movs_alternative+0xf/0xa0
[  308.449439][T15436]  ? search_extable+0x53/0x80
[  308.449466][T15436]  ? rep_movs_alternative+0xf/0xa0
[  308.449498][T15436]  ? rep_movs_alternative+0xf/0xa0
[  308.449530][T15436]  ? fixup_exception+0x742/0xce0
[  308.449572][T15436]  ? do_user_addr_fault+0x6bb/0xde0
[  308.449609][T15436]  ? __rcu_read_unlock+0x4e/0x70
[  308.449635][T15436]  ? avc_has_perm_noaudit+0xac/0x160
[  308.449666][T15436]  ? irqentry_exit_to_kernel_mode_preempt+0x55/0x80
[  308.449719][T15436]  ? irqentry_exit+0x7d/0x610
[  308.449753][T15436]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  308.449797][T15436]  sock_common_getsockopt+0x60/0x70
[  308.449891][T15436]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  308.449924][T15436]  do_sock_getsockopt+0x2ce/0x350
[  308.449948][T15436]  __x64_sys_getsockopt+0x11d/0x1a0
[  308.449971][T15436]  x64_sys_call+0x1032/0x2550
[  308.450000][T15436]  do_syscall_64+0x116/0x380
[  308.450150][T15436]  ? clear_bhb_loop+0x70/0xc0
[  308.450177][T15436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.450220][T15436] RIP: 0033:0x7fdc2e668f19
[  308.450285][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.450307][T15436] RSP: 002b:00007fdc2d0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  308.450325][T15436] RAX: ffffffffffffffda RBX: 00007fdc2e8e5fa0 RCX: 00007fdc2e668f19
[  308.450338][T15436] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004
[  308.450350][T15436] RBP: 00007fdc2e6f7f6d R08: 0000000000000000 R09: 0000000000000000
[  308.450381][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.450396][T15436] R13: 00007fdc2e8e6038 R14: 00007fdc2e8e5fa0 R15: 00007ffdb03e22a8
[  308.450415][T15436]  </TASK>
[  308.522127][T15440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3508'.
[  308.654861][T15444] loop7: detected capacity change from 0 to 1024
[  308.786225][T15444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.794877][T15449] loop5: detected capacity change from 0 to 164
[  308.817585][T15449] iso9660: Unknown parameter 'checkVstr	54¬'
[  308.912243][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.912348][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.943895][T15449] loop5: detected capacity change from 0 to 256
[  308.956945][T15449] vfat: Unknown parameter 'uni_xrrors'
[  308.990770][T15453] FAULT_INJECTION: forcing a failure.
[  308.990770][T15453] name failslab, interval 1, probability 0, space 0, times 0
[  308.990788][T15453] CPU: 0 UID: 0 PID: 15453 Comm: syz.3.3512 Not tainted syzkaller #0 PREEMPT(lazy) 
[  308.990803][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  308.990811][T15453] Call Trace:
[  308.990815][T15453]  <TASK>
[  308.990837][T15453]  __dump_stack+0x1d/0x30
[  308.990856][T15453]  dump_stack_lvl+0x95/0xd0
[  308.990869][T15453]  dump_stack+0x15/0x1b
[  308.990880][T15453]  should_fail_ex+0x259/0x270
[  308.990952][T15453]  should_failslab+0x8c/0xb0
[  308.991006][T15453]  kmem_cache_alloc_lru_noprof+0x61/0x3e0
[  308.991038][T15453]  ? __d_alloc+0x34/0x320
[  308.991073][T15453]  ? __d_alloc+0x34/0x320
[  308.991119][T15453]  __d_alloc+0x34/0x320
[  308.991134][T15453]  ? d_alloc_pseudo+0x13/0x80
[  308.991150][T15453]  d_alloc_pseudo+0x1e/0x80
[  308.991213][T15453]  alloc_path_pseudo+0xa4/0x140
[  308.991229][T15453]  alloc_file_pseudo+0x55/0x120
[  308.991295][T15453]  sock_alloc_file+0x9c/0x1e0
[  308.991369][T15453]  __sys_socket+0x118/0x180
[  308.991385][T15453]  __x64_sys_socket+0x3f/0x50
[  308.991487][T15453]  x64_sys_call+0x246e/0x2550
[  308.991563][T15453]  do_syscall_64+0x116/0x380
[  308.991600][T15453]  ? clear_bhb_loop+0x70/0xc0
[  308.991615][T15453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.991628][T15453] RIP: 0033:0x7fc014448f19
[  308.991638][T15453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.991656][T15453] RSP: 002b:00007fc012e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  308.991679][T15453] RAX: ffffffffffffffda RBX: 00007fc0146c5fa0 RCX: 00007fc014448f19
[  308.991705][T15453] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018
[  308.991735][T15453] RBP: 00007fc0144d7f6d R08: 0000000000000000 R09: 0000000000000000
[  308.991797][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.991812][T15453] R13: 00007fc0146c6038 R14: 00007fc0146c5fa0 R15: 00007ffdf15042c8
[  308.991835][T15453]  </TASK>
[  309.306151][T15467] loop3: detected capacity change from 0 to 512
[  309.308081][T15467] EXT4-fs: Ignoring removed nobh option
[  309.330812][T15467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.330985][T15467] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.346730][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  309.346746][   T30] audit: type=1400 audit(1700000025.640:3295): avc:  denied  { write } for  pid=15466 comm="syz.3.3519" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  309.346773][   T30] audit: type=1400 audit(1700000025.640:3296): avc:  denied  { create } for  pid=15466 comm="syz.3.3519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  309.348468][T15467] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.3519: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0
[  309.367399][ T7454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.474455][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.535765][    C1] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  309.624735][T15479] loop3: detected capacity change from 0 to 512
[  309.724495][T15481] loop5: detected capacity change from 0 to 512
[  309.768219][T15481] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  309.842719][T15489] 8021q: adding VLAN 0 to HW filter on device .`
[  309.844383][T15489] 8021q: adding VLAN 0 to HW filter on device team0
[  309.887360][T15489] ªªªªªª: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.887388][T15489] ªªªªªª: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.889396][T15489] veth1_vlan: left promiscuous mode
[  309.890060][T15489] veth0_vlan: left promiscuous mode
[  309.891255][T15489] veth0_vlan: entered promiscuous mode
[  309.892338][T15489] veth1_vlan: entered promiscuous mode
[  309.895267][T15489] veth1_macvtap: left promiscuous mode
[  309.899086][T15489] veth0_macvtap: left promiscuous mode
[  309.899607][T15489] veth0_macvtap: entered promiscuous mode
[  309.900244][T15489] veth1_macvtap: entered promiscuous mode
[  309.903268][T15489] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  309.903844][T15489] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  309.905260][T15489] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  309.906469][T15489] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  309.907833][T15489] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.912269][T15489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.912678][T15489] erspan1: left promiscuous mode
[  309.917004][T15489] ip6tnl1: left promiscuous mode
[  310.005857][ T5191] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 6081 - 0
[  310.006054][ T5191] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 6081 - 0
[  310.006182][ T5191] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 6081 - 0
[  310.006283][ T5191] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 6081 - 0
[  310.006438][ T5191] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.006589][ T5191] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.006698][ T5191] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.006730][ T5191] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.026279][T15334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.233544][   T30] audit: type=1400 audit(1700000026.530:3297): avc:  denied  { search } for  pid=15500 comm="syz.5.3533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  310.233571][   T30] audit: type=1400 audit(1700000026.530:3298): avc:  denied  { search } for  pid=15500 comm="syz.5.3533" name="events" dev="tracefs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  310.233621][   T30] audit: type=1400 audit(1700000026.530:3299): avc:  denied  { search } for  pid=15500 comm="syz.5.3533" name="sched" dev="tracefs" ino=6594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  310.312834][T15502] loop3: detected capacity change from 0 to 512
[  310.333659][T15502] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  310.333674][T15502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  310.339670][T15502] EXT4-fs (loop3): 1 truncate cleaned up
[  310.340143][T15502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.386741][ T7454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.410899][T15510] loop3: detected capacity change from 0 to 128
[  310.417144][T15510] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  310.417502][T15510] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.464109][T15504] loop5: detected capacity change from 0 to 1024
[  310.477999][T15504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.480245][   T30] audit: type=1400 audit(1700000026.780:3300): avc:  denied  { write } for  pid=15503 comm="syz.5.3534" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  310.482343][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.482468][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.517637][T15510] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3535'.
[  310.517817][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'.
[  310.563382][ T7454] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  310.772740][T15523] EXT4-fs: Ignoring removed bh option
[  310.836831][ T5183] net_ratelimit: 37 callbacks suppressed
[  310.836851][ T5183] bond0: (slave geneve2): failed to get link speed/duplex
[  310.836954][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  310.847047][T15523] program syz.1.3540 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  310.848701][T15523] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  310.948348][   T83] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  310.948384][   T83] bond0: (slave geneve2): failed to get link speed/duplex
[  311.040614][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3546'.
[  311.040642][T15537] bond0: Removing last arp target with arp_interval on
[  311.067334][ T5183] bond0: (slave geneve2): failed to get link speed/duplex
[  311.067368][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  311.083667][T15545] tipc: Failed to remove unknown binding: 66,0,0/0:1261832550/1261832552
[  311.083693][T15545] tipc: Failed to remove unknown binding: 66,0,0/0:1261832550/1261832551
[  311.084008][T15545] tipc: Failed to remove unknown binding: 66,0,0/0:1261832550/1261832552
[  311.084029][T15545] tipc: Failed to remove unknown binding: 66,0,0/0:1261832550/1261832551
[  311.176190][   T83] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  311.176220][   T83] bond0: (slave geneve2): failed to get link speed/duplex
[  311.287717][ T5183] bond0: (slave geneve2): failed to get link speed/duplex
[  311.287753][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  311.312480][   T30] audit: type=1400 audit(1700000027.600:3301): avc:  denied  { write } for  pid=15549 comm="syz.3.3552" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  311.317732][T15552] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3551'.
[  311.334525][   T30] audit: type=1400 audit(1700000027.620:3302): avc:  denied  { write } for  pid=15549 comm="syz.3.3552" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  311.814060][T15559] ip6gre1: entered promiscuous mode
[  311.814103][T15559] ip6gre1: entered allmulticast mode
[  311.834180][T15559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  312.038438][T15570] syzkaller0: entered promiscuous mode
[  312.038459][T15570] syzkaller0: entered allmulticast mode
[  312.160677][ T5183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  312.160799][ T5183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  312.196414][ T7365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  312.975896][ T7364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.055904][T15588] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  313.055921][T15588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  313.062639][T15588] EXT4-fs (loop7): 1 truncate cleaned up
[  313.065265][   T30] audit: type=1400 audit(1700000029.360:3303): avc:  denied  { write } for  pid=15586 comm="syz.7.3564" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  313.225830][ T7365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.736102][ T3451] netdevsim netdevsim7 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  313.736133][ T3451] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.736232][ T3451] netdevsim netdevsim7 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  313.736282][ T3451] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.736315][ T3451] netdevsim netdevsim7 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  313.736417][ T3451] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.736446][ T3451] netdevsim netdevsim7 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  313.736475][ T3451] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.786560][T15602] 8021q: adding VLAN 0 to HW filter on device .`
[  313.787621][T15602] 8021q: adding VLAN 0 to HW filter on device team0
[  313.846929][T15602] veth1_vlan: left promiscuous mode
[  313.847418][T15602] veth0_vlan: left promiscuous mode
[  313.848318][T15616] set_capacity_and_notify: 4 callbacks suppressed
[  313.848332][T15616] loop3: detected capacity change from 0 to 512
[  313.848634][T15602] veth0_vlan: entered promiscuous mode
[  313.851398][T15602] veth1_vlan: entered promiscuous mode
[  313.873184][T15616] EXT4-fs: Ignoring removed bh option
[  313.882252][T15616] EXT4-fs error (device loop3): ext4_iget_extra_inode:6003: inode #15: comm syz.3.3577: corrupted in-inode xattr: e_value size too large
[  313.882330][T15616] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  313.884090][T15616] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.3577: couldn't read orphan inode 15 (err -117)
[  313.884119][T15616] loop3: lost filesystem error report for type 5 error -117
[  313.890775][   T30] audit: type=1400 audit(1700000030.190:3304): avc:  denied  { write } for  pid=15614 comm="syz.3.3577" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  313.895048][T15616] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.3577: Unrecognised inode hash code 4
[  313.895168][T15616] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3577: Corrupt directory, running e2fsck is recommended
[  313.895317][T15616] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.3577: Unrecognised inode hash code 4
[  313.895339][T15616] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3577: Corrupt directory, running e2fsck is recommended
[  314.014284][T15602] veth1_macvtap: left promiscuous mode
[  314.014966][T15602] veth0_macvtap: left promiscuous mode
[  314.027486][T15602] veth0_macvtap: entered promiscuous mode
[  314.028428][T15602] veth1_macvtap: entered promiscuous mode
[  314.031984][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  314.032790][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  314.033524][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  314.034114][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  314.078362][T15602] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.082897][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.087149][T15627] loop5: detected capacity change from 0 to 512
[  314.163429][T15627] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.166781][   T83] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.166819][   T83] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.167257][   T83] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.167288][   T83] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.167631][   T83] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.167748][   T83] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.169523][   T83] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.169620][   T83] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.217346][T15641] FAULT_INJECTION: forcing a failure.
[  314.217346][T15641] name failslab, interval 1, probability 0, space 0, times 0
[  314.217377][T15641] CPU: 1 UID: 0 PID: 15641 Comm: syz.1.3584 Not tainted syzkaller #0 PREEMPT(lazy) 
[  314.217403][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  314.217417][T15641] Call Trace:
[  314.217424][T15641]  <TASK>
[  314.217432][T15641]  __dump_stack+0x1d/0x30
[  314.217518][T15641]  dump_stack_lvl+0x95/0xd0
[  314.217542][T15641]  dump_stack+0x15/0x1b
[  314.217564][T15641]  should_fail_ex+0x259/0x270
[  314.217610][T15641]  ? sctp_add_bind_addr+0x71/0x1e0
[  314.217650][T15641]  should_failslab+0x8c/0xb0
[  314.217757][T15641]  __kmalloc_cache_noprof+0x5d/0x3e0
[  314.217795][T15641]  ? sctp_add_bind_addr+0x71/0x1e0
[  314.217875][T15641]  sctp_add_bind_addr+0x71/0x1e0
[  314.217899][T15641]  sctp_copy_local_addr_list+0x1b4/0x250
[  314.217946][T15641]  sctp_copy_one_addr+0x7f/0x280
[  314.217969][T15641]  sctp_bind_addr_copy+0x11b/0x290
[  314.217993][T15641]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  314.218030][T15641]  sctp_connect_new_asoc+0x1c3/0x3a0
[  314.218080][T15641]  sctp_sendmsg+0x105f/0x1d00
[  314.218115][T15641]  ? __pfx_sctp_sendmsg+0x10/0x10
[  314.218200][T15641]  ? __pfx_inet_sendmsg+0x10/0x10
[  314.218235][T15641]  inet_sendmsg+0xc5/0xd0
[  314.218267][T15641]  __sys_sendto+0x3c3/0x480
[  314.218334][T15641]  __x64_sys_sendto+0x76/0x90
[  314.218354][T15641]  x64_sys_call+0x200c/0x2550
[  314.218382][T15641]  do_syscall_64+0x116/0x380
[  314.218404][T15641]  ? clear_bhb_loop+0x70/0xc0
[  314.218479][T15641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.218502][T15641] RIP: 0033:0x7ffa37d78f19
[  314.218519][T15641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.218538][T15641] RSP: 002b:00007ffa367a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  314.218577][T15641] RAX: ffffffffffffffda RBX: 00007ffa37ff6090 RCX: 00007ffa37d78f19
[  314.218592][T15641] RDX: 0000000000034000 RSI: 0000200000000240 RDI: 0000000000000006
[  314.218607][T15641] RBP: 00007ffa37e07f6d R08: 0000200000000280 R09: 0000000000000010
[  314.218621][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.218634][T15641] R13: 00007ffa37ff6128 R14: 00007ffa37ff6090 R15: 00007ffe6918d958
[  314.218653][T15641]  </TASK>
[  314.349927][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.350182][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.350525][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.350897][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.351196][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.351575][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  314.351587][   T30] audit: type=1400 audit(1700000030.650:3322): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351615][   T30] audit: type=1400 audit(1700000030.650:3323): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351638][   T30] audit: type=1400 audit(1700000030.650:3324): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351703][   T30] audit: type=1400 audit(1700000030.650:3325): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351761][   T30] audit: type=1400 audit(1700000030.650:3326): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351786][   T30] audit: type=1400 audit(1700000030.650:3327): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.351852][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.352424][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.352797][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.353079][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.353455][T15090] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  314.357952][   T30] audit: type=1400 audit(1700000030.650:3328): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.357978][   T30] audit: type=1400 audit(1700000030.650:3329): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.358044][   T30] audit: type=1400 audit(1700000030.650:3330): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.358069][   T30] audit: type=1400 audit(1700000030.650:3331): avc:  denied  { write } for  pid=15090 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  314.546437][ T3451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.727061][ T3451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.760245][T15656] rxe_eth0 speed is unknown, defaulting to 1000
[  314.883116][T15669] loop7: detected capacity change from 0 to 512
[  314.883161][ T3451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.927199][T15669] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal
[  314.928595][ T3451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.997633][ T5183] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  315.032273][T15656] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.032309][T15656] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.032371][T15656] bridge_slave_0: entered allmulticast mode
[  315.032787][T15656] bridge_slave_0: entered promiscuous mode
[  315.035984][ T6210] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  315.036068][ T6210] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  315.039845][T15656] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.039961][T15656] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.040070][T15656] bridge_slave_1: entered allmulticast mode
[  315.040614][T15656] bridge_slave_1: entered promiscuous mode
[  315.086313][ T3451] bridge_slave_1: left allmulticast mode
[  315.086357][ T3451] bridge_slave_1: left promiscuous mode
[  315.086499][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.098768][ T3451] bridge_slave_0: left allmulticast mode
[  315.098788][ T3451] bridge_slave_0: left promiscuous mode
[  315.098900][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.216961][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.233438][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.234253][ T3451] bond0 (unregistering): Released all slaves
[  315.253871][T15656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.259233][ T6210] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  315.262770][T15656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.302892][T15689] loop7: detected capacity change from 0 to 512
[  315.303955][T15656] team0: Port device team_slave_0 added
[  315.317994][T15656] team0: Port device team_slave_1 added
[  315.322360][T15689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  315.322392][T15689] System zones: 1-12
[  315.324910][T15689] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.3601: missing EA_INODE flag
[  315.324936][T15689] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  315.325046][T15689] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3601: error while reading EA inode 12 err=-117
[  315.325148][T15689] loop7: lost filesystem error report for type 5 error -117
[  315.325234][T15689] EXT4-fs (loop7): 1 orphan inode deleted
[  315.344416][T15689] EXT4-fs mount: 11 callbacks suppressed
[  315.344432][T15689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.387457][T15656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.387482][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.387536][T15656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.388171][T15656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.388183][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.388323][T15656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.448982][ T3451] hsr_slave_0: left promiscuous mode
[  315.458922][ T3451] hsr_slave_1: left promiscuous mode
[  315.459483][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.459498][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.462904][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.462921][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.500204][ T3451] veth1_macvtap: left promiscuous mode
[  315.500232][ T3451] veth0_macvtap: left promiscuous mode
[  315.500288][ T3451] veth1_vlan: left promiscuous mode
[  315.500445][ T3451] veth0_vlan: left promiscuous mode
[  315.693586][ T3451] team0 (unregistering): Port device team_slave_1 removed
[  315.708104][ T3451] team0 (unregistering): Port device team_slave_0 removed
[  315.768764][T15687] loop1: detected capacity change from 0 to 2048
[  315.772942][T15687] ext4: Unknown parameter 'pcr'
[  315.802195][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13
[  315.846809][T15656] hsr_slave_0: entered promiscuous mode
[  315.848530][T15656] hsr_slave_1: entered promiscuous mode
[  315.848740][T15656] debugfs: 'hsr0' already exists in 'hsr'
[  315.848753][T15656] Cannot create hsr debugfs directory
[  315.905712][ T5183] net_ratelimit: 56 callbacks suppressed
[  315.905731][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  315.905756][ T5183] bond0: (slave geneve2): failed to get link speed/duplex
[  315.993169][T15727] loop6: detected capacity change from 0 to 512
[  316.013897][T15727] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal
[  316.028083][T15656] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.037672][   T83] bond0: (slave geneve2): failed to get link speed/duplex
[  316.037712][   T83] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  316.066689][T15656] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.090900][T15709] loop3: detected capacity change from 0 to 1024
[  316.105036][T15709] EXT4-fs: Ignoring removed bh option
[  316.146400][   T83] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  316.146430][   T83] bond0: (slave geneve2): failed to get link speed/duplex
[  316.156100][T15709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.167500][T15709] program syz.3.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.173133][T15709] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  316.182575][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  316.211033][T15656] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.213980][ T7454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.243828][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14
[  316.258194][T15656] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.275699][ T5191] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  316.275729][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  316.283417][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.339410][T15656] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  316.342810][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  316.343201][T15656] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  316.368138][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  316.370511][T15656] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  316.372385][T15745] loop6: detected capacity change from 0 to 128
[  316.375012][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  316.386504][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  316.386532][ T5191] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  316.418257][T15656] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  316.434205][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  316.475408][ T5185] Bluetooth: hci0: Frame reassembly failed (-84)
[  316.500787][T15656] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.513981][T15656] 8021q: adding VLAN 0 to HW filter on device team0
[  316.516125][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.516156][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.539025][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.539061][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.608378][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15
[  316.705196][T15789] FAULT_INJECTION: forcing a failure.
[  316.705196][T15789] name failslab, interval 1, probability 0, space 0, times 0
[  316.705226][T15789] CPU: 1 UID: 0 PID: 15789 Comm: syz.7.3617 Not tainted syzkaller #0 PREEMPT(lazy) 
[  316.705249][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  316.705260][T15789] Call Trace:
[  316.705267][T15789]  <TASK>
[  316.705274][T15789]  __dump_stack+0x1d/0x30
[  316.705317][T15789]  dump_stack_lvl+0x95/0xd0
[  316.705342][T15789]  dump_stack+0x15/0x1b
[  316.705401][T15789]  should_fail_ex+0x259/0x270
[  316.705479][T15789]  ? sk_prot_alloc+0x3f/0x180
[  316.705501][T15789]  should_failslab+0x8c/0xb0
[  316.705531][T15789]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  316.705559][T15789]  ? sk_prot_alloc+0x3f/0x180
[  316.705668][T15789]  sk_prot_alloc+0x3f/0x180
[  316.705690][T15789]  sk_alloc+0x34/0x3e0
[  316.705737][T15789]  unix_create1+0xa1/0x400
[  316.705770][T15789]  unix_stream_connect+0x2da/0xbd0
[  316.705853][T15789]  __sys_connect+0x1ef/0x2a0
[  316.705966][T15789]  __x64_sys_connect+0x3f/0x50
[  316.705988][T15789]  x64_sys_call+0x1c0b/0x2550
[  316.706040][T15789]  do_syscall_64+0x116/0x380
[  316.706064][T15789]  ? clear_bhb_loop+0x70/0xc0
[  316.706090][T15789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.706187][T15789] RIP: 0033:0x7f8286a18f19
[  316.706203][T15789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.706269][T15789] RSP: 002b:00007f8285467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  316.706318][T15789] RAX: ffffffffffffffda RBX: 00007f8286c95fa0 RCX: 00007f8286a18f19
[  316.706335][T15789] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005
[  316.706355][T15789] RBP: 00007f8286aa7f6d R08: 0000000000000000 R09: 0000000000000000
[  316.706370][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.706385][T15789] R13: 00007f8286c96038 R14: 00007f8286c95fa0 R15: 00007fff4d880a98
[  316.706453][T15789]  </TASK>
[  316.721728][T15794] FAULT_INJECTION: forcing a failure.
[  316.721728][T15794] name failslab, interval 1, probability 0, space 0, times 0
[  316.721758][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.6.3618 Not tainted syzkaller #0 PREEMPT(lazy) 
[  316.721864][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  316.721878][T15794] Call Trace:
[  316.721885][T15794]  <TASK>
[  316.721893][T15794]  __dump_stack+0x1d/0x30
[  316.721920][T15794]  dump_stack_lvl+0x95/0xd0
[  316.722003][T15794]  dump_stack+0x15/0x1b
[  316.722025][T15794]  should_fail_ex+0x259/0x270
[  316.722088][T15794]  ? kvasprintf_const+0xb3/0x130
[  316.722155][T15794]  should_failslab+0x8c/0xb0
[  316.722256][T15794]  __kmalloc_node_track_caller_noprof+0xb6/0x4d0
[  316.722370][T15794]  ? kvasprintf_const+0xb3/0x130
[  316.722405][T15794]  kvasprintf+0x8a/0x110
[  316.722450][T15794]  kvasprintf_const+0xb3/0x130
[  316.722560][T15794]  kobject_set_name_vargs+0x44/0xe0
[  316.722592][T15794]  dev_set_name+0x83/0xb0
[  316.722624][T15794]  ? hrtimer_setup+0x33/0xe0
[  316.722734][T15794]  ? wakeup_source_sysfs_add+0x11e/0x1d0
[  316.722765][T15794]  ? device_initialize+0x20e/0x220
[  316.722789][T15794]  wakeup_source_sysfs_add+0x130/0x1d0
[  316.722901][T15794]  wakeup_source_register+0xfd/0x240
[  316.722926][T15794]  ep_insert+0x86c/0xd70
[  316.722985][T15794]  do_epoll_ctl_file+0x640/0x700
[  316.723008][T15794]  __se_sys_epoll_ctl+0xf1/0x190
[  316.723031][T15794]  __x64_sys_epoll_ctl+0x55/0x70
[  316.723053][T15794]  x64_sys_call+0x6a5/0x2550
[  316.723113][T15794]  do_syscall_64+0x116/0x380
[  316.723135][T15794]  ? clear_bhb_loop+0x70/0xc0
[  316.723159][T15794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.723182][T15794] RIP: 0033:0x7f9216988f19
[  316.723199][T15794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.723270][T15794] RSP: 002b:00007f92153cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  316.723373][T15794] RAX: ffffffffffffffda RBX: 00007f9216c05fa0 RCX: 00007f9216988f19
[  316.723388][T15794] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006
[  316.723401][T15794] RBP: 00007f9216a17f6d R08: 0000000000000000 R09: 0000000000000000
[  316.723414][T15794] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  316.723428][T15794] R13: 00007f9216c06038 R14: 00007f9216c05fa0 R15: 00007ffdaa5a9c88
[  316.723447][T15794]  </TASK>
[  316.943054][T15799] ªªªªªª: renamed from hsr0 (while UP)
[  317.048554][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.184329][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16
[  317.223673][T15820] syzkaller0: entered promiscuous mode
[  317.223696][T15820] syzkaller0: entered allmulticast mode
[  317.275958][T15656] veth0_vlan: entered promiscuous mode
[  317.281269][T15656] veth1_vlan: entered promiscuous mode
[  317.311237][T15806] loop7: detected capacity change from 0 to 1024
[  317.327340][T15806] EXT4-fs: Ignoring removed bh option
[  317.343077][T15656] veth0_macvtap: entered promiscuous mode
[  317.356509][T15656] veth1_macvtap: entered promiscuous mode
[  317.372091][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.374459][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.388710][T15806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.439547][   T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.440913][   T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.441084][   T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.441189][   T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.453989][T15806] program syz.7.3620 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  317.465294][T15806] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  317.501124][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.667481][T15860] loop1: detected capacity change from 0 to 512
[  317.702544][T15871] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.702735][T15871] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.746169][T15860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.747071][T15860] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.796801][T15871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.799907][T15871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.802191][T14685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.497224][ T6893] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  318.773840][T15902] FAULT_INJECTION: forcing a failure.
[  318.773840][T15902] name failslab, interval 1, probability 0, space 0, times 0
[  318.773916][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.1.3629 Not tainted syzkaller #0 PREEMPT(lazy) 
[  318.774002][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  318.774014][T15902] Call Trace:
[  318.774020][T15902]  <TASK>
[  318.774028][T15902]  __dump_stack+0x1d/0x30
[  318.774052][T15902]  dump_stack_lvl+0x95/0xd0
[  318.774091][T15902]  dump_stack+0x15/0x1b
[  318.774113][T15902]  should_fail_ex+0x259/0x270
[  318.774145][T15902]  should_failslab+0x8c/0xb0
[  318.774238][T15902]  kmem_cache_alloc_lru_noprof+0x61/0x3e0
[  318.774275][T15902]  ? __d_alloc+0x34/0x320
[  318.774379][T15902]  ? __d_alloc+0x34/0x320
[  318.774407][T15902]  __d_alloc+0x34/0x320
[  318.774431][T15902]  ? d_alloc_pseudo+0x13/0x80
[  318.774458][T15902]  d_alloc_pseudo+0x1e/0x80
[  318.774551][T15902]  alloc_path_pseudo+0xa4/0x140
[  318.774576][T15902]  alloc_file_pseudo+0x55/0x120
[  318.774601][T15902]  sock_alloc_file+0x9c/0x1e0
[  318.774698][T15902]  __sys_socket+0x118/0x180
[  318.774732][T15902]  __x64_sys_socket+0x3f/0x50
[  318.774767][T15902]  x64_sys_call+0x246e/0x2550
[  318.774847][T15902]  do_syscall_64+0x116/0x380
[  318.774871][T15902]  ? clear_bhb_loop+0x70/0xc0
[  318.774892][T15902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.774913][T15902] RIP: 0033:0x7ffa37d78f19
[  318.774960][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.774978][T15902] RSP: 002b:00007ffa367c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  318.775003][T15902] RAX: ffffffffffffffda RBX: 00007ffa37ff5fa0 RCX: 00007ffa37d78f19
[  318.775019][T15902] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  318.775100][T15902] RBP: 00007ffa37e07f6d R08: 0000000000000000 R09: 0000000000000000
[  318.775114][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.775125][T15902] R13: 00007ffa37ff6038 R14: 00007ffa37ff5fa0 R15: 00007ffe6918d958
[  318.775143][T15902]  </TASK>
[  318.866732][ T5189] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.866793][ T5189] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.866828][ T5189] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.866912][ T5189] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.007551][T15876] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.008442][T15876] 8021q: adding VLAN 0 to HW filter on device team0
[  319.016493][T15908] loop3: detected capacity change from 0 to 512
[  319.021663][T15908] msdos: Bad value for 'umask'
[  319.031230][T15876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.105639][T15915] loop3: detected capacity change from 0 to 1024
[  319.110879][T15915] EXT4-fs: Ignoring removed oldalloc option
[  319.110900][T15915] EXT4-fs: Ignoring removed oldalloc option
[  319.116711][T15876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.118125][T15876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.121570][T15876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  319.121591][T15876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.123633][T15876] veth1_vlan: left promiscuous mode
[  319.124435][T15876] veth0_vlan: left promiscuous mode
[  319.125405][T15876] veth0_vlan: entered promiscuous mode
[  319.127594][T15915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.130253][T15876] veth1_vlan: entered promiscuous mode
[  319.143260][T15876] veth1_macvtap: left promiscuous mode
[  319.143962][T15876] veth0_macvtap: left promiscuous mode
[  319.144779][T15876] veth0_macvtap: entered promiscuous mode
[  319.145487][T15876] veth1_macvtap: entered promiscuous mode
[  319.153826][T15876] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  319.154593][T15876] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  319.155438][T15876] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  319.156662][T15876] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  319.163897][T15904] loop1: detected capacity change from 0 to 512
[  319.257629][T15904] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  319.311007][T15908] vxlan1: left allmulticast mode
[  319.312496][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.312532][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.313774][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.313806][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.345767][ T5191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.345829][ T5191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.345953][ T5191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.346028][ T5191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.370302][T15922] loop7: detected capacity change from 0 to 128
[  319.425504][T15922] bio_check_eod: 994 callbacks suppressed
[  319.425559][T15922] syz.7.3633: attempt to access beyond end of device
[  319.425559][T15922] loop7: rw=1, sector=138, nr_sectors = 8 limit=128
[  319.461811][ T5185] kworker/u8:12: attempt to access beyond end of device
[  319.461811][ T5185] loop7: rw=1, sector=146, nr_sectors = 66 limit=128
[  319.496062][   T30] kauditd_printk_skb: 113 callbacks suppressed
[  319.496075][   T30] audit: type=1400 audit(1700000035.800:3445): avc:  denied  { write } for  pid=15923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.497096][ T7454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.553237][   T30] audit: type=1400 audit(1700000035.850:3446): avc:  denied  { write } for  pid=15941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.553910][T15933] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3636'.
[  319.670985][T15956] loop1: detected capacity change from 0 to 512
[  319.674966][T15956] EXT4-fs: Ignoring removed i_version option
[  319.688030][ T5191] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  319.688131][ T5191] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  319.694883][T15956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  319.719791][T15956] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #2: block 18: comm syz.1.3641: lblock 23 mapped to illegal pblock 18 (length 1)
[  319.720190][T15956] EXT4-fs (loop1): Remounting filesystem read-only
[  319.721444][   T30] audit: type=1400 audit(1700000036.020:3447): avc:  denied  { write } for  pid=15944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.725874][ T3428] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  319.776813][ T3428] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  319.780779][T14685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.855741][   T30] audit: type=1400 audit(1700000036.150:3448): avc:  denied  { write } for  pid=15964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  320.108442][   T30] audit: type=1400 audit(1700000036.410:3449): avc:  denied  { write } for  pid=15973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  320.142297][   T30] audit: type=1400 audit(1700000036.440:3450): avc:  denied  { setopt } for  pid=15983 comm="syz.1.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  320.165462][   T30] audit: type=1400 audit(1700000036.450:3451): avc:  denied  { write } for  pid=15998 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  320.264725][T15987] loop3: detected capacity change from 0 to 512
[  320.306512][T16005] loop1: detected capacity change from 0 to 128
[  320.313846][T16005] FAT-fs (loop1): bogus number of reserved sectors
[  320.313964][T16005] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  320.313979][T16005] FAT-fs (loop1): Can't find a valid FAT filesystem
[  320.355066][T15987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.368816][T15987] ext4 filesystem being mounted at /491/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.404586][ T7454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.443743][   T30] audit: type=1326 audit(1700000036.740:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  320.445298][   T30] audit: type=1326 audit(1700000036.740:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  320.506069][ T3428] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  320.509414][   T30] audit: type=1400 audit(1700000036.810:3454): avc:  denied  { write } for  pid=16006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  320.894096][T16035] loop2: detected capacity change from 0 to 164
[  320.993309][T16037] loop2: detected capacity change from 0 to 512
[  321.185387][T16022] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.185519][T16022] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.424323][T16033] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.480332][T16033] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.480364][T16033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.483050][T16033] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.483118][T16033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.526494][T16033] veth1_vlan: left promiscuous mode
[  321.526995][T16033] veth0_vlan: left promiscuous mode
[  321.528360][T16033] veth0_vlan: entered promiscuous mode
[  321.531974][T16033] veth1_vlan: entered promiscuous mode
[  321.545908][T16033] veth1_macvtap: left promiscuous mode
[  321.546419][T16033] veth0_macvtap: left promiscuous mode
[  321.548713][T16033] veth0_macvtap: entered promiscuous mode
[  321.549562][T16033] veth1_macvtap: entered promiscuous mode
[  321.565077][T16033] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.592736][T16033] 8021q: adding VLAN 0 to HW filter on device bond2
[  321.604308][T16033] net_ratelimit: 47 callbacks suppressed
[  321.604367][T16033] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  321.620375][ T3428] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  321.656470][ T5183] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.656505][ T5183] bond0: (slave geneve2): failed to get link speed/duplex
[  321.685800][ T3428] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  321.759150][T16061] syzkaller0: entered promiscuous mode
[  321.759181][T16061] syzkaller0: entered allmulticast mode
[  321.763147][ T5189] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  321.763229][ T5189] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  321.793097][ T7360] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  321.806109][ T5189] bond0: (slave geneve2): failed to get link speed/duplex
[  321.806137][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.843007][T16073] FAULT_INJECTION: forcing a failure.
[  321.843007][T16073] name failslab, interval 1, probability 0, space 0, times 0
[  321.843158][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.6.3668 Not tainted syzkaller #0 PREEMPT(lazy) 
[  321.843183][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  321.843196][T16073] Call Trace:
[  321.843205][T16073]  <TASK>
[  321.843272][T16073]  __dump_stack+0x1d/0x30
[  321.843340][T16073]  dump_stack_lvl+0x95/0xd0
[  321.843367][T16073]  dump_stack+0x15/0x1b
[  321.843427][T16073]  should_fail_ex+0x259/0x270
[  321.843530][T16073]  ? sk_prot_alloc+0x3f/0x180
[  321.843598][T16073]  should_failslab+0x8c/0xb0
[  321.843716][T16073]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  321.843760][T16073]  ? sk_prot_alloc+0x3f/0x180
[  321.843836][T16073]  sk_prot_alloc+0x3f/0x180
[  321.843861][T16073]  sk_alloc+0x34/0x3e0
[  321.843884][T16073]  unix_create1+0xa1/0x400
[  321.843921][T16073]  unix_stream_connect+0x2da/0xbd0
[  321.843993][T16073]  __sys_connect+0x1ef/0x2a0
[  321.844035][T16073]  __x64_sys_connect+0x3f/0x50
[  321.844054][T16073]  x64_sys_call+0x1c0b/0x2550
[  321.844080][T16073]  do_syscall_64+0x116/0x380
[  321.844167][T16073]  ? clear_bhb_loop+0x70/0xc0
[  321.844192][T16073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.844271][T16073] RIP: 0033:0x7f9216988f19
[  321.844291][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.844312][T16073] RSP: 002b:00007f92153cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  321.844449][T16073] RAX: ffffffffffffffda RBX: 00007f9216c05fa0 RCX: 00007f9216988f19
[  321.844465][T16073] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005
[  321.844502][T16073] RBP: 00007f9216a17f6d R08: 0000000000000000 R09: 0000000000000000
[  321.844515][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  321.844528][T16073] R13: 00007f9216c06038 R14: 00007f9216c05fa0 R15: 00007ffdaa5a9c88
[  321.844545][T16073]  </TASK>
[  321.920049][ T5176] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.920079][ T5176] bond0: (slave geneve2): failed to get link speed/duplex
[  322.095854][ T5189] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  322.095894][ T5189] bond0: (slave geneve2): failed to get link speed/duplex
[  322.205878][ T5176] bond0: (slave geneve2): failed to get link speed/duplex
[  322.243774][T16116] loop1: detected capacity change from 0 to 512
[  322.257255][T16116] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  322.257275][T16116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  322.263619][T16116] EXT4-fs (loop1): 1 truncate cleaned up
[  322.264003][T16116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.315580][ T3428] hid_parser_main: 6 callbacks suppressed
[  322.315808][ T3428] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  322.316831][ T3428] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  322.850646][T16156] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.850849][T16156] bridge0: port 1(bridge_slave_0) entered disabled state





	

	









	

	









	

	
	


	
		

	
		


		
		

		
	
	

		
		

		
	
	






	

	









	

	





	

	

	

	


	


	


	


	

	
			

	
			

	
			

	
			

	
		

	
		





	

	
	

			

	


	

	
		


	
		

	


		

		
	
		
	

	



			












	

	
















	





	








		











syzkaller
syzkaller login: [  324.278344][T16209] syzkaller0: entered promiscuous mode
[  324.278373][T16209] syzkaller0: entered allmulticast mode
[  324.530690][   T30] kauditd_printk_skb: 82 callbacks suppressed
[  324.530707][   T30] audit: type=1326 audit(1700000040.830:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  324.530821][   T30] audit: type=1326 audit(1700000040.830:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  324.530872][   T30] audit: type=1326 audit(1700000040.830:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  324.530917][   T30] audit: type=1326 audit(1700000040.830:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe97e2d8f19 code=0x7ffc0000
[  324.583250][   T30] audit: type=1326 audit(1700000040.880:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.609720][   T30] audit: type=1326 audit(1700000040.910:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.646451][   T30] audit: type=1326 audit(1700000040.940:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.647520][   T30] audit: type=1326 audit(1700000040.940:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.648595][   T30] audit: type=1326 audit(1700000040.940:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.650580][   T30] audit: type=1326 audit(1700000040.940:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.2.3698" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97e29974e code=0x7ffc0000
[  324.887117][T16228] lo: entered promiscuous mode
[  324.895705][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  324.921043][T16228] tunl0: entered promiscuous mode
[  324.921852][T16228] gre0: entered promiscuous mode
[  324.941596][T16228] gretap0: entered promiscuous mode
[  324.950706][T16228] erspan0: entered promiscuous mode
[  324.951875][T16228] ip_vti0: entered promiscuous mode
[  324.967646][T16228] ip6_vti0: entered promiscuous mode
[  324.968543][T16228] sit0: entered promiscuous mode
[  324.989043][T16228] ip6tnl0: entered promiscuous mode
[  324.996793][T16228] ip6gre0: entered promiscuous mode
[  325.005714][T16228] syz_tun: entered promiscuous mode
[  325.011901][T16228] ip6gretap0: entered promiscuous mode
[  325.013014][T16228] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.013132][T16228] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.013453][T16228] bridge0: entered promiscuous mode
[  325.014605][T16228] vcan0: entered promiscuous mode
[  325.046006][T16228] bond0: entered promiscuous mode
[  325.046106][T16228] bond_slave_0: entered promiscuous mode
[  325.046174][T16228] bond_slave_1: entered promiscuous mode
[  325.047462][T16228] dummy0: entered promiscuous mode
[  325.048450][T16228] nlmon0: entered promiscuous mode
[  325.049007][T16228] batadv0: entered promiscuous mode
[  325.082835][T16228] vxcan0: entered promiscuous mode
[  325.083455][T16228] vxcan1: entered promiscuous mode
[  325.084185][T16228] veth0: entered promiscuous mode
[  325.085072][T16228] veth1: entered promiscuous mode
[  325.108587][T16228] wg0: entered promiscuous mode
[  325.111001][T16228] wg2: entered promiscuous mode
[  325.111709][T16228] veth0_to_bridge: entered promiscuous mode
[  325.114438][T16228] veth1_to_bridge: entered promiscuous mode
[  325.138555][T16228] veth0_to_bond: entered promiscuous mode
[  325.140218][T16228] veth1_to_bond: entered promiscuous mode
[  325.141616][T16228] veth0_to_team: entered promiscuous mode
[  325.142355][T16228] team_slave_0: entered promiscuous mode
[  325.142475][T16230] set_capacity_and_notify: 2 callbacks suppressed
[  325.142515][T16230] loop2: detected capacity change from 0 to 128
[  325.143178][T16228] veth1_to_team: entered promiscuous mode
[  325.144242][T16228] team_slave_1: entered promiscuous mode
[  325.144963][T16228] veth0_to_batadv: entered promiscuous mode
[  325.199552][T16228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.199608][T16228] batadv_slave_0: entered promiscuous mode
[  325.200345][T16228] veth1_to_batadv: entered promiscuous mode
[  325.201406][T16228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.201430][T16228] batadv_slave_1: entered promiscuous mode
[  325.202049][T16228] xfrm0: entered promiscuous mode
[  325.202799][T16228] veth0_to_hsr: entered promiscuous mode
[  325.203401][T16232] loop1: detected capacity change from 0 to 1024
[  325.204205][T16228] veth1_to_hsr: entered promiscuous mode
[  325.207609][T16232] EXT4-fs: Ignoring removed bh option
[  325.241102][T16232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  325.258879][T16228] ªªªªªª: entered promiscuous mode
[  325.259649][T16228] veth1_virt_wifi: entered promiscuous mode
[  325.271791][T16228] veth0_virt_wifi: entered promiscuous mode
[  325.289317][T16232] Trying to write to read-only block-device loop1
[  325.292864][T16228] vlan0: entered promiscuous mode
[  325.293549][T16228] vlan1: entered promiscuous mode
[  325.311832][T16228] macvlan0: entered promiscuous mode
[  325.317697][T16228] macvlan1: entered promiscuous mode
[  325.323809][T16228] ipvtap0: entered promiscuous mode
[  325.324629][T16228] ipvlan0: entered promiscuous mode
[  325.325155][T16228] ipvlan1: entered promiscuous mode
[  325.340827][T16236] loop7: detected capacity change from 0 to 512
[  325.355928][T16228] macvtap0: entered promiscuous mode
[  325.356672][T16228] macsec0: entered promiscuous mode
[  325.359196][T16236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.359274][T16236] ext4 filesystem being mounted at /614/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.387545][T16228] geneve0: entered promiscuous mode
[  325.388750][T16228] geneve1: entered promiscuous mode
[  325.393521][ T6882] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.403850][T16228] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  325.423654][T16228] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[  325.424703][T16228] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  325.425526][T16228] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[  325.426226][T16228] syztnl2: entered promiscuous mode
[  325.453062][T16228] bridge1: entered promiscuous mode
[  325.457947][T16243] loop2: detected capacity change from 0 to 512
[  325.474229][T16228] bridge2: entered promiscuous mode
[  325.484955][T16228] bond1: entered promiscuous mode
[  325.484978][T16228] ip6gretap1: entered promiscuous mode
[  325.496335][T16228] bond2: entered promiscuous mode
[  325.496669][T16228] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  325.501510][T16228] ip6gretap2: entered promiscuous mode
[  325.515901][ T5189] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.516076][ T5189] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.516158][ T5189] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.516194][ T5189] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.590961][T14907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  325.591841][ T5189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.855733][    C1] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  326.151602][ T5189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.180671][ T5189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.210616][ T5189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.280159][T16255] rxe_eth0 speed is unknown, defaulting to 1000
[  326.284768][ T5191] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.302343][ T6210] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.315665][ T5191] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.320409][ T5191] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  326.351876][ T5189] bridge_slave_1: left allmulticast mode
[  326.351957][ T5189] bridge_slave_1: left promiscuous mode
[  326.352247][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.353118][ T5189] bridge_slave_0: left allmulticast mode
[  326.353138][ T5189] bridge_slave_0: left promiscuous mode
[  326.353272][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.458978][ T5189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.459910][ T5189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.460582][ T5189] bond0 (unregistering): Released all slaves
[  326.474939][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1
[  326.534942][ T5189] hsr_slave_0: left promiscuous mode
[  326.535146][ T5189] hsr_slave_1: left promiscuous mode
[  326.535547][ T5189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.535560][ T5189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.562897][ T5189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.562950][ T5189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.565277][ T5189] veth1_macvtap: left promiscuous mode
[  326.565302][ T5189] veth0_macvtap: left promiscuous mode
[  326.565567][ T5189] veth1_vlan: left promiscuous mode
[  326.596820][ T5189] veth0_vlan: left promiscuous mode
[  326.643845][ T5189] team0 (unregistering): Port device team_slave_1 removed
[  326.653188][ T5189] team0 (unregistering): Port device team_slave_0 removed
[  326.677532][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2
[  326.745966][ T3451] net_ratelimit: 50 callbacks suppressed
[  326.745982][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  326.756089][T16255] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.756122][T16255] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.756248][T16255] bridge_slave_0: entered allmulticast mode
[  326.756917][T16255] bridge_slave_0: entered promiscuous mode
[  326.757980][T16255] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.758010][T16255] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.758270][T16255] bridge_slave_1: entered allmulticast mode
[  326.758680][T16255] bridge_slave_1: entered promiscuous mode
[  326.770592][T16255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.771604][T16255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.782436][T16255] team0: Port device team_slave_0 added
[  326.783382][T16255] team0: Port device team_slave_1 added
[  326.794145][T16255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.794160][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.794212][T16255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.794742][T16255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.794754][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.794783][T16255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.813016][T16255] hsr_slave_0: entered promiscuous mode
[  326.813340][T16255] hsr_slave_1: entered promiscuous mode
[  326.813523][T16255] debugfs: 'hsr0' already exists in 'hsr'
[  326.813535][T16255] Cannot create hsr debugfs directory
[  326.931675][T16255] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.956605][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  326.998083][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3
[  327.057537][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  327.083891][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4
[  327.175757][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  327.287190][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  327.408283][T16255] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.415754][ T5189] bond0: (slave geneve2): failed to get link speed/duplex
[  327.459387][T16255] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.498788][T16255] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.525675][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  327.561618][T16255] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  327.563848][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  327.564438][T16255] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  327.587667][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  327.588233][T16255] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  327.589951][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  327.590496][T16255] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  327.592540][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  327.600600][T16255] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.600633][T16255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.600749][T16255] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.600783][T16255] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.621494][T16255] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.626800][T16255] 8021q: adding VLAN 0 to HW filter on device team0
[  327.685762][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  327.772182][T16255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.795900][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  327.846233][T16255] veth0_vlan: entered promiscuous mode
[  327.848872][T16255] veth1_vlan: entered promiscuous mode
[  327.864968][T16255] veth0_macvtap: entered promiscuous mode
[  327.867012][T16255] veth1_macvtap: entered promiscuous mode
[  327.872317][T16255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.878062][T16255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.905688][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  327.916898][ T6210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.916940][ T6210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.926216][ T6210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.926269][ T6210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.000294][T16465] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3723'.
[  328.020705][T16465] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3723'.
[  328.030809][T16464] FAULT_INJECTION: forcing a failure.
[  328.030809][T16464] name failslab, interval 1, probability 0, space 0, times 0
[  328.030953][T16464] CPU: 0 UID: 0 PID: 16464 Comm: syz.2.3724 Not tainted syzkaller #0 PREEMPT(lazy) 
[  328.030980][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  328.030994][T16464] Call Trace:
[  328.031002][T16464]  <TASK>
[  328.031010][T16464]  __dump_stack+0x1d/0x30
[  328.031034][T16464]  dump_stack_lvl+0x95/0xd0
[  328.031112][T16464]  dump_stack+0x15/0x1b
[  328.031134][T16464]  should_fail_ex+0x259/0x270
[  328.031182][T16464]  ? gserial_alloc_line_no_console+0x267/0x510
[  328.031211][T16464]  should_failslab+0x8c/0xb0
[  328.031321][T16464]  __kmalloc_cache_noprof+0x5d/0x3e0
[  328.031359][T16464]  ? gserial_alloc_line_no_console+0x267/0x510
[  328.031390][T16464]  gserial_alloc_line_no_console+0x267/0x510
[  328.031420][T16464]  gserial_alloc_line+0x18/0x80
[  328.031519][T16464]  gser_alloc_inst+0x5b/0xb0
[  328.031548][T16464]  usb_get_function_instance+0x98/0x220
[  328.031571][T16464]  function_make+0xbd/0x240
[  328.031598][T16464]  configfs_mkdir+0x303/0x650
[  328.031671][T16464]  vfs_mkdir+0x295/0x400
[  328.031704][T16464]  filename_mkdirat+0x13e/0x320
[  328.031755][T16464]  __se_sys_mkdirat+0x32/0xf0
[  328.031776][T16464]  __x64_sys_mkdirat+0x43/0x50
[  328.031797][T16464]  x64_sys_call+0x368/0x2550
[  328.031825][T16464]  do_syscall_64+0x116/0x380
[  328.031903][T16464]  ? clear_bhb_loop+0x70/0xc0
[  328.031927][T16464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.031997][T16464] RIP: 0033:0x7fe97e2d8f19
[  328.032014][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.032069][T16464] RSP: 002b:00007fe97cd1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  328.032090][T16464] RAX: ffffffffffffffda RBX: 00007fe97e555fa0 RCX: 00007fe97e2d8f19
[  328.032105][T16464] RDX: 00000000000001ff RSI: 0000200000000440 RDI: ffffffffffffff9c
[  328.032127][T16464] RBP: 00007fe97e367f6d R08: 0000000000000000 R09: 0000000000000000
[  328.032141][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.032228][T16464] R13: 00007fe97e556038 R14: 00007fe97e555fa0 R15: 00007ffe6c12e9f8
[  328.032257][T16464]  </TASK>
[  328.050499][T16463] netlink: 'syz.3.3725': attribute type 17 has an invalid length.
[  328.175545][T16458] loop7: detected capacity change from 0 to 128
[  328.326495][ T3372] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  328.329808][T16458] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.353025][T16458] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.373562][T16489] loop6: detected capacity change from 0 to 128
[  328.455249][ T6882] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  328.478057][T16489] syz.6.3716: attempt to access beyond end of device
[  328.478057][T16489] loop6: rw=1, sector=138, nr_sectors = 8 limit=128
[  328.513996][ T6210] kworker/u8:18: attempt to access beyond end of device
[  328.513996][ T6210] loop6: rw=1, sector=146, nr_sectors = 66 limit=128
[  328.534201][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3719'.
[  328.552037][T16501] loop0: detected capacity change from 0 to 4096
[  328.569560][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'.
[  328.570435][T16501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.659810][T16512] syzkaller0: left promiscuous mode
[  328.659833][T16512] syzkaller0: left allmulticast mode
[  328.708102][T16514] loop7: detected capacity change from 0 to 512
[  328.709546][T16514] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  328.846171][ T7364] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  328.851122][ T7364] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  329.056966][   T29] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  329.255484][T16580] netlink: 'syz.3.3739': attribute type 16 has an invalid length.
[  329.255502][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'.
[  329.273265][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'.
[  329.556058][T16255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.567530][   T30] kauditd_printk_skb: 178 callbacks suppressed
[  329.567545][   T30] audit: type=1400 audit(1700000045.870:3725): avc:  denied  { write } for  pid=16591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.627142][   T30] audit: type=1400 audit(1700000045.930:3726): avc:  denied  { write } for  pid=16608 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.782035][   T30] audit: type=1400 audit(1700000046.080:3727): avc:  denied  { write } for  pid=16612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.822618][   T30] audit: type=1400 audit(1700000046.120:3728): avc:  denied  { write } for  pid=16623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  330.546494][T16635] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.546761][T16635] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.579448][T16632] ==================================================================
[  330.579489][T16632] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout
[  330.579526][T16632] 
[  330.579533][T16632] read-write to 0xffffc90001c67cc0 of 8 bytes by task 16639 on cpu 0:
[  330.579552][T16632]  shmem_writeout+0x2db/0x970
[  330.579576][T16632]  shrink_folio_list+0x1a81/0x2720
[  330.579601][T16632]  shrink_node+0x150a/0x3a90
[  330.579621][T16632]  do_try_to_free_pages+0x310/0xb70
[  330.579655][T16632]  try_to_free_mem_cgroup_pages+0x201/0x420
[  330.579690][T16632]  mem_cgroup_resize_max+0x13d/0x2d0
[  330.579719][T16632]  mem_cgroup_write+0x132/0x1c0
[  330.579744][T16632]  cgroup_file_write+0x197/0x350
[  330.579767][T16632]  kernfs_fop_write_iter+0x1d2/0x2e0
[  330.579797][T16632]  vfs_write+0x57a/0x990
[  330.579830][T16632]  ksys_write+0xdc/0x1a0
[  330.579859][T16632]  __x64_sys_write+0x40/0x50
[  330.579886][T16632]  x64_sys_call+0x154e/0x2550
[  330.579915][T16632]  do_syscall_64+0x116/0x380
[  330.579934][T16632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.579953][T16632] 
[  330.579958][T16632] read to 0xffffc90001c67cc0 of 8 bytes by task 16632 on cpu 1:
[  330.579972][T16632]  shmem_fallocate+0x5e2/0x8f0
[  330.579998][T16632]  vfs_fallocate+0x3ac/0x400
[  330.580017][T16632]  file_ioctl+0x4e1/0x5b0
[  330.580035][T16632]  do_vfs_ioctl+0x7fc/0xe80
[  330.580051][T16632]  __se_sys_ioctl+0x82/0x140
[  330.580078][T16632]  __x64_sys_ioctl+0x43/0x50
[  330.580107][T16632]  x64_sys_call+0x239d/0x2550
[  330.580135][T16632]  do_syscall_64+0x116/0x380
[  330.580157][T16632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.580177][T16632] 
[  330.580181][T16632] value changed: 0x000000000000020b -> 0x0000000000000220
[  330.580193][T16632] 
[  330.580197][T16632] Reported by Kernel Concurrency Sanitizer on:
[  330.580209][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.7.3754 Not tainted syzkaller #0 PREEMPT(lazy) 
[  330.580232][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  330.580244][T16632] ==================================================================
[  330.608457][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.616347][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.097079][T16642] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.101629][T16642] 8021q: adding VLAN 0 to HW filter on device team0
[  331.131285][T16642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.182493][T16642] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.182526][T16642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.204506][T16642] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.204536][T16642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.274012][T16642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.294194][T16642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.324755][T16642] veth1_vlan: left promiscuous mode
[  331.325382][T16642] veth0_vlan: left promiscuous mode
[  331.328277][T16642] veth0_vlan: entered promiscuous mode
[  331.339026][T16642] veth1_vlan: entered promiscuous mode
[  331.350439][T16642] veth1_macvtap: left promiscuous mode
[  331.352433][T16642] veth0_macvtap: left promiscuous mode
[  331.356677][T16642] veth0_macvtap: entered promiscuous mode
[  331.361304][T16642] veth1_macvtap: entered promiscuous mode
[  331.374715][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  331.382832][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  331.383595][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  331.404660][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  331.846050][ T5191] net_ratelimit: 25 callbacks suppressed
[  331.846069][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  331.955730][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  332.065790][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  332.176242][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  332.285803][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  332.405781][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  332.526122][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  332.635709][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  332.755871][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  332.865768][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  333.017542][   T30] audit: type=1400 audit(1700000049.320:3729): avc:  denied  { write } for  pid=16649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  333.054505][   T30] audit: type=1400 audit(1700000049.350:3730): avc:  denied  { write } for  pid=16660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.506066][    C1] ip6_tunnel: üÿÿÿÿÿÿÿ
 xmit: Local address not yet configured!
[  334.554613][   T30] audit: type=1400 audit(1700000050.850:3731): avc:  denied  { write } for  pid=16665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.590984][   T30] audit: type=1400 audit(1700000050.890:3732): avc:  denied  { write } for  pid=16676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.774878][   T30] audit: type=1400 audit(1700000051.070:3733): avc:  denied  { write } for  pid=16679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.798908][   T30] audit: type=1400 audit(1700000051.080:3734): avc:  denied  { write } for  pid=16690 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  336.865733][ T3451] net_ratelimit: 35 callbacks suppressed
[  336.865770][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  336.985743][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  337.095754][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  337.205764][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  337.315660][ T5191] bond0: (slave geneve2): failed to get link speed/duplex
[  337.425721][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  337.535865][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  337.646023][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  337.754202][   T30] audit: type=1400 audit(1700000054.050:3735): avc:  denied  { write } for  pid=16693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.756576][ T3451] bond0: (slave geneve2): failed to get link speed/duplex
[  337.786814][   T30] audit: type=1400 audit(1700000054.090:3736): avc:  denied  { write } for  pid=16704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.865739][ T6210] bond0: (slave geneve2): failed to get link speed/duplex
[  338.258290][   T30] audit: type=1400 audit(1700000054.560:3737): avc:  denied  { write } for  pid=16707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.294751][   T30] audit: type=1400 audit(1700000054.590:3738): avc:  denied  { write } for  pid=16718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.521537][   T30] audit: type=1400 audit(1700000054.820:3739): avc:  denied  { write } for  pid=16721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.554232][   T30] audit: type=1400 audit(1700000054.850:3740): avc:  denied  { write } for  pid=16732 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  339.846369][   T30] audit: type=1400 audit(1700000056.150:3741): avc:  denied  { write } for  pid=16735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  339.861500][   T30] audit: type=1400 audit(1700000056.160:3742): avc:  denied  { write } for  pid=16746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1