last executing test programs:

5.322690475s ago: executing program 3 (id=360):
mlockall(0x7)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r0 = socket(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x7)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040))
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x208502, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$poke(0x2, r6, &(0x7f0000000040), 0xfffffffffffffffe)
socket$packet(0x11, 0x3, 0x300)

3.835116433s ago: executing program 4 (id=368):
r0 = socket(0x400000000010, 0x3, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(r1, 0xee00, 0x0)
mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8004022, 0x32202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x201, 0x2000000, 0x9, 0x9, 0xffffffff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8)
r2 = gettid()
r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
move_pages(0x0, 0xffffffffffffff56, 0x0, &(0x7f0000001180), &(0x7f00000004c0)=[0x0], 0x0)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x20)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0xa, 0x300)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FICLONE(r8, 0x40049409, r7)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000004fc149fdffffffff07"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r11=>r10, 0x2f, 0x9, 0xf8, 0x7, 0x20, @empty, @mcast1, 0x80, 0x7, 0x2, 0x8}})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x20, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r12 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$PTP_ENABLE_PPS(r12, 0x40043d04, 0x0)
ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000140)={0x3, 0x2})
io_setup(0x4, &(0x7f00000002c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xfff1, 0xf}, {}, {0x3, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)

3.56782674s ago: executing program 4 (id=372):
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x20)
bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
rename(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000200ff05000000000e1208000f0100810401a80016ea2400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e005fffff300d5e1020081b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040800)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x28, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={0x0, &(0x7f0000000480)=""/196, &(0x7f0000000580), &(0x7f0000000640)="5c894b67efa2ca30735599095925f4661b23439d7c375adacdddfe49828db4bdbd61c61b99bacd3b58c77a73c300afbce898aa626db88c6c06e87cdd5b402355c566b85200973e354d6bc2e3505ad98bcadba8942e85c5a6c0bdc77c0f36e2234d27d965778191c661", 0x4, r1, 0x4}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000300f10005"], 0x28}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x40000, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x2, 0x8000000, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}]}}]}, 0x434}}, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x34c})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'})

3.376370234s ago: executing program 2 (id=374):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

3.273509507s ago: executing program 0 (id=375):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000020850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b703000007000000850000002d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
tee(r1, r0, 0x5, 0x4)
ptrace(0x18, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138)
fallocate(r3, 0x10, 0x10c01, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(0x0, 0x80, 0x101, &(0x7f0000000200)={0x4000000000000, 0x1, 0x1, 0x2})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="2abef6d8459fb7aca44356878598aec3c637e3eda8ea057b", @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r4, 0x0, 0x4050)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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")
setuid(0xee00)
r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'})
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

2.891583976s ago: executing program 0 (id=376):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x0, 0xc2})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000100)='fdinfo/4\x00')
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'batadv_slave_1\x00', 0x1}, 0x18)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000180)=0xc)
getresuid(&(0x7f00000001c0), &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
quotactl_fd$Q_GETINFO(r1, 0x4dc69c1570c4b8aa, r5, &(0x7f0000000280))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={<r6=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r6, 0xb4e, 0x10, 0x1, 0x0, 0x100000000, 0x4, 0x83c6, 0x0, 0x2, 0x6, 0x6, 0xb, 0x20000000, 0x83}})
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000014c0), 0x800, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000001500)=0x90, 0x4)
setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0)
fchdir(r7)
ioctl$TCGETA(r3, 0x5405, &(0x7f0000001540))
r8 = eventfd(0xc0000)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0xa, 0x2, 0x8, 0xfffffffffffffffc, 0x8}, @ldst={0x2, 0x3, 0x2, 0x6, 0xb, 0x20, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001900)='GPL\x00', 0x6, 0x1e, &(0x7f0000001940)=""/30, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x8, 0x9, 0x4}, 0x10, 0x3719, 0xffffffffffffffff, 0x1, &(0x7f0000001a00)=[r7, 0x1, r0, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x2, 0x5, 0x4, 0x9}], 0x10, 0x8f}, 0x94)
r10 = eventfd2(0x1ff, 0x0)
r11 = pidfd_getfd(r0, r3, 0x0)
io_submit(0x0, 0x7, &(0x7f0000001e80)=[&(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0xda, r3, &(0x7f0000001580)="71343cbcf4abdd3ada8b43f0bcad6bb55fc16716dedc49bf277109a8605c065b4fa8f0b1f4d1849ba5f2b967b2b7f3fe2d77bd0ac1fc00e0f407634cb14120761531becd7c30f06751568c295751ed48f87f67b1012d95cda5c1ad7365ef4589df182fe9854e8cd295c989091dd10a17aa5aa005e11f171c62f8227ed05efb83", 0x80, 0x6, 0x0, 0x3, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x6, 0x9, r7, &(0x7f0000001640)="6776e9de9975c1eb1bb8cd7fdd9dc6c54516f4150ebf0e4ada258450bb31765575f3b24f024b1e4e0b256c6058d6e202d197ce565849d242193902492a1b7a55007562b434ef37bd8887d14de1adab271fff5205ee31bc", 0x57, 0x3, 0x0, 0x3, r8}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001700)="85bc78b210b26240b70b85929469383d0000f9d79a088d65a5fe8272ee9f9de69ea99177ce9718d6d26b95dd754869290d49dcdde22feef3dd41da503163647171ad75d7416a72db1c5a1edffa0490d11e054066d10bf6bf975fc3b46527badeb5957f7316112b222dd55658c43b5784eda164034de1ef3b60071c9414eac3fdfda5c43d5ce19173d5efff832bc479b01db4e35ecf7956d67986e6504f960f625ffcac306e007c3825b6bf86239f5adc09253cee7244603e2b9b455fe9536b6e099b9e32575748d015dc7f87a15e6a99a0674e47d2691504695dba544835814f", 0xe0, 0x0, 0x0, 0x3, r7}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x3, 0x6, r9, &(0x7f0000001b40)="f02436583482dabcd66a34f1f1f375b827a5642bbf776db4c0798f3d163dd36a2e7d607184b5d57c4729c1c50d4e6191119a198fadd428", 0x37, 0x3ff, 0x0, 0x1, r1}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x7, 0xc, r3, &(0x7f0000001bc0)="dd891628c5816574a05c5935bc82cec6759cd3bb0e2aa73d20f665a50671f209d718ff4b0a8ea802035c8e4d93246bc4f6749001d54bbea7217771ac10d6009efb4c7d6885459fc9e71f84bf07cd6ba4cb27ff7d2edeebf0e1681bef951d858061b1ffc2467aba548b46f6bea8b8124d2ace499301f2766076d33e9ec00b1a3a", 0x80, 0x4, 0x0, 0x2, r10}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0xfeef938077ee0f38, 0x4, r1, &(0x7f0000001c80)="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", 0xfd, 0xc89, 0x0, 0x3, r0}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000001dc0)="0e919a03d474e8c92bcf896041b9b85bf92d93e9f531a8ca6e655f78a02920a3640fc9a9efa36bd2abdd0e7f587af93345fe08a415a1bd1d8f4700ab804178110a62e821f4ae05a1452ee5daf52d2bc84a06c859d4be828096d0238d0f077ef3295b", 0x62, 0x1, 0x0, 0x3, r11}])
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001ec0)={0xaf81, 0x0, 0x1, 0x2, 0x1}, 0x14)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000001f00)=0x1, 0x4)
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001f80), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4884)
sched_setscheduler(r2, 0x6, &(0x7f0000002080)=0x7ff)
quotactl_fd$Q_GETNEXTQUOTA(r10, 0xffffffff80000900, r4, &(0x7f00000020c0))
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002140), 0x4)
quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r4, &(0x7f0000002180))
openat$ipvs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)

2.871148997s ago: executing program 1 (id=377):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe4, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x125, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8)
ioctl$VT_DISALLOCATE(r1, 0x5608)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdr={0x74, 0x15, 0x800, 0x70bd27, 0x25dfdbfc, {0xa, 0x1f, 0x42, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x408}, @IFA_FLAGS={0x8, 0x8, 0xa}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xfffffff9}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x8001, 0x1fffe}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8090}, 0x8000)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

2.851525087s ago: executing program 4 (id=378):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x29}, {0x80000, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0xef, 0xc5e}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x1, 0x2, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc31d3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0)
close(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@generic={0x28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}, &(0x7f0000000000)='GPL\x00', 0x5c, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r3}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)='S8', 0x2}], 0x1}}], 0x1, 0x20008000)
recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r4, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket(0x2b, 0x803, 0xff8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.846471427s ago: executing program 0 (id=379):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x270, 0xd0, 0xffffffff, 0x0, 0x0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000200), {[{{@ip={@local, @empty, 0xffffff00, 0xffffffff, 'syz_tun\x00', 'erspan0\x00', {}, {0xff}, 0x84, 0x3, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x8}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x7, @multicast1, @multicast2, @icmp_id=0x68, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @remote, @local, @port=0x4e21, @icmp_id=0x64}}}}, {{@ip={@multicast2, @loopback, 0xff, 0xff, 'netpci0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x72, 0x1, 0x60}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "ba38"}}, @common=@icmp={{0x28}, {0xf, "52cd", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xa, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @empty, 0xffffffff, 0xff, 'veth0_to_bridge\x00', 'lo\x00', {0xff}, {0xff}, 0x89, 0x2, 0x42}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x7, 0x4, 0x7, 0x7, 0x0, 0x4], 0x1, 0x4}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendfile(r0, r1, &(0x7f0000000040)=0x6, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56161, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x8, 0xf}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}]}}]}, 0x38}}, 0xc810)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sg(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000140)='\x00\x00\x00', 0xffffffffffffffca)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000740)="022e1da8d6a8fc416aaa75", 0xb}], 0x1)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r3, 0x0, 0x7ffff000)
getrandom(&(0x7f0000000040), 0x0, 0x2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
socket$nl_generic(0x10, 0x3, 0x10)

2.662259162s ago: executing program 4 (id=380):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x319, &(0x7f0000000a40)="$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")
syz_genetlink_get_family_id$smc(0x0, r0)
tgkill(0x0, 0x0, 0x21)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000305000000005da9334402180020", @ANYRES32=r3, @ANYBLOB="08000200"], 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x9}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbf6, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x44008)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xd6a6, 0xfffffffb, 0x528, 0xd, 0xe8, 0xc, 0x7fff, 0x3, 0xaa, 0x6, 0x0, 0x80000000, 0x4, 0x8, 0x2, 0x5, 0x2, 0x6, 0x5, 0x7ff, 0x43, 0x101, 0x600, 0x1ff, 0x9, 0x6, 0x3, 0xdd, 0x800, 0xf, 0x5, 0x2, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x7, 0x5805, 0x2, 0x8, 0x8, 0x1000, 0x0, 0x6, 0x32, 0x0, 0x4af, 0x10001, 0xfffffffc, 0x2, 0x1, 0x80000000, 0x6, 0x1, 0x1, 0x100, 0xd, 0x9, 0x7, 0x6, 0xfffffff8, 0x7, 0xe22, 0xff, 0xf, 0x2, 0x4, 0x0, 0x402, 0x80000001, 0x6, 0x7, 0x3ff, 0x2, 0x5, 0xc, 0x8, 0xe9, 0x3, 0x3ff, 0x4d4b, 0x1, 0x5, 0x3, 0xfffffff4, 0xb6a, 0x1, 0x8, 0x570c, 0x1, 0x4, 0x1, 0xff, 0x3, 0x9, 0x4, 0x0, 0x80, 0xa0a2, 0x2a, 0x8, 0x1, 0x7fff, 0x3, 0x2, 0x10001, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7fff, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x47, 0x743fa18c, 0xbaa3, 0xe, 0x9, 0x226, 0x0, 0xfff, 0x9, 0x8, 0x4, 0x3ff, 0x6, 0x79e6, 0x0, 0xfffffffb, 0x4, 0x8, 0x9, 0x2, 0x10, 0x7, 0xd5, 0x2, 0x1, 0x6, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x6, 0xfffff001, 0x1, 0x6f62, 0x344, 0x0, 0x7, 0x0, 0x2, 0x7, 0x7, 0x8, 0x9, 0x2, 0x0, 0x0, 0x9, 0x401, 0x4, 0x1, 0x4, 0x6, 0x934, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x8000, 0x8, 0x80010, 0xfffffff2, 0x100, 0x7, 0xdb, 0x7fff, 0x3, 0xd5, 0x2, 0x0, 0x15, 0xffff, 0x7295, 0x4, 0x3dd, 0x0, 0x3, 0x9, 0x4, 0xb, 0x10001, 0xd01, 0x7, 0x6, 0xfffffff9, 0x7, 0x0, 0x2, 0x4564, 0x1, 0x5c6, 0x653b, 0x2, 0x0, 0xffffffb1, 0x7, 0xab3, 0x3, 0x3, 0x80000000, 0xffff, 0x7ff, 0xe339, 0x6, 0xe, 0x7, 0x7, 0xa, 0x9, 0x2, 0x8, 0x4, 0x6, 0x5, 0xfffffff4, 0x7, 0x80, 0x3, 0x1c000000, 0x7, 0x3, 0x5, 0x49c, 0x81, 0x80000000, 0xa, 0x4, 0x3, 0x14, 0x3, 0xff, 0x4, 0x9, 0x0, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000140)=0xc, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x6, 0x0, 0x0, 0x4, 0x4800235})
sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2.461656657s ago: executing program 2 (id=381):
openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/partitions\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrlimit(0xe, &(0x7f0000000180))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = gettid()
process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/34, 0x22}], 0x5, &(0x7f0000002340)=[{&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5, 0x0)

2.306955761s ago: executing program 2 (id=382):
r0 = socket(0x400000000010, 0x3, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(r1, 0xee00, 0x0)
mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8004022, 0x32202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x201, 0x2000000, 0x9, 0x9, 0xffffffff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8)
r2 = gettid()
r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
move_pages(0x0, 0xffffffffffffff56, 0x0, &(0x7f0000001180), &(0x7f00000004c0)=[0x0], 0x0)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x20)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0xa, 0x300)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FICLONE(r8, 0x40049409, r7)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000004fc149fdffffffff07"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', r10, 0x2f, 0x9, 0xf8, 0x7, 0x20, @empty, @mcast1, 0x80, 0x7, 0x2, 0x8}})

2.197801314s ago: executing program 3 (id=383):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000020850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b703000007000000850000002d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
tee(r1, r0, 0x5, 0x4)
ptrace(0x18, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138)
fallocate(r3, 0x10, 0x10c01, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(0x0, 0x80, 0x101, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="2abef6d8459fb7aca44356878598aec3c637e3eda8ea057b", @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r4, 0x0, 0x4050)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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")
setuid(0xee00)
r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'})
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

2.197216654s ago: executing program 2 (id=384):
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x5e32f682, 0x7b7}, 0x0, 0x1000000000000, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xa2, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
statx(r1, &(0x7f00000047c0)='./file1\x00', 0x100, 0x883e4c0c6db56ec3, &(0x7f0000000500))
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x2, 0xfffffffffffffffb, 0xee, &(0x7f0000000080)=""/238})
socket$netlink(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000d001f00"/22], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000004)
setresuid(0xee01, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0)
setuid(0xee01)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x3002000, 0x240001000})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x94)

2.093276557s ago: executing program 0 (id=385):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0)
read(r2, &(0x7f0000000400)=""/100, 0x64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000700002c6dce90", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
write(r1, &(0x7f0000000070)='syz0:', 0x5)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)

2.092732347s ago: executing program 4 (id=386):
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x5e32f682, 0x7b7}, 0x0, 0x1000000000000, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xa2, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x94) (fail_nth: 1)

1.98242065s ago: executing program 4 (id=387):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x37ff, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x1, 0x5, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f00000061c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000490000000000000000000000000000ffffffffffffffea00"/256, 0x100, 0x1, 0x4}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x9080}, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x10, 0xf41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x9, 0x100}, 0x287, 0x80000000, 0x34e, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082", 0x6, r4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
io_setup(0x7, &(0x7f00000008c0)=<r6=>0x0)
r7 = openat$zero(0xffffff9c, &(0x7f0000000900), 0x800, 0x0)
io_submit(r6, 0x1, &(0x7f0000001100)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0xfff, r7, &(0x7f0000000940)='B', 0x1, 0x4}])
clock_gettime(0x0, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0})
io_pgetevents(r6, 0x3, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000180)={r8, r9+10000000}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x8000000000006]}, 0x8})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d30000089ff87006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x0)

1.9816472s ago: executing program 1 (id=388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8050)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2f8, 0x178, 0x0, 0x148, 0x178, 0x148, 0x260, 0x240, 0x240, 0x260, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x88}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7, 0x0, 0x40}, {0x1}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x4, 0x6, 0x3, 0x0, 0x2], 0x3, 0x4}, {0x1, [0x4, 0x2, 0x4, 0x2, 0x3, 0x6], 0x4}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x4, 0x3, 0x3, 0x7, 0x6], 0x0, 0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x4}, {0x2, 0x1, 0x5}, {0x4, 0x4, 0x4}, 0x80003, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040))
fchown(r4, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x4104, 0x0, 0x2b, 0x6, 0x6, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x6f8eb1a1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r5, 0x802)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x0, 0x1, 0x3, 0x2, r4, 0x7fffffff, '\x00', 0x0, r4, 0x3, 0x5, 0x2}, 0x50)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11002dbd7000fcdbdf251b000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2005c890}, 0x1000c810)
open(0x0, 0x121342, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.691005697s ago: executing program 1 (id=389):
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x20)
bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
rename(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000200ff05000000000e1208000f0100810401a80016ea2400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e005fffff300d5e1020081b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040800)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x28, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={0x0, &(0x7f0000000480)=""/196, &(0x7f0000000580), &(0x7f0000000640)="5c894b67efa2ca30735599095925f4661b23439d7c375adacdddfe49828db4bdbd61c61b99bacd3b58c77a73c300afbce898aa626db88c6c06e87cdd5b402355c566b85200973e354d6bc2e3505ad98bcadba8942e85c5a6c0bdc77c0f36e2234d27d965778191c661", 0x4, r1, 0x4}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000300f10005"], 0x28}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x40000, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x2, 0x8000000, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}]}}]}, 0x434}}, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x34c})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'})

1.548473671s ago: executing program 3 (id=390):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000500e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c)

1.438152343s ago: executing program 3 (id=391):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = timerfd_create(0x1, 0x0)
read(r1, &(0x7f0000002180)=""/262, 0x106)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ab8000000060a1f0400000000000000000a0000440900010073797a31000000008c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004208000440000000380800024000000002540001800b00010074617267657400004400028008000240000000012c000300e8611147c4a9f650e1c7d0ae567b2896a0331e5bfced9e3939a0c7f6045b4e0d3428017a5a7c0ca409000100444e4154000000000900020073797a32000000"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000390402000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="11980400419804002800128008000100736974001c00028008000300ac1414aa06000f0001000000060010"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000002a80), 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x4000004)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180))

1.409689714s ago: executing program 1 (id=392):
openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/partitions\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrlimit(0xe, &(0x7f0000000180))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = gettid()
process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/34, 0x22}], 0x5, &(0x7f0000002340)=[{&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5, 0x0)

1.379082715s ago: executing program 1 (id=393):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000020850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b703000007000000850000002d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
tee(r1, r0, 0x5, 0x4)
ptrace(0x18, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138)
fallocate(r3, 0x10, 0x10c01, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(0x0, 0x80, 0x101, &(0x7f0000000200)={0x4000000000000, 0x1, 0x1, 0x2})
sendmsg$NFT_BATCH(r4, 0x0, 0x40014)
sendmsg$NFT_BATCH(r4, 0x0, 0x4050)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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")
setuid(0xee00)
r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'})
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.345173766s ago: executing program 2 (id=394):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x60, &(0x7f0000000140)={@random="cd1c43650b3c", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x2a, 0x2f, 0xff, @private0, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xfffe}, {"9e57c9f038632d7dab325c81e1228fd0705bc4f2805a"}}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, r2, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
syz_open_dev$sg(&(0x7f0000000100), 0xfff, 0x480)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="bdf3", 0x2}], 0x1}}], 0x1, 0x800)
sendto$inet(r0, &(0x7f0000000000)="d5", 0x1, 0x48801, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x376, 0x0, 0x0)

1.299030447s ago: executing program 3 (id=395):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x2f, 0x9, 0xf8, 0x7, 0x20, @empty, @mcast1, 0x80, 0x7, 0x2, 0x8}})

1.272248818s ago: executing program 2 (id=396):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xfffffffc, 0x9, 0x800000, 0x43, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x3, &(0x7f0000000300)=[{0xf50, 0x8, 0xa, 0xa}, {0x5, 0xc0, 0x7a, 0xfffffffb}, {0xffff, 0x4, 0xda, 0x1}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x28)
listen(r1, 0x5)
write(r0, &(0x7f0000000300)='*:', 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2240, 0x0)
copy_file_range(r2, 0x0, r2, 0x0, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
connect$can_j1939(r3, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xee}, 0xff}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c000380480000800800034000000002180002801400028008000180fffffffc"], 0x10c}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

1.271747758s ago: executing program 3 (id=397):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80030, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = inotify_init()
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0)
listen(r2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x801)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
socket$kcm(0xa, 0x1, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYBLOB="3b6e9cdc8e2da27e0feda92087e7a0a2eca2cc85cb9b627ad874745e4fa2d6f7e4acd046b978efb22f3791da4ba389f39e494991f12d236383c562f169c11bfc9476935a2a93f94832c57e499c6a798ba5e102711d009887552871ca5e", @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

651.517373ms ago: executing program 1 (id=398):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe4, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x125, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8)
ioctl$VT_DISALLOCATE(r1, 0x5608)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdr={0x74, 0x15, 0x800, 0x70bd27, 0x25dfdbfc, {0xa, 0x1f, 0x42, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x408}, @IFA_FLAGS={0x8, 0x8, 0xa}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xfffffff9}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x8001, 0x1fffe}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8090}, 0x8000)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

306.757162ms ago: executing program 0 (id=399):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup2(r0, r1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0xfffe}, 0x8)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0xa, 0xffff}}}, 0x24}}, 0x4044880)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
ppoll(&(0x7f0000000300)=[{r4, 0x3328}], 0x1, 0x0, 0x0, 0x0)
close(r3)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000240))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800014000000002080002400000002505000300000000000900010073797a30000000000900020073797a3200"], 0x84}}, 0x4048010)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r8 = socket$kcm(0x2, 0x3, 0x2)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x0, 0x40000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x24000001)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0)
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0)=0xcd, 0xa, 0x4)

0s ago: executing program 0 (id=400):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
read(r0, &(0x7f0000000380)=""/176, 0xb0)
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1, 0x2, 0xde55)
semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
set_mempolicy(0x2, 0x0, 0xb0)
shmctl$SHM_UNLOCK(0x0, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900040000000046090100000003e716000000060000005c93000000000000b5030000000000198500000076000000b700000000000000950000000000000015f67610abdaa93f5cccee533f496de58f36e85c65051c4b9bf2a3c0a72c39dbb0cb4366dacbac73b4b439ab8b44f46dba139e69d89ab80752da033d74b446b0a186ed3c17a8c57cb8515359aa6007d81bafbb175cd6bb309a7d35866b5bdfe3a7b5e0e86ec2380d26e2183de40e052f0d7d20f006da77aa37e7bf722c505d930667b07f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002c40), 0x0, 0x0)
unshare(0x22020600)

kernel console output (not intermixed with test programs):

[   21.986727][   T30] audit: type=1400 audit(1791497027.220:103): avc:  denied  { search } for  pid=3183 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.013336][   T30] audit: type=1400 audit(1791497027.220:104): avc:  denied  { search } for  pid=3183 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.243201][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   23.243220][   T30] audit: type=1400 audit(1791497028.480:120): avc:  denied  { write } for  pid=3239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.261674][   T30] audit: type=1400 audit(1791497028.490:121): avc:  denied  { write } for  pid=3250 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.481355][   T30] audit: type=1400 audit(1791497028.720:122): avc:  denied  { write } for  pid=3253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.517864][   T30] audit: type=1400 audit(1791497028.760:123): avc:  denied  { write } for  pid=3264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.634247][   T30] audit: type=1400 audit(1791497028.870:124): avc:  denied  { write } for  pid=3267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.665758][   T30] audit: type=1400 audit(1791497028.900:125): avc:  denied  { write } for  pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts.
[   28.785718][   T30] audit: type=1400 audit(1791497034.020:126): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.785959][   T30] audit: type=1400 audit(1791497034.020:127): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.786428][ T3289] cgroup: Unknown subsys name 'net'
[   28.786657][   T30] audit: type=1400 audit(1791497034.020:128): avc:  denied  { unmount } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.957595][ T3289] cgroup: Unknown subsys name 'cpuset'
[   28.958334][ T3289] cgroup: Unknown subsys name 'rlimit'
[   29.063916][   T30] audit: type=1400 audit(1791497034.300:129): avc:  denied  { setattr } for  pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.064842][   T30] audit: type=1400 audit(1791497034.300:130): avc:  denied  { create } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.064947][   T30] audit: type=1400 audit(1791497034.300:131): avc:  denied  { write } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.065276][   T30] audit: type=1400 audit(1791497034.300:132): avc:  denied  { read } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.075488][   T30] audit: type=1400 audit(1791497034.310:133): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.075580][   T30] audit: type=1400 audit(1791497034.310:134): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.081335][   T30] audit: type=1400 audit(1791497034.310:135): avc:  denied  { read } for  pid=3025 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.122842][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.250723][ T3289] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.535524][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.535715][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.535850][ T3305] bridge_slave_0: entered allmulticast mode
[   30.536491][ T3305] bridge_slave_0: entered promiscuous mode
[   30.578083][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.578122][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.578262][ T3305] bridge_slave_1: entered allmulticast mode
[   30.578893][ T3305] bridge_slave_1: entered promiscuous mode
[   30.591558][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.592719][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.603699][ T3305] team0: Port device team_slave_0 added
[   30.604853][ T3305] team0: Port device team_slave_1 added
[   30.615405][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.615421][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.615447][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.615967][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.615979][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.616004][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.632889][ T3305] hsr_slave_0: entered promiscuous mode
[   30.633461][ T3305] hsr_slave_1: entered promiscuous mode
[   30.834675][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.834711][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.834767][ T3299] bridge_slave_0: entered allmulticast mode
[   30.835176][ T3299] bridge_slave_0: entered promiscuous mode
[   30.848422][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.848521][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.848573][ T3307] bridge_slave_0: entered allmulticast mode
[   30.849158][ T3307] bridge_slave_0: entered promiscuous mode
[   30.850072][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.850105][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.850161][ T3307] bridge_slave_1: entered allmulticast mode
[   30.850625][ T3307] bridge_slave_1: entered promiscuous mode
[   30.862033][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.863127][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.872802][ T3307] team0: Port device team_slave_0 added
[   30.873691][ T3307] team0: Port device team_slave_1 added
[   30.883208][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.883222][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.883244][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.883814][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.883827][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.883852][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.980574][ T3307] hsr_slave_0: entered promiscuous mode
[   30.981070][ T3307] hsr_slave_1: entered promiscuous mode
[   30.981275][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   30.981290][ T3307] Cannot create hsr debugfs directory
[   30.993974][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.994013][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.994194][ T3299] bridge_slave_1: entered allmulticast mode
[   30.994806][ T3299] bridge_slave_1: entered promiscuous mode
[   31.063179][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.065993][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.070195][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.075940][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.075974][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.076116][ T3303] bridge_slave_0: entered allmulticast mode
[   31.076679][ T3303] bridge_slave_0: entered promiscuous mode
[   31.078958][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.086616][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.089023][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.094589][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.094621][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.094677][ T3303] bridge_slave_1: entered allmulticast mode
[   31.095326][ T3303] bridge_slave_1: entered promiscuous mode
[   31.103895][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.108771][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.122618][ T3299] team0: Port device team_slave_0 added
[   31.123807][ T3299] team0: Port device team_slave_1 added
[   31.123891][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.132355][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.158839][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.190041][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.195283][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.195299][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.195326][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.196287][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.196302][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.196356][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.231598][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.231632][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.231687][ T3300] bridge_slave_0: entered allmulticast mode
[   31.232240][ T3300] bridge_slave_0: entered promiscuous mode
[   31.238988][ T3303] team0: Port device team_slave_0 added
[   31.241945][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.241978][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.242031][ T3300] bridge_slave_1: entered allmulticast mode
[   31.242577][ T3300] bridge_slave_1: entered promiscuous mode
[   31.246094][ T3303] team0: Port device team_slave_1 added
[   31.256431][ T3299] hsr_slave_0: entered promiscuous mode
[   31.257204][ T3299] hsr_slave_1: entered promiscuous mode
[   31.257581][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   31.257597][ T3299] Cannot create hsr debugfs directory
[   31.283722][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.283738][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.283766][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.287941][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.287975][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.288145][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.288236][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.290202][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.291591][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.291901][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.291913][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.291941][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.314563][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.318171][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.340423][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.353781][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.355016][ T3300] team0: Port device team_slave_0 added
[   31.356128][ T3300] team0: Port device team_slave_1 added
[   31.358673][ T3303] hsr_slave_0: entered promiscuous mode
[   31.359078][ T3303] hsr_slave_1: entered promiscuous mode
[   31.359296][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   31.359311][ T3303] Cannot create hsr debugfs directory
[   31.378149][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.387679][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.388180][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.392822][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.411639][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.411655][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.411699][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.418445][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.418460][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.418487][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.443552][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.448692][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.648120][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.669096][ T3300] hsr_slave_0: entered promiscuous mode
[   31.669465][ T3300] hsr_slave_1: entered promiscuous mode
[   31.669969][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   31.669983][ T3300] Cannot create hsr debugfs directory
[   31.867394][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   31.914080][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.914112][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.927634][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.927683][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.948576][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.951484][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.952411][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.954380][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.981381][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.997411][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.997991][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.999778][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.065166][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.066647][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.075706][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.077533][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.083176][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.083735][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.093643][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.094281][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.101116][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.170365][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.173214][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.174289][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.193434][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.195108][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   32.224469][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.224832][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.233062][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.240102][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.240140][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.248549][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.259970][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.263561][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.270380][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.279740][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.293237][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   32.298306][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   32.326963][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.326990][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.335191][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.335284][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.336757][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.336780][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.359339][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.359374][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.376543][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.376629][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.469152][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.491504][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.509996][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.515490][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   32.540457][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.540501][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.544359][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.544401][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.744355][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.745494][ T3305] veth0_vlan: entered promiscuous mode
[   32.754544][ T3305] veth1_vlan: entered promiscuous mode
[   32.791629][ T3305] veth0_macvtap: entered promiscuous mode
[   32.798325][ T3305] veth1_macvtap: entered promiscuous mode
[   32.820201][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.830264][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.831855][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.839317][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.897506][  T333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.899202][  T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.899261][  T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.899342][  T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.949413][ T3480] modprobe (3480) used greatest stack depth: 11216 bytes left
[   32.989129][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.010767][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.012640][ T3303] veth0_vlan: entered promiscuous mode
[   33.024293][ T3303] veth1_vlan: entered promiscuous mode
[   33.072288][ T3303] veth0_macvtap: entered promiscuous mode
[   33.092723][ T3303] veth1_macvtap: entered promiscuous mode
[   33.095226][ T3299] veth0_vlan: entered promiscuous mode
[   33.103259][ T3299] veth1_vlan: entered promiscuous mode
[   33.106253][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.113869][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.141239][ T3299] veth0_macvtap: entered promiscuous mode
[   33.152745][ T3299] veth1_macvtap: entered promiscuous mode
[   33.160932][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.181264][ T3307] veth0_vlan: entered promiscuous mode
[   33.197024][   T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.197285][   T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.197373][   T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.201994][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.203535][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.205176][ T3307] veth1_vlan: entered promiscuous mode
[   33.257699][   T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.258045][   T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.258095][   T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.258133][   T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.271122][ T3307] veth0_macvtap: entered promiscuous mode
[   33.281255][ T3307] veth1_macvtap: entered promiscuous mode
[   33.325052][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.337073][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.377641][  T333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.378159][  T333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.378306][  T333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.378445][  T333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.401744][ T3514] loop3: detected capacity change from 0 to 512
[   33.402517][ T3514] EXT4-fs: Ignoring removed bh option
[   33.415353][ T3514] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   33.450601][ T3514] EXT4-fs (loop3): 1 truncate cleaned up
[   33.451093][ T3514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.521428][ T3300] veth0_vlan: entered promiscuous mode
[   33.534574][ T3300] veth1_vlan: entered promiscuous mode
[   33.552861][ T3300] veth0_macvtap: entered promiscuous mode
[   33.555033][ T3300] veth1_macvtap: entered promiscuous mode
[   33.572869][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.574410][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.634873][   T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.662827][   T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.670708][  T361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.936326][  T361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.048897][   T30] kauditd_printk_skb: 119 callbacks suppressed
[   34.048922][   T30] audit: type=1400 audit(1791497039.290:255): avc:  denied  { create } for  pid=3535 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.054243][   T30] audit: type=1400 audit(1791497039.290:256): avc:  denied  { map } for  pid=3535 comm="syz.2.8" path="socket:[5442]" dev="sockfs" ino=5442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.115880][   T30] audit: type=1400 audit(1791497039.290:257): avc:  denied  { read } for  pid=3535 comm="syz.2.8" path="socket:[5442]" dev="sockfs" ino=5442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.153037][   T30] audit: type=1400 audit(1791497039.390:258): avc:  denied  { create } for  pid=3535 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   34.205875][   T30] audit: type=1400 audit(1791497039.440:259): avc:  denied  { create } for  pid=3535 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   34.233334][ T3527] syz.3.4 (3527) used greatest stack depth: 10480 bytes left
[   34.254083][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.303419][   T30] audit: type=1400 audit(1791497039.540:260): avc:  denied  { ioctl } for  pid=3540 comm="syz.3.9" path="socket:[4454]" dev="sockfs" ino=4454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.309045][ T3543] netlink: 'syz.4.10': attribute type 8 has an invalid length.
[   34.309064][ T3543] sch_fq: defrate 0 ignored.
[   34.338175][   T30] audit: type=1400 audit(1791497039.550:261): avc:  denied  { write } for  pid=3540 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   34.415421][   T30] audit: type=1400 audit(1791497039.650:262): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   34.475689][   T30] audit: type=1400 audit(1791497039.710:263): avc:  denied  { create } for  pid=3548 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.488464][   T30] audit: type=1400 audit(1791497039.720:264): avc:  denied  { bind } for  pid=3548 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   35.716739][ T3567] loop4: detected capacity change from 0 to 256
[   37.593586][ T3577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'.
[   38.499685][ T3601] loop3: detected capacity change from 0 to 512
[   39.994165][ T3602] loop0: detected capacity change from 0 to 764
[   40.298313][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   40.298405][   T30] audit: type=1400 audit(1791497045.520:285): avc:  denied  { mount } for  pid=3592 comm="syz.0.26" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   41.683573][ T3619] loop1: detected capacity change from 0 to 512
[   41.684338][ T3619] EXT4-fs: Ignoring removed bh option
[   41.708624][   T30] audit: type=1400 audit(1791497046.950:286): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   41.729094][ T3619] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   41.729826][ T3619] EXT4-fs (loop1): 1 truncate cleaned up
[   41.730219][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.826728][   T30] audit: type=1326 audit(1791497047.060:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   41.826932][   T30] audit: type=1326 audit(1791497047.060:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   41.826963][   T30] audit: type=1326 audit(1791497047.060:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   41.830067][   T30] audit: type=1326 audit(1791497047.070:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   41.908628][   T30] audit: type=1326 audit(1791497047.120:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   41.908741][   T30] audit: type=1326 audit(1791497047.120:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   41.908768][   T30] audit: type=1326 audit(1791497047.120:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   41.908842][   T30] audit: type=1326 audit(1791497047.120:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.32" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   42.685819][ T3635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'.
[   42.735333][ T3633] syz.1.30 (3633) used greatest stack depth: 10448 bytes left
[   42.741090][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.810894][ T3664] loop0: detected capacity change from 0 to 512
[   43.939547][ T3661] loop4: detected capacity change from 0 to 128
[   44.051280][ T3663] loop1: detected capacity change from 0 to 128
[   44.074588][ T3663] FAT-fs (loop1): bogus logical sector size 0
[   44.074861][ T3663] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   44.075832][ T3663] FAT-fs (loop1): Can't find a valid FAT filesystem
[   44.146571][ T3661] FAT-fs (loop4): bogus logical sector size 0
[   44.194959][ T3661] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   44.194983][ T3661] FAT-fs (loop4): Can't find a valid FAT filesystem
[   44.492971][ T3667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.43'.
[   44.628560][ T3672] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.41'.
[   44.676858][ T3663] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.42'.
[   44.988351][ T3685] loop3: detected capacity change from 0 to 512
[   44.991049][ T3685] EXT4-fs: Ignoring removed bh option
[   45.008530][ T3686] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   45.028314][ T3685] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   45.028817][ T3685] EXT4-fs (loop3): 1 truncate cleaned up
[   45.029248][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.101047][ T3687] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   45.427021][ T3681] loop2: detected capacity change from 0 to 1024
[   45.427525][ T3681] EXT4-fs: Ignoring removed bh option
[   45.485450][ T3681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.495124][   T30] kauditd_printk_skb: 184 callbacks suppressed
[   45.495144][   T30] audit: type=1400 audit(1791497050.730:479): avc:  denied  { write } for  pid=3676 comm="syz.2.46" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.495170][   T30] audit: type=1400 audit(1791497050.730:480): avc:  denied  { add_name } for  pid=3676 comm="syz.2.46" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.496554][   T30] audit: type=1400 audit(1791497050.730:481): avc:  denied  { create } for  pid=3676 comm="syz.2.46" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.498615][   T30] audit: type=1400 audit(1791497050.740:482): avc:  denied  { read write } for  pid=3676 comm="syz.2.46" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.498642][   T30] audit: type=1400 audit(1791497050.740:483): avc:  denied  { open } for  pid=3676 comm="syz.2.46" path="/11/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.501880][ T3681] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   45.720983][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.041760][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.491966][ T3706] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   46.509647][ T3716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.56'.
[   46.521133][   T30] audit: type=1326 audit(1791497051.750:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   46.521173][   T30] audit: type=1326 audit(1791497051.750:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   46.521238][   T30] audit: type=1326 audit(1791497051.750:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   46.521265][   T30] audit: type=1326 audit(1791497051.750:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   46.521359][   T30] audit: type=1326 audit(1791497051.750:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   46.759159][ T3713] loop3: detected capacity change from 0 to 128
[   46.777049][ T3713] FAT-fs (loop3): bogus logical sector size 0
[   46.777151][ T3713] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   46.777168][ T3713] FAT-fs (loop3): Can't find a valid FAT filesystem
[   46.834232][ T3713] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.55'.
[   47.777993][ T3749] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   47.932165][ T3753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'.
[   48.431159][ T3768] loop3: detected capacity change from 0 to 128
[   48.439374][ T3768] FAT-fs (loop3): bogus logical sector size 0
[   48.439498][ T3768] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   48.439526][ T3768] FAT-fs (loop3): Can't find a valid FAT filesystem
[   48.441995][ T3768] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.70'.
[   48.989447][ T3780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.72'.
[   49.121294][ T3784] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   49.627084][ T3753] loop0: detected capacity change from 0 to 512
[   50.157059][ T3801] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   50.241031][ T3803] loop2: detected capacity change from 0 to 128
[   50.334066][ T3803] FAT-fs (loop2): bogus logical sector size 0
[   50.334119][ T3803] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   50.334204][ T3803] FAT-fs (loop2): Can't find a valid FAT filesystem
[   50.570131][ T3808] loop4: detected capacity change from 0 to 128
[   50.582906][ T3808] FAT-fs (loop4): bogus logical sector size 0
[   50.582930][ T3808] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   50.582947][ T3808] FAT-fs (loop4): Can't find a valid FAT filesystem
[   50.605026][ T3808] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.83'.
[   50.617782][ T3809] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.81'.
[   51.450350][ T3824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.86'.
[   51.865308][ T3806] loop0: detected capacity change from 0 to 1024
[   52.045624][ T3806] EXT4-fs: Ignoring removed bh option
[   52.097663][ T3806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.143548][   T30] kauditd_printk_skb: 194 callbacks suppressed
[   52.143569][   T30] audit: type=1400 audit(1791497057.360:683): avc:  denied  { write } for  pid=3805 comm="syz.0.82" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.206860][ T3829] loop2: detected capacity change from 0 to 1024
[   52.207668][ T3829] EXT4-fs: Ignoring removed bh option
[   52.247521][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.272255][   T30] audit: type=1400 audit(1791497057.510:684): avc:  denied  { write } for  pid=3827 comm="syz.2.88" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.515748][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.521036][ T3847] loop1: detected capacity change from 0 to 128
[   52.525807][ T3847] FAT-fs (loop1): bogus logical sector size 0
[   52.525835][ T3847] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   52.525851][ T3847] FAT-fs (loop1): Can't find a valid FAT filesystem
[   52.540570][ T3847] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.94'.
[   52.548659][ T3848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'.
[   52.909465][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.950386][ T3851] loop4: detected capacity change from 0 to 512
[   53.195292][ T3863] netlink: 48 bytes leftover after parsing attributes in process `syz.1.98'.
[   53.361652][ T3868] loop0: detected capacity change from 0 to 1024
[   53.376275][ T3868] EXT4-fs: Ignoring removed bh option
[   53.394049][ T3870] loop1: detected capacity change from 0 to 128
[   53.412071][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.438958][   T30] audit: type=1400 audit(1791497058.680:685): avc:  denied  { write } for  pid=3867 comm="syz.0.101" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.508872][ T3870] FAT-fs (loop1): bogus logical sector size 0
[   53.509073][ T3870] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   53.509095][ T3870] FAT-fs (loop1): Can't find a valid FAT filesystem
[   53.747483][ T3870] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.100'.
[   53.787046][ T3879] loop4: detected capacity change from 0 to 512
[   53.817707][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.317581][ T3890] FAT-fs (loop0): bogus logical sector size 0
[   54.317661][ T3890] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   54.317678][ T3890] FAT-fs (loop0): Can't find a valid FAT filesystem
[   54.339488][ T3894] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   54.495556][ T3895] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.107'.
[   54.608048][ T3884] EXT4-fs: Ignoring removed bh option
[   54.645612][ T3884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.670815][   T30] audit: type=1400 audit(1791497059.910:686): avc:  denied  { write } for  pid=3883 comm="syz.1.106" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   54.749744][ T3901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.110'.
[   55.152963][ T3912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'.
[   55.501020][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.592201][   T30] audit: type=1400 audit(1791497060.830:687): avc:  denied  { read } for  pid=3918 comm="syz.1.116" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   55.592288][   T30] audit: type=1400 audit(1791497060.830:688): avc:  denied  { open } for  pid=3918 comm="syz.1.116" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   55.592565][   T30] audit: type=1400 audit(1791497060.830:689): avc:  denied  { ioctl } for  pid=3918 comm="syz.1.116" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   55.713779][ T3919] netlink: 'syz.1.116': attribute type 3 has an invalid length.
[   55.748557][ T3911] set_capacity_and_notify: 2 callbacks suppressed
[   55.748577][ T3911] loop0: detected capacity change from 0 to 512
[   55.947131][   T30] audit: type=1400 audit(1791497061.190:690): avc:  denied  { create } for  pid=3928 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   56.021346][ T3927] loop4: detected capacity change from 0 to 1024
[   56.033047][ T3927] EXT4-fs: Ignoring removed bh option
[   56.090763][   T30] audit: type=1400 audit(1791497061.330:691): avc:  denied  { bind } for  pid=3928 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   56.090800][   T30] audit: type=1400 audit(1791497061.330:692): avc:  denied  { name_bind } for  pid=3928 comm="syz.1.119" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   56.147168][ T3927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.173344][ T3939] loop2: detected capacity change from 0 to 512
[   56.185255][ T3939] EXT4-fs: Ignoring removed bh option
[   56.204824][ T3939] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   56.205980][ T3939] EXT4-fs (loop2): 1 truncate cleaned up
[   56.206372][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.251305][ T3937] loop0: detected capacity change from 0 to 128
[   56.294614][ T3937] FAT-fs (loop0): bogus logical sector size 0
[   56.294639][ T3937] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   56.294656][ T3937] FAT-fs (loop0): Can't find a valid FAT filesystem
[   56.481776][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.548011][ T3834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   56.590377][ T3949] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.122'.
[   57.005822][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.775275][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   57.775295][   T30] audit: type=1400 audit(1791497063.010:695): avc:  denied  { create } for  pid=3964 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.998709][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'.
[   58.072595][   T30] audit: type=1400 audit(1791497063.310:696): avc:  denied  { setopt } for  pid=3975 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.240141][ T3982] loop1: detected capacity change from 0 to 512
[   58.240940][ T3982] EXT4-fs: Ignoring removed oldalloc option
[   58.263756][ T3983] loop4: detected capacity change from 0 to 512
[   58.301709][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.343208][ T3990] loop3: detected capacity change from 0 to 512
[   58.343546][ T3990] EXT4-fs: Ignoring removed bh option
[   58.362608][ T3990] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   58.363255][ T3990] EXT4-fs (loop3): 1 truncate cleaned up
[   58.366762][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.434199][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.565988][ T4000] loop4: detected capacity change from 0 to 2048
[   58.585575][ T3996] loop1: detected capacity change from 0 to 1024
[   58.591821][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.612006][   T30] audit: type=1400 audit(1791497063.850:697): avc:  denied  { read } for  pid=3998 comm="syz.4.142" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   58.641246][   T30] audit: type=1400 audit(1791497063.860:698): avc:  denied  { write } for  pid=3998 comm="syz.4.142" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.641281][   T30] audit: type=1400 audit(1791497063.860:699): avc:  denied  { read append open } for  pid=3998 comm="syz.4.142" path="/35/file1/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.689592][   T30] audit: type=1400 audit(1791497063.910:700): avc:  denied  { map } for  pid=3998 comm="syz.4.142" path="/35/file1/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.714201][ T3996] EXT4-fs: Ignoring removed bh option
[   58.744965][ T3996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.776997][   T30] audit: type=1400 audit(1791497064.010:701): avc:  denied  { write } for  pid=3995 comm="syz.1.140" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.786477][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.537281][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.826399][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.908089][ T4016] FAULT_INJECTION: forcing a failure.
[   59.908089][ T4016] name failslab, interval 1, probability 0, space 0, times 1
[   59.908125][ T4016] CPU: 0 UID: 0 PID: 4016 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(lazy) 
[   59.908149][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   59.908161][ T4016] Call Trace:
[   59.908167][ T4016]  <TASK>
[   59.908176][ T4016]  __dump_stack+0x1d/0x30
[   59.908264][ T4016]  dump_stack_lvl+0x95/0xd0
[   59.908295][ T4016]  dump_stack+0x15/0x1b
[   59.908364][ T4016]  should_fail_ex+0x262/0x280
[   59.908401][ T4016]  ? sctp_endpoint_new+0x84/0x560
[   59.908427][ T4016]  should_failslab+0x8c/0xb0
[   59.908527][ T4016]  __kmalloc_cache_noprof+0x7a/0x400
[   59.908568][ T4016]  ? __list_add_valid_or_report+0x38/0xe0
[   59.908591][ T4016]  ? sctp_endpoint_new+0x84/0x560
[   59.908611][ T4016]  ? ref_tracker_alloc+0x199/0x2f0
[   59.908681][ T4016]  sctp_endpoint_new+0x84/0x560
[   59.908769][ T4016]  ? __rcu_read_unlock+0x4e/0x70
[   59.908826][ T4016]  sctp_init_sock+0x619/0x6f0
[   59.908910][ T4016]  inet_create+0x720/0x790
[   59.908960][ T4016]  __sock_create+0x2e5/0x580
[   59.908990][ T4016]  __sys_socket+0xaf/0x180
[   59.909066][ T4016]  __x64_sys_socket+0x3f/0x50
[   59.909096][ T4016]  x64_sys_call+0x246e/0x2550
[   59.909170][ T4016]  do_syscall_64+0x112/0x360
[   59.909308][ T4016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.909397][ T4016] RIP: 0033:0x7fc4de55e1d9
[   59.909414][ T4016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.909434][ T4016] RSP: 002b:00007fc4dcfb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   59.909459][ T4016] RAX: ffffffffffffffda RBX: 00007fc4de7e5fa0 RCX: 00007fc4de55e1d9
[   59.909499][ T4016] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002
[   59.909513][ T4016] RBP: 00007fc4de5f5888 R08: 0000000000000000 R09: 0000000000000000
[   59.909528][ T4016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.909541][ T4016] R13: 00007fc4de7e6038 R14: 00007fc4de7e5fa0 R15: 00007fff9072c108
[   59.909587][ T4016]  </TASK>
[   59.970648][ T4027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'.
[   60.024805][ T4030] pim6reg: entered allmulticast mode
[   60.077146][ T4031] pim6reg: entered allmulticast mode
[   60.153808][ T4031] pim6reg: left allmulticast mode
[   60.282533][ T4040] loop4: detected capacity change from 0 to 164
[   61.861271][ T4069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'.
[   62.099998][ T4072] loop1: detected capacity change from 0 to 128
[   62.127623][ T4072] FAT-fs (loop1): bogus logical sector size 0
[   62.127647][ T4072] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   62.127665][ T4072] FAT-fs (loop1): Can't find a valid FAT filesystem
[   62.253166][   T30] audit: type=1326 audit(1791497067.490:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de55e1d9 code=0x7ffc0000
[   62.253201][   T30] audit: type=1326 audit(1791497067.490:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de55e1d9 code=0x7ffc0000
[   62.253605][   T30] audit: type=1326 audit(1791497067.490:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de55e1d9 code=0x7ffc0000
[   62.459419][ T4086] FAULT_INJECTION: forcing a failure.
[   62.459419][ T4086] name failslab, interval 1, probability 0, space 0, times 0
[   62.459466][ T4086] CPU: 1 UID: 0 PID: 4086 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(lazy) 
[   62.459558][ T4086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   62.459573][ T4086] Call Trace:
[   62.459581][ T4086]  <TASK>
[   62.459591][ T4086]  __dump_stack+0x1d/0x30
[   62.459619][ T4086]  dump_stack_lvl+0x95/0xd0
[   62.459663][ T4086]  dump_stack+0x15/0x1b
[   62.459685][ T4086]  should_fail_ex+0x262/0x280
[   62.459714][ T4086]  ? __alloc_skb+0x2e0/0x6f0
[   62.459748][ T4086]  should_failslab+0x8c/0xb0
[   62.459806][ T4086]  kmem_cache_alloc_node_noprof+0x82/0x400
[   62.459843][ T4086]  ? should_fail_ex+0xdb/0x280
[   62.459889][ T4086]  ? __alloc_skb+0x2e0/0x6f0
[   62.460114][ T4086]  __alloc_skb+0x2e0/0x6f0
[   62.460178][ T4086]  ? __alloc_skb+0x209/0x6f0
[   62.460201][ T4086]  audit_log_start+0x3aa/0x730
[   62.460313][ T4086]  ? timerqueue_linked_add+0x1c9/0x1f0
[   62.460349][ T4086]  audit_seccomp+0x49/0x110
[   62.460370][ T4086]  __seccomp_filter+0x909/0x1360
[   62.460440][ T4086]  ? lapic_next_event+0x11/0x20
[   62.460466][ T4086]  ? clockevents_program_event+0x2fd/0x340
[   62.460502][ T4086]  ? tick_program_event+0x79/0xc0
[   62.460528][ T4086]  __seccomp_permit_syscall+0x7d/0x150
[   62.460601][ T4086]  do_syscall_64+0xca/0x360
[   62.460625][ T4086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.460756][ T4086] RIP: 0033:0x7f65b571e1d9
[   62.460776][ T4086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.460793][ T4086] RSP: 002b:00007f65b4177028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   62.460869][ T4086] RAX: ffffffffffffffda RBX: 00007f65b59a5fa0 RCX: 00007f65b571e1d9
[   62.460951][ T4086] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[   62.460989][ T4086] RBP: 00007f65b4177090 R08: 0000000000000000 R09: 0000000000000000
[   62.461004][ T4086] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[   62.461018][ T4086] R13: 00007f65b59a6038 R14: 00007f65b59a5fa0 R15: 00007ffc03b04768
[   62.461036][ T4086]  </TASK>
[   62.531960][ T4072] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.164'.
[   62.778002][   T30] kauditd_printk_skb: 99 callbacks suppressed
[   62.778017][   T30] audit: type=1326 audit(1791497068.020:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b56dea0e code=0x7ffc0000
[   62.791245][   T30] audit: type=1326 audit(1791497068.030:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b56dea0e code=0x7ffc0000
[   62.793381][   T30] audit: type=1326 audit(1791497068.030:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b56dea0e code=0x7ffc0000
[   62.797771][   T30] audit: type=1326 audit(1791497068.040:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f65b571e1d9 code=0x7ffc0000
[   62.798489][   T30] audit: type=1326 audit(1791497068.040:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f65b571e1d9 code=0x7ffc0000
[   62.858059][ T4106] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   63.678235][ T4105] loop1: detected capacity change from 0 to 1024
[   63.704295][ T4105] EXT4-fs: Ignoring removed bh option
[   63.735254][ T4105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.754950][   T30] audit: type=1400 audit(1791497068.990:807): avc:  denied  { write } for  pid=4104 comm="syz.1.173" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.957893][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.022974][ T4119] loop4: detected capacity change from 0 to 4096
[   64.023457][ T4119] EXT4-fs: test_dummy_encryption option not supported
[   64.076644][ T4124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'.
[   64.831868][ T4118] loop2: detected capacity change from 0 to 1024
[   64.915639][   T30] audit: type=1400 audit(1791497070.150:808): avc:  denied  { mount } for  pid=4130 comm="syz.4.180" name="/" dev="rpc_pipefs" ino=6702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   64.922785][ T4118] EXT4-fs: Ignoring removed bh option
[   64.932508][   T30] audit: type=1400 audit(1791497070.170:809): avc:  denied  { create } for  pid=4130 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   64.935249][ T4131] loop4: detected capacity change from 0 to 1024
[   65.013774][ T4118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.083632][   T30] audit: type=1400 audit(1791497070.320:810): avc:  denied  { write } for  pid=4117 comm="syz.2.175" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.320068][ T4146] loop1: detected capacity change from 0 to 1024
[   65.367661][ T4146] EXT4-fs: Ignoring removed bh option
[   65.396257][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.420292][   T30] audit: type=1400 audit(1791497070.660:811): avc:  denied  { write } for  pid=4145 comm="syz.1.181" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.598022][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.670879][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.158985][ T4164] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   66.910781][ T4174] FAULT_INJECTION: forcing a failure.
[   66.910781][ T4174] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   66.910932][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT(lazy) 
[   66.910957][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   66.910971][ T4174] Call Trace:
[   66.911024][ T4174]  <TASK>
[   66.911034][ T4174]  __dump_stack+0x1d/0x30
[   66.911061][ T4174]  dump_stack_lvl+0x95/0xd0
[   66.911086][ T4174]  dump_stack+0x15/0x1b
[   66.911110][ T4174]  should_fail_ex+0x262/0x280
[   66.911246][ T4174]  should_fail+0xb/0x20
[   66.911273][ T4174]  should_fail_usercopy+0x1a/0x20
[   66.911311][ T4174]  _copy_from_iter+0xcc/0xe70
[   66.911343][ T4174]  ? should_failslab+0x8c/0xb0
[   66.911470][ T4174]  ? file_tty_write+0x1d8/0x6a0
[   66.911503][ T4174]  ? kfree+0x351/0x3b0
[   66.911535][ T4174]  file_tty_write+0x339/0x6a0
[   66.911636][ T4174]  ? __pfx_tty_write+0x10/0x10
[   66.911666][ T4174]  tty_write+0x25/0x30
[   66.911745][ T4174]  vfs_write+0x57f/0x9a0
[   66.911781][ T4174]  ksys_write+0xdc/0x1a0
[   66.911903][ T4174]  __x64_sys_write+0x40/0x50
[   66.911936][ T4174]  x64_sys_call+0x154e/0x2550
[   66.912040][ T4174]  do_syscall_64+0x112/0x360
[   66.912221][ T4174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.912288][ T4174] RIP: 0033:0x7f0bb6d2e1d9
[   66.912308][ T4174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.912362][ T4174] RSP: 002b:00007f0bb5787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   66.912387][ T4174] RAX: ffffffffffffffda RBX: 00007f0bb6fb5fa0 RCX: 00007f0bb6d2e1d9
[   66.912404][ T4174] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000003
[   66.912419][ T4174] RBP: 00007f0bb5787090 R08: 0000000000000000 R09: 0000000000000000
[   66.912500][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.912514][ T4174] R13: 00007f0bb6fb6038 R14: 00007f0bb6fb5fa0 R15: 00007ffd5686d0f8
[   66.912532][ T4174]  </TASK>
[   67.124115][ T4179] loop1: detected capacity change from 0 to 512
[   67.155657][ T4179] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   67.155689][ T4179] FAT-fs (loop1): Filesystem has been set read-only
[   67.157908][ T4179] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   67.195989][ T4167] macsec1: entered promiscuous mode
[   67.196087][ T4167] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   67.196285][ T4167] macsec1: entered allmulticast mode
[   67.196302][ T4167] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   67.202155][ T4167] 8021q: adding VLAN 0 to HW filter on device macsec1
[   67.211268][ T4167] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[   67.248859][ T3507] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[   67.261516][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.373641][ T4183] netlink: 128 bytes leftover after parsing attributes in process `syz.2.191'.
[   67.418250][ T4102] syz.3.171 (4102) used greatest stack depth: 10248 bytes left
[   67.420876][ T4183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'.
[   67.584937][ T4193] loop2: detected capacity change from 0 to 512
[   67.796900][ T4190] loop5: detected capacity change from 0 to 7
[   67.879673][ T4199] loop3: detected capacity change from 0 to 1024
[   67.894464][ T4199] EXT4-fs: Ignoring removed bh option
[   67.924587][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.965570][   T30] kauditd_printk_skb: 117 callbacks suppressed
[   67.965589][   T30] audit: type=1400 audit(1791497073.200:929): avc:  denied  { write } for  pid=4198 comm="syz.3.196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.156000][ T4197] loop1: detected capacity change from 0 to 128
[   68.181946][ T4201] syz_tun: entered allmulticast mode
[   68.186414][   T30] audit: type=1400 audit(1791497073.420:930): avc:  denied  { mounton } for  pid=4200 comm="syz.2.197" path="/35/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   68.187282][   T30] audit: type=1400 audit(1791497073.430:931): avc:  denied  { mount } for  pid=4200 comm="syz.2.197" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   68.195398][ T4197] FAT-fs (loop1): bogus logical sector size 0
[   68.197752][ T4197] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   68.197983][ T4197] FAT-fs (loop1): Can't find a valid FAT filesystem
[   68.365961][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.405807][ T4200] syz_tun: left allmulticast mode
[   68.419113][ T4218] ip6t_srh: unknown srh invflags 4000
[   68.422634][   T30] audit: type=1400 audit(1791497073.660:932): avc:  denied  { append } for  pid=4205 comm="syz.4.198" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   68.487234][ T4219] netlink: 48 bytes leftover after parsing attributes in process `syz.3.199'.
[   68.540709][ T4197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25877 sclass=netlink_route_socket pid=4197 comm=syz.1.195
[   68.704567][   T30] audit: type=1326 audit(1791497073.940:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb6d2e1d9 code=0x7ffc0000
[   68.706010][   T30] audit: type=1326 audit(1791497073.940:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb6d2e1d9 code=0x7ffc0000
[   68.706049][   T30] audit: type=1326 audit(1791497073.940:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb6d2e1d9 code=0x7ffc0000
[   68.706103][   T30] audit: type=1326 audit(1791497073.940:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb6d2e1d9 code=0x7ffc0000
[   68.706130][   T30] audit: type=1326 audit(1791497073.940:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0bb6d2e1d9 code=0x7ffc0000
[   68.758501][   T30] audit: type=1326 audit(1791497073.980:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.1.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0bb6ceea0e code=0x7ffc0000
[   69.051899][ T4229] Zero length message leads to an empty skb
[   69.053908][ T4229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   69.053930][ T4229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   71.227688][ T4206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   71.674584][ T4248] netlink: 128 bytes leftover after parsing attributes in process `syz.3.207'.
[   72.140338][ T4256] loop3: detected capacity change from 0 to 512
[   72.418912][ T4258] loop2: detected capacity change from 0 to 1024
[   72.420915][ T4258] EXT4-fs: Ignoring removed bh option
[   72.459096][ T4258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.565255][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.689371][ T4271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.212'.
[   72.860058][ T4270] loop2: detected capacity change from 0 to 1024
[   72.875596][ T4270] EXT4-fs: Ignoring removed bh option
[   72.912617][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.159801][ T4267] loop4: detected capacity change from 0 to 512
[   73.212636][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.327284][ T4275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.214'.
[   73.928379][ T4296] loop3: detected capacity change from 0 to 512
[   73.928685][ T4296] EXT4-fs: Ignoring removed bh option
[   73.934058][ T4296] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   73.972838][ T4296] EXT4-fs (loop3): 1 truncate cleaned up
[   73.973396][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.043590][ T4301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.221'.
[   74.455276][ T4311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'.
[   74.672541][ T4313] loop2: detected capacity change from 0 to 512
[   74.843853][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.906554][ T4318] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   75.458302][ T4315] loop4: detected capacity change from 0 to 1024
[   75.479144][ T4315] EXT4-fs: Ignoring removed bh option
[   75.553430][ T4315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.566193][   T30] kauditd_printk_skb: 390 callbacks suppressed
[   75.566212][   T30] audit: type=1400 audit(1791497080.800:1329): avc:  denied  { write } for  pid=4314 comm="syz.4.225" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.974862][ T4338] netlink: 128 bytes leftover after parsing attributes in process `syz.2.233'.
[   75.980465][ T4338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'.
[   76.009244][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.042637][ T4332] loop3: detected capacity change from 0 to 128
[   76.094377][ T4339] loop0: detected capacity change from 0 to 512
[   76.094790][ T4339] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.094892][ T4339] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.112372][ T4339] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   76.116585][ T4339] EXT4-fs (loop0): 1 truncate cleaned up
[   76.117273][ T4339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.130892][   T30] audit: type=1400 audit(1791497081.360:1330): avc:  denied  { read } for  pid=4340 comm="syz.4.231" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   76.130976][   T30] audit: type=1400 audit(1791497081.360:1331): avc:  denied  { open } for  pid=4340 comm="syz.4.231" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   76.156428][   T30] audit: type=1400 audit(1791497081.390:1332): avc:  denied  { create } for  pid=4340 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   76.184257][   T30] audit: type=1400 audit(1791497081.410:1333): avc:  denied  { setopt } for  pid=4340 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   76.217944][   T30] audit: type=1326 audit(1791497081.440:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   76.218153][   T30] audit: type=1326 audit(1791497081.440:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   76.218180][   T30] audit: type=1326 audit(1791497081.440:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   76.222373][   T30] audit: type=1326 audit(1791497081.440:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   76.227765][ T4338] loop2: detected capacity change from 0 to 512
[   76.257937][   T30] audit: type=1326 audit(1791497081.490:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9f2cc4a62c code=0x7ffc0000
[   76.258118][ T4346] EXT4-fs: Ignoring removed bh option
[   76.376577][ T4332] FAT-fs (loop3): bogus logical sector size 0
[   76.377073][ T4346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.379819][ T4332] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   76.380290][ T4332] FAT-fs (loop3): Can't find a valid FAT filesystem
[   76.485446][ T4342] EXT4-fs: Ignoring removed nobh option
[   76.488922][ T4342] EXT4-fs (loop4): invalid inodes per group: 7
[   76.638177][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.849289][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.880389][ T4370] EXT4-fs: Ignoring removed bh option
[   76.880415][ T4370] EXT4-fs: Ignoring removed i_version option
[   76.885247][ T4332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25877 sclass=netlink_route_socket pid=4332 comm=syz.3.230
[   76.924332][ T4370] EXT4-fs (loop2): failed to initialize system zone (-117)
[   76.924483][ T4370] EXT4-fs (loop2): mount failed
[   76.958524][ T4370] =======================================================
[   76.958524][ T4370] WARNING: The mand mount option has been deprecated and
[   76.958524][ T4370]          and is ignored by this kernel. Remove the mand
[   76.958524][ T4370]          option from the mount to silence this warning.
[   76.958524][ T4370] =======================================================
[   77.098045][ T4363] syz_tun: entered allmulticast mode
[   77.100071][ T4363] FAULT_INJECTION: forcing a failure.
[   77.100071][ T4363] name fail_futex, interval 1, probability 0, space 0, times 1
[   77.100106][ T4363] CPU: 0 UID: 0 PID: 4363 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(lazy) 
[   77.100147][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   77.100162][ T4363] Call Trace:
[   77.100170][ T4363]  <TASK>
[   77.100180][ T4363]  __dump_stack+0x1d/0x30
[   77.100210][ T4363]  dump_stack_lvl+0x95/0xd0
[   77.100235][ T4363]  dump_stack+0x15/0x1b
[   77.100259][ T4363]  should_fail_ex+0x262/0x280
[   77.100319][ T4363]  should_fail+0xb/0x20
[   77.100347][ T4363]  get_futex_key+0x12d/0xb10
[   77.100377][ T4363]  futex_wait_setup+0x49/0x3e0
[   77.100397][ T4363]  ? __cgroup_account_cputime+0x83/0xa0
[   77.100536][ T4363]  ? update_se+0xc1/0x3b0
[   77.100566][ T4363]  __futex_wait+0xa9/0x260
[   77.100664][ T4363]  ? __pfx_futex_wake_mark+0x10/0x10
[   77.100795][ T4363]  futex_wait+0x98/0x1c0
[   77.100821][ T4363]  do_futex+0x391/0x460
[   77.100854][ T4363]  __se_sys_futex+0x2f6/0x370
[   77.100896][ T4363]  __x64_sys_futex+0x78/0x90
[   77.100925][ T4363]  x64_sys_call+0x22e2/0x2550
[   77.100950][ T4363]  do_syscall_64+0x112/0x360
[   77.100995][ T4363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.101022][ T4363] RIP: 0033:0x7f9f2cc8e1d9
[   77.101039][ T4363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.101057][ T4363] RSP: 002b:00007f9f2b6e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   77.101083][ T4363] RAX: ffffffffffffffda RBX: 00007f9f2cf15fa8 RCX: 00007f9f2cc8e1d9
[   77.101134][ T4363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f2cf15fa8
[   77.101150][ T4363] RBP: 00007f9f2cf15fa0 R08: 0000000000000000 R09: 0000000000000000
[   77.101164][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.101183][ T4363] R13: 00007f9f2cf16038 R14: 00007ffcc4f49cc0 R15: 00007ffcc4f49da8
[   77.101203][ T4363]  </TASK>
[   77.101960][ T4360] syz_tun: left allmulticast mode
[   77.169034][ T4383] set_capacity_and_notify: 5 callbacks suppressed
[   77.169054][ T4383] loop0: detected capacity change from 0 to 128
[   78.217960][ T4383] FAT-fs (loop0): bogus logical sector size 0
[   78.219599][ T4383] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   78.219841][ T4383] FAT-fs (loop0): Can't find a valid FAT filesystem
[   78.337630][ T4396] loop3: detected capacity change from 0 to 128
[   78.363963][ T4396] FAT-fs (loop3): bogus logical sector size 0
[   78.364483][ T4396] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   78.383949][ T4396] FAT-fs (loop3): Can't find a valid FAT filesystem
[   78.441591][ T4383] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.243'.
[   79.357056][ T4421] loop2: detected capacity change from 0 to 512
[   81.066580][ T4435] loop3: detected capacity change from 0 to 1024
[   81.075302][ T4435] EXT4-fs: Ignoring removed bh option
[   81.138190][ T4435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.206905][   T30] kauditd_printk_skb: 1042 callbacks suppressed
[   81.206924][   T30] audit: type=1400 audit(1791497086.430:2381): avc:  denied  { write } for  pid=4430 comm="syz.3.257" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.822405][   T30] audit: type=1326 audit(1791497087.060:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.825643][   T30] audit: type=1326 audit(1791497087.060:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.883288][   T30] audit: type=1326 audit(1791497087.120:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.883690][   T30] audit: type=1326 audit(1791497087.120:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.883808][   T30] audit: type=1326 audit(1791497087.120:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.884169][   T30] audit: type=1326 audit(1791497087.120:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   81.884402][   T30] audit: type=1326 audit(1791497087.120:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   82.070792][   T30] audit: type=1326 audit(1791497087.310:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   82.071581][   T30] audit: type=1326 audit(1791497087.310:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.4.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f2cc8e1d9 code=0x7ffc0000
[   82.160163][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.307995][ T4450] loop3: detected capacity change from 0 to 128
[   82.460606][ T4450] FAT-fs (loop3): bogus logical sector size 0
[   82.460796][ T4450] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   82.461034][ T4450] FAT-fs (loop3): Can't find a valid FAT filesystem
[   82.494294][ T4454] netlink: 128 bytes leftover after parsing attributes in process `syz.2.261'.
[   82.510479][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'.
[   82.645631][ T4457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25877 sclass=netlink_route_socket pid=4457 comm=syz.3.260
[   82.808671][ T4461] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   82.977481][ T4453] loop2: detected capacity change from 0 to 512
[   83.030836][ T4460] loop4: detected capacity change from 0 to 1024
[   83.035449][ T4460] EXT4-fs: Ignoring removed bh option
[   83.083932][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.496675][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.922111][ T4468] loop3: detected capacity change from 0 to 1024
[   83.931037][ T4468] EXT4-fs: Ignoring removed bh option
[   83.954318][ T4474] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   84.029069][ T4468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.353345][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.465700][ T4488] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   84.768318][ T4487] loop3: detected capacity change from 0 to 1024
[   84.775323][ T4487] EXT4-fs: Ignoring removed bh option
[   84.819160][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.025308][ T4494] loop0: detected capacity change from 0 to 1024
[   85.028025][ T4494] EXT4-fs: Ignoring removed oldalloc option
[   85.028050][ T4494] EXT4-fs: Ignoring removed orlov option
[   85.066226][ T4494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   85.066386][ T4494] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.189638][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.571614][ T4500] loop2: detected capacity change from 0 to 1024
[   85.583109][ T4500] EXT4-fs: Ignoring removed bh option
[   85.608446][ T4500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.644161][ T4498] syz_tun: entered allmulticast mode
[   85.645993][ T4498] FAULT_INJECTION: forcing a failure.
[   85.645993][ T4498] name fail_futex, interval 1, probability 0, space 0, times 0
[   85.646020][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(lazy) 
[   85.646044][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   85.646056][ T4498] Call Trace:
[   85.646133][ T4498]  <TASK>
[   85.646141][ T4498]  __dump_stack+0x1d/0x30
[   85.646170][ T4498]  dump_stack_lvl+0x95/0xd0
[   85.646244][ T4498]  dump_stack+0x15/0x1b
[   85.646297][ T4498]  should_fail_ex+0x262/0x280
[   85.646331][ T4498]  should_fail+0xb/0x20
[   85.646355][ T4498]  get_futex_key+0x12d/0xb10
[   85.646383][ T4498]  futex_wait_setup+0x49/0x3e0
[   85.646451][ T4498]  ? __cgroup_account_cputime+0x83/0xa0
[   85.646476][ T4498]  ? update_se+0xc1/0x3b0
[   85.646504][ T4498]  __futex_wait+0xa9/0x260
[   85.646524][ T4498]  ? __pfx_futex_wake_mark+0x10/0x10
[   85.646685][ T4498]  futex_wait+0x98/0x1c0
[   85.646713][ T4498]  do_futex+0x391/0x460
[   85.646823][ T4498]  __se_sys_futex+0x2f6/0x370
[   85.646868][ T4498]  __x64_sys_futex+0x78/0x90
[   85.646901][ T4498]  x64_sys_call+0x22e2/0x2550
[   85.647000][ T4498]  do_syscall_64+0x112/0x360
[   85.647029][ T4498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.647054][ T4498] RIP: 0033:0x7fc4de55e1d9
[   85.647075][ T4498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.647093][ T4498] RSP: 002b:00007fc4dcfb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   85.647117][ T4498] RAX: ffffffffffffffda RBX: 00007fc4de7e5fa8 RCX: 00007fc4de55e1d9
[   85.647133][ T4498] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc4de7e5fa8
[   85.647149][ T4498] RBP: 00007fc4de7e5fa0 R08: 0000000000000000 R09: 0000000000000000
[   85.647231][ T4498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.647246][ T4498] R13: 00007fc4de7e6038 R14: 00007fff9072c020 R15: 00007fff9072c108
[   85.647299][ T4498]  </TASK>
[   85.757111][ T4497] syz_tun: left allmulticast mode
[   85.779459][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   85.851180][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.005410][ T4512] netlink: 128 bytes leftover after parsing attributes in process `syz.2.275'.
[   86.011281][ T4512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'.
[   86.218809][   T30] kauditd_printk_skb: 312 callbacks suppressed
[   86.218909][   T30] audit: type=1326 audit(1791497091.460:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.223258][   T30] audit: type=1326 audit(1791497091.460:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.224773][   T30] audit: type=1326 audit(1791497091.460:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.226888][   T30] audit: type=1326 audit(1791497091.460:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.267862][   T30] audit: type=1326 audit(1791497091.510:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.269516][   T30] audit: type=1326 audit(1791497091.510:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.276904][   T30] audit: type=1326 audit(1791497091.520:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.281696][   T30] audit: type=1326 audit(1791497091.520:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.291800][   T30] audit: type=1326 audit(1791497091.530:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.300709][   T30] audit: type=1326 audit(1791497091.540:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.4.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f2cc4ea0e code=0x7ffc0000
[   86.513723][ T4508] loop2: detected capacity change from 0 to 512
[   86.598650][ T4519] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   87.019209][ T4536] loop0: detected capacity change from 0 to 512
[   87.024452][ T4518] loop3: detected capacity change from 0 to 32768
[   87.041826][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.041904][ T4536] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.046843][ T4518]  loop3: p1 p3 < p5 p6 >
[   87.081352][ T4534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.081470][ T4534] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.120147][ T4542] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.284: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0
[   87.282958][ T3307] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 3: comm syz-executor: path /46/bus: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0
[   87.332890][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.341735][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   87.343750][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   87.345182][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   87.352668][ T3586] udevd[3586]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   87.522791][ T4548] syz_tun: entered allmulticast mode
[   87.550757][ T4548] FAULT_INJECTION: forcing a failure.
[   87.550757][ T4548] name fail_futex, interval 1, probability 0, space 0, times 0
[   87.550806][ T4548] CPU: 0 UID: 0 PID: 4548 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(lazy) 
[   87.550836][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   87.550851][ T4548] Call Trace:
[   87.550898][ T4548]  <TASK>
[   87.550918][ T4548]  __dump_stack+0x1d/0x30
[   87.550984][ T4548]  dump_stack_lvl+0x95/0xd0
[   87.551009][ T4548]  dump_stack+0x15/0x1b
[   87.551111][ T4548]  should_fail_ex+0x262/0x280
[   87.551143][ T4548]  should_fail+0xb/0x20
[   87.551168][ T4548]  get_futex_key+0x12d/0xb10
[   87.551280][ T4548]  futex_wait_setup+0x49/0x3e0
[   87.551319][ T4548]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[   87.551345][ T4548]  ? hrtimer_active+0xe4/0x110
[   87.551430][ T4548]  __futex_wait+0xa9/0x260
[   87.551453][ T4548]  ? __pfx_futex_wake_mark+0x10/0x10
[   87.551478][ T4548]  futex_wait+0x98/0x1c0
[   87.551502][ T4548]  do_futex+0x391/0x460
[   87.551575][ T4548]  __se_sys_futex+0x2f6/0x370
[   87.551616][ T4548]  __x64_sys_futex+0x78/0x90
[   87.551734][ T4548]  x64_sys_call+0x22e2/0x2550
[   87.551772][ T4548]  do_syscall_64+0x112/0x360
[   87.551933][ T4548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.551960][ T4548] RIP: 0033:0x7f9f2cc8e1d9
[   87.551981][ T4548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.552001][ T4548] RSP: 002b:00007f9f2b6e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   87.552027][ T4548] RAX: ffffffffffffffda RBX: 00007f9f2cf15fa8 RCX: 00007f9f2cc8e1d9
[   87.552110][ T4548] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f2cf15fa8
[   87.552140][ T4548] RBP: 00007f9f2cf15fa0 R08: 0000000000000000 R09: 0000000000000000
[   87.552156][ T4548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.552194][ T4548] R13: 00007f9f2cf16038 R14: 00007ffcc4f49cc0 R15: 00007ffcc4f49da8
[   87.552217][ T4548]  </TASK>
[   87.558115][ T4547] syz_tun: left allmulticast mode
[   87.567994][ T4556] netlink: 128 bytes leftover after parsing attributes in process `syz.1.289'.
[   87.688367][ T4554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'.
[   87.945441][ T4531] syz.2.282 (4531) used greatest stack depth: 10120 bytes left
[   88.219504][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.257817][ T4559] set_capacity_and_notify: 1 callbacks suppressed
[   88.257837][ T4559] loop0: detected capacity change from 0 to 128
[   88.269803][ T4561] capability: warning: `syz.2.291' uses 32-bit capabilities (legacy support in use)
[   88.285852][ T4561] loop2: detected capacity change from 0 to 128
[   88.344021][ T4559] FAT-fs (loop0): bogus logical sector size 0
[   88.344680][ T4559] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   88.344711][ T4559] FAT-fs (loop0): Can't find a valid FAT filesystem
[   88.370910][ T4566] loop1: detected capacity change from 0 to 512
[   88.603178][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.603288][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.677958][ T4581] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.290'.
[   89.013273][ T4583] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20005
[   89.123896][ T4597] SELinux:  Context system_u:object is not valid (left unmapped).
[   89.781640][ T4611] FAULT_INJECTION: forcing a failure.
[   89.781640][ T4611] name failslab, interval 1, probability 0, space 0, times 0
[   89.781753][ T4611] CPU: 1 UID: 0 PID: 4611 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(lazy) 
[   89.781802][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   89.781816][ T4611] Call Trace:
[   89.781826][ T4611]  <TASK>
[   89.781836][ T4611]  __dump_stack+0x1d/0x30
[   89.781867][ T4611]  dump_stack_lvl+0x95/0xd0
[   89.781893][ T4611]  dump_stack+0x15/0x1b
[   89.781913][ T4611]  should_fail_ex+0x262/0x280
[   89.781971][ T4611]  should_failslab+0x8c/0xb0
[   89.782013][ T4611]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[   89.782054][ T4611]  ? __request_module+0x1df/0x3c0
[   89.782080][ T4611]  ? __request_module+0x1df/0x3c0
[   89.782169][ T4611]  kstrdup+0x3e/0xd0
[   89.782192][ T4611]  __request_module+0x1df/0x3c0
[   89.782215][ T4611]  sock_load_diag_module+0x9b/0xe0
[   89.782299][ T4611]  inet_diag_cmd_exact+0x216/0x3a0
[   89.782356][ T4611]  ? preempt_schedule_irq+0x2c/0x50
[   89.782387][ T4611]  ? raw_irqentry_exit_cond_resched+0x49/0x60
[   89.782433][ T4611]  ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40
[   89.782531][ T4611]  ? irqentry_exit+0x7d/0x610
[   89.782553][ T4611]  ? _raw_spin_lock+0x53/0xa0
[   89.782578][ T4611]  inet_diag_handler_cmd+0x117/0x140
[   89.782724][ T4611]  ? rcu_read_unlock_special+0xa0/0x210
[   89.782800][ T4611]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[   89.782835][ T4611]  sock_diag_rcv_msg+0x288/0x2c0
[   89.782911][ T4611]  netlink_rcv_skb+0x11e/0x220
[   89.782933][ T4611]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[   89.782977][ T4611]  sock_diag_rcv+0x1c/0x30
[   89.783039][ T4611]  netlink_unicast+0x5a9/0x680
[   89.783075][ T4611]  netlink_sendmsg+0x5be/0x6f0
[   89.783101][ T4611]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.783162][ T4611]  ____sys_sendmsg+0x532/0x580
[   89.783190][ T4611]  ___sys_sendmsg+0x195/0x1e0
[   89.783227][ T4611]  __x64_sys_sendmsg+0xd4/0x160
[   89.783259][ T4611]  x64_sys_call+0x22ab/0x2550
[   89.783368][ T4611]  do_syscall_64+0x112/0x360
[   89.783393][ T4611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.783413][ T4611] RIP: 0033:0x7f9f2cc8e1d9
[   89.783442][ T4611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.783520][ T4611] RSP: 002b:00007f9f2b6e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.783546][ T4611] RAX: ffffffffffffffda RBX: 00007f9f2cf15fa0 RCX: 00007f9f2cc8e1d9
[   89.783562][ T4611] RDX: 0000000020000040 RSI: 0000200000000080 RDI: 0000000000000003
[   89.783575][ T4611] RBP: 00007f9f2b6e7090 R08: 0000000000000000 R09: 0000000000000000
[   89.783627][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.783643][ T4611] R13: 00007f9f2cf16038 R14: 00007f9f2cf15fa0 R15: 00007ffcc4f49da8
[   89.783664][ T4611]  </TASK>
[   90.200100][ T4621] loop2: detected capacity change from 0 to 512
[   90.203160][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.315'.
[   90.211662][ T4630] loop4: detected capacity change from 0 to 128
[   90.229696][ T4621] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.311: Unrecognised inode hash code 255
[   90.229726][ T4621] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.311: Corrupt directory, running e2fsck is recommended
[   90.281457][ T4621] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   90.281509][ T4621] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.311: corrupted in-inode xattr: invalid ea_ino
[   90.281559][ T4621] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   90.284842][ T4635] syz.3.316 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   90.285346][ T4621] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.311: couldn't read orphan inode 15 (err -117)
[   90.285376][ T4621] loop2: lost filesystem error report for type 5 error -117
[   90.286041][ T4621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.461107][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.482043][ T4644] netlink: 76 bytes leftover after parsing attributes in process `syz.3.316'.
[   90.568078][ T4646] netlink: 128 bytes leftover after parsing attributes in process `syz.2.319'.
[   90.636381][ T4646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'.
[   90.660385][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'.
[   90.952357][ T4646] loop2: detected capacity change from 0 to 512
[   91.227178][   T30] kauditd_printk_skb: 247 callbacks suppressed
[   91.227200][   T30] audit: type=1400 audit(1791497096.450:2960): avc:  denied  { mount } for  pid=4665 comm="syz.4.326" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   91.303253][ T4668] loop2: detected capacity change from 0 to 512
[   91.303535][ T4668] ext4: Unknown parameter 'subj_user'
[   91.572029][   T30] audit: type=1400 audit(1791497096.810:2961): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   91.640942][ T4668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'.
[   91.733125][   T30] audit: type=1400 audit(1791497096.950:2962): avc:  denied  { remount } for  pid=4669 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   91.733188][   T30] audit: type=1400 audit(1791497096.950:2963): avc:  denied  { bind } for  pid=4669 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   91.930755][ T4676] loop4: detected capacity change from 0 to 1024
[   92.052032][ T4676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   92.052139][ T4676] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.128334][ T4684] sctp: [Deprecated]: syz.3.331 (pid 4684) Use of int in max_burst socket option deprecated.
[   92.128334][ T4684] Use struct sctp_assoc_value instead
[   92.156401][   T70] IPVS: starting estimator thread 0...
[   92.230295][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   92.265150][   T30] audit: type=1400 audit(1791497097.470:2964): avc:  denied  { listen } for  pid=4683 comm="syz.3.331" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   92.339544][ T4688] IPVS: using max 2496 ests per chain, 124800 per kthread
[   92.424100][ T4694] loop2: detected capacity change from 0 to 512
[   92.528295][ T4694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.528468][ T4694] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.539289][   T30] audit: type=1400 audit(1791497097.780:2965): avc:  denied  { write } for  pid=4687 comm="syz.2.332" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.539416][   T30] audit: type=1400 audit(1791497097.780:2966): avc:  denied  { add_name } for  pid=4687 comm="syz.2.332" name="blkio.bfq.io_service_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.791440][   T30] audit: type=1400 audit(1791497098.030:2967): avc:  denied  { create } for  pid=4697 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   92.932492][   T30] audit: type=1400 audit(1791497098.170:2968): avc:  denied  { name_bind } for  pid=4685 comm="syz.0.330" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   93.090459][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.155507][ T4711] netlink: 128 bytes leftover after parsing attributes in process `syz.0.335'.
[   93.160795][ T4711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'.
[   93.203932][ T4701] loop4: detected capacity change from 0 to 512
[   93.276776][ T4701] EXT4-fs: journaled quota format not specified
[   93.315630][ T4706] loop3: detected capacity change from 0 to 1024
[   93.367885][ T4706] EXT4-fs: Ignoring removed bh option
[   93.404388][ T4706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.420821][   T30] audit: type=1400 audit(1791497098.650:2969): avc:  denied  { write } for  pid=4705 comm="syz.3.336" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   93.450153][ T4704] loop0: detected capacity change from 0 to 512
[   93.601348][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.602625][ T4722] FAULT_INJECTION: forcing a failure.
[   93.602625][ T4722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.602656][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz.0.339 Not tainted syzkaller #0 PREEMPT(lazy) 
[   93.602684][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   93.602696][ T4722] Call Trace:
[   93.602703][ T4722]  <TASK>
[   93.602710][ T4722]  __dump_stack+0x1d/0x30
[   93.602747][ T4722]  dump_stack_lvl+0x95/0xd0
[   93.602772][ T4722]  dump_stack+0x15/0x1b
[   93.602795][ T4722]  should_fail_ex+0x262/0x280
[   93.602848][ T4722]  should_fail+0xb/0x20
[   93.602874][ T4722]  should_fail_usercopy+0x1a/0x20
[   93.602909][ T4722]  _copy_from_user+0x1c/0xb0
[   93.602959][ T4722]  kstrtouint_from_user+0x69/0xf0
[   93.602985][ T4722]  ? 0xffffffff81000000
[   93.603002][ T4722]  ? avc_policy_seqno+0x15/0x30
[   93.603081][ T4722]  proc_fail_nth_write+0x50/0x160
[   93.603108][ T4722]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   93.603214][ T4722]  vfs_write+0x254/0x9a0
[   93.603261][ T4722]  ? __fget_files+0x184/0x1c0
[   93.603286][ T4722]  ? mutex_lock+0x57/0x90
[   93.603322][ T4722]  ksys_write+0xdc/0x1a0
[   93.603430][ T4722]  __x64_sys_write+0x40/0x50
[   93.603462][ T4722]  x64_sys_call+0x154e/0x2550
[   93.603499][ T4722]  do_syscall_64+0x112/0x360
[   93.603526][ T4722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.603590][ T4722] RIP: 0033:0x7f65b56dea0e
[   93.603609][ T4722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   93.603629][ T4722] RSP: 002b:00007f65b4176fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   93.603652][ T4722] RAX: ffffffffffffffda RBX: 00007f65b41776c0 RCX: 00007f65b56dea0e
[   93.603723][ T4722] RDX: 0000000000000001 RSI: 00007f65b41770a0 RDI: 0000000000000004
[   93.603738][ T4722] RBP: 00007f65b4177090 R08: 0000000000000000 R09: 0000000000000000
[   93.603752][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.603766][ T4722] R13: 00007f65b59a6038 R14: 00007f65b59a5fa0 R15: 00007ffc03b04768
[   93.603854][ T4722]  </TASK>
[   93.665195][ T4724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.341'.
[   93.752316][ T4728] ip6gre1: entered allmulticast mode
[   93.755845][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.995839][ T4743] WARNING! power/level is deprecated; use power/control instead
[   94.123399][ T4749] loop2: detected capacity change from 0 to 128
[   94.145900][ T4749] FAT-fs (loop2): bogus number of reserved sectors
[   94.145928][ T4749] FAT-fs (loop2): Can't find a valid FAT filesystem
[   94.409439][ T4754] netlink: 128 bytes leftover after parsing attributes in process `syz.1.350'.
[   94.471439][ T4754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'.
[   94.723669][ T4754] loop1: detected capacity change from 0 to 512
[   94.738977][ T4757] loop0: detected capacity change from 0 to 128
[   94.779952][ T4757] FAT-fs (loop0): bogus logical sector size 0
[   94.780111][ T4757] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   94.781831][ T4757] FAT-fs (loop0): Can't find a valid FAT filesystem
[   94.813656][ T4759] loop3: detected capacity change from 0 to 1024
[   94.851028][ T4759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.923839][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'.
[   94.928034][ T4767] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.351'.
[   94.971978][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.353'.
[   95.067222][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.114984][ T4776] loop0: detected capacity change from 0 to 164
[   95.115548][ T4773] loop2: detected capacity change from 0 to 1024
[   95.139959][ T4773] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   95.161819][ T4773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.347345][ T4787] loop3: detected capacity change from 0 to 1024
[   95.350991][ T4787] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   95.351048][ T4787] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   95.389698][ T4787] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   95.389782][ T4787] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.390460][ T4787] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.359: Inode bitmap for bg 0 marked uninitialized
[   95.390499][ T4787] loop3: lost filesystem error report for type 5 error -117
[   95.390658][ T4787] EXT4-fs (loop3): Remounting filesystem read-only
[   95.391139][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.458209][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.556348][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.838760][ T4798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[   96.832997][ T4814] loop2: detected capacity change from 0 to 128
[   96.856769][ T4808] syz_tun: entered allmulticast mode
[   96.885730][ T4808] FAULT_INJECTION: forcing a failure.
[   96.885730][ T4808] name fail_futex, interval 1, probability 0, space 0, times 0
[   96.885765][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: syz.0.364 Not tainted syzkaller #0 PREEMPT(lazy) 
[   96.885866][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.885880][ T4808] Call Trace:
[   96.885889][ T4808]  <TASK>
[   96.885899][ T4808]  __dump_stack+0x1d/0x30
[   96.885928][ T4808]  dump_stack_lvl+0x95/0xd0
[   96.885951][ T4808]  dump_stack+0x15/0x1b
[   96.885974][ T4808]  should_fail_ex+0x262/0x280
[   96.886006][ T4808]  should_fail+0xb/0x20
[   96.886033][ T4808]  get_futex_key+0x12d/0xb10
[   96.886132][ T4808]  futex_wait_setup+0x49/0x3e0
[   96.886156][ T4808]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[   96.886179][ T4808]  ? hrtimer_active+0xe4/0x110
[   96.886220][ T4808]  __futex_wait+0xa9/0x260
[   96.886246][ T4808]  ? __pfx_futex_wake_mark+0x10/0x10
[   96.886302][ T4808]  futex_wait+0x98/0x1c0
[   96.886329][ T4808]  do_futex+0x391/0x460
[   96.886364][ T4808]  __se_sys_futex+0x2f6/0x370
[   96.886460][ T4808]  __x64_sys_futex+0x78/0x90
[   96.886494][ T4808]  x64_sys_call+0x22e2/0x2550
[   96.886523][ T4808]  do_syscall_64+0x112/0x360
[   96.886611][ T4808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.886643][ T4808] RIP: 0033:0x7f65b571e1d9
[   96.886663][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.886753][ T4808] RSP: 002b:00007f65b41770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   96.886778][ T4808] RAX: ffffffffffffffda RBX: 00007f65b59a5fa8 RCX: 00007f65b571e1d9
[   96.886848][ T4808] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f65b59a5fa8
[   96.886864][ T4808] RBP: 00007f65b59a5fa0 R08: 0000000000000000 R09: 0000000000000000
[   96.886914][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.887009][ T4808] R13: 00007f65b59a6038 R14: 00007ffc03b04680 R15: 00007ffc03b04768
[   96.887031][ T4808]  </TASK>
[   96.917612][ T4807] syz_tun: left allmulticast mode
[   96.929670][ T4814] FAT-fs (loop2): bogus logical sector size 0
[   96.930061][ T4814] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   96.930090][ T4814] FAT-fs (loop2): Can't find a valid FAT filesystem
[   97.143651][ T4814] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.367'.
[   97.355262][ T4837] netlink: 128 bytes leftover after parsing attributes in process `syz.4.372'.
[   97.586905][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.718141][ T4842] EXT4-fs: Ignoring removed bh option
[   97.751264][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.773419][   T30] kauditd_printk_skb: 347 callbacks suppressed
[   97.773438][   T30] audit: type=1400 audit(1791497103.010:3317): avc:  denied  { write } for  pid=4841 comm="syz.0.375" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.869659][ T4834] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   97.925016][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.543263][ T4860] FAT-fs (loop4): bogus logical sector size 0
[   98.555844][ T4860] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   98.556490][ T4860] FAT-fs (loop4): Can't find a valid FAT filesystem
[   98.691168][ T4860] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.380'.
[   98.767176][ T4875] FAULT_INJECTION: forcing a failure.
[   98.767176][ T4875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.767256][ T4875] CPU: 1 UID: 0 PID: 4875 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT(lazy) 
[   98.767284][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   98.767297][ T4875] Call Trace:
[   98.767383][ T4875]  <TASK>
[   98.767392][ T4875]  __dump_stack+0x1d/0x30
[   98.767421][ T4875]  dump_stack_lvl+0x95/0xd0
[   98.767445][ T4875]  dump_stack+0x15/0x1b
[   98.767494][ T4875]  should_fail_ex+0x262/0x280
[   98.767581][ T4875]  should_fail+0xb/0x20
[   98.767606][ T4875]  should_fail_usercopy+0x1a/0x20
[   98.767744][ T4875]  _copy_from_user+0x1c/0xb0
[   98.767776][ T4875]  __sys_bpf+0x1e2/0xc30
[   98.767878][ T4875]  ? get_pid_task+0x92/0xc0
[   98.767921][ T4875]  ? vfs_write+0x810/0x9a0
[   98.767973][ T4875]  __x64_sys_bpf+0x69/0x80
[   98.768002][ T4875]  x64_sys_call+0xf26/0x2550
[   98.768032][ T4875]  do_syscall_64+0x112/0x360
[   98.768062][ T4875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.768149][ T4875] RIP: 0033:0x7f9f2cc8e1d9
[   98.768170][ T4875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.768191][ T4875] RSP: 002b:00007f9f2b6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   98.768253][ T4875] RAX: ffffffffffffffda RBX: 00007f9f2cf15fa0 RCX: 00007f9f2cc8e1d9
[   98.768270][ T4875] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[   98.768287][ T4875] RBP: 00007f9f2b6e7090 R08: 0000000000000000 R09: 0000000000000000
[   98.768355][ T4875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.768368][ T4875] R13: 00007f9f2cf16038 R14: 00007f9f2cf15fa0 R15: 00007ffcc4f49da8
[   98.768390][ T4875]  </TASK>
[   98.839402][   T30] audit: type=1400 audit(1791497104.070:3318): avc:  denied  { write } for  pid=4877 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   98.955694][ T4871] set_capacity_and_notify: 3 callbacks suppressed
[   98.955725][ T4871] loop3: detected capacity change from 0 to 1024
[   98.969047][ T4871] EXT4-fs: Ignoring removed bh option
[   98.998425][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.055116][   T30] audit: type=1400 audit(1791497104.290:3319): avc:  denied  { write } for  pid=4868 comm="syz.3.383" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.148974][ T4873] syz_tun: entered allmulticast mode
[   99.165411][ T4873] FAULT_INJECTION: forcing a failure.
[   99.165411][ T4873] name fail_futex, interval 1, probability 0, space 0, times 0
[   99.165445][ T4873] CPU: 0 UID: 0 PID: 4873 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(lazy) 
[   99.165501][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   99.165534][ T4873] Call Trace:
[   99.165542][ T4873]  <TASK>
[   99.165552][ T4873]  __dump_stack+0x1d/0x30
[   99.165581][ T4873]  dump_stack_lvl+0x95/0xd0
[   99.165606][ T4873]  dump_stack+0x15/0x1b
[   99.165630][ T4873]  should_fail_ex+0x262/0x280
[   99.165686][ T4873]  should_fail+0xb/0x20
[   99.165712][ T4873]  get_futex_key+0x12d/0xb10
[   99.165748][ T4873]  futex_wait_setup+0x49/0x3e0
[   99.165774][ T4873]  ? __rcu_read_unlock+0x4e/0x70
[   99.165873][ T4873]  __futex_wait+0xa9/0x260
[   99.165896][ T4873]  ? __pfx_futex_wake_mark+0x10/0x10
[   99.165961][ T4873]  futex_wait+0x98/0x1c0
[   99.165989][ T4873]  do_futex+0x391/0x460
[   99.166083][ T4873]  __se_sys_futex+0x2f6/0x370
[   99.166170][ T4873]  __x64_sys_futex+0x78/0x90
[   99.166211][ T4873]  x64_sys_call+0x22e2/0x2550
[   99.166356][ T4873]  do_syscall_64+0x112/0x360
[   99.166421][ T4873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.166446][ T4873] RIP: 0033:0x7f65b571e1d9
[   99.166464][ T4873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.166557][ T4873] RSP: 002b:00007f65b41770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   99.166582][ T4873] RAX: ffffffffffffffda RBX: 00007f65b59a5fa8 RCX: 00007f65b571e1d9
[   99.166596][ T4873] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f65b59a5fa8
[   99.166609][ T4873] RBP: 00007f65b59a5fa0 R08: 0000000000000000 R09: 0000000000000000
[   99.166670][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.166684][ T4873] R13: 00007f65b59a6038 R14: 00007ffc03b04680 R15: 00007ffc03b04768
[   99.166705][ T4873]  </TASK>
[   99.175750][ T4872] syz_tun: left allmulticast mode
[   99.203861][ T4889] netlink: 128 bytes leftover after parsing attributes in process `syz.1.389'.
[   99.208207][ T4889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'.
[   99.265392][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.300761][ T4891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'.
[   99.345318][ T4894] loop1: detected capacity change from 0 to 512
[   99.483662][   T30] audit: type=1400 audit(1791497104.720:3320): avc:  denied  { recv } for  pid=4900 comm="syz.2.394" saddr=172.20.20.170 src=20002 daddr=172.20.20.170 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   99.641311][ T4899] loop1: detected capacity change from 0 to 1024
[   99.644513][ T4899] EXT4-fs: Ignoring removed bh option
[   99.660065][   T30] audit: type=1400 audit(1791497104.890:3321): avc:  denied  { mount } for  pid=4904 comm="syz.2.396" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   99.690808][   T30] audit: type=1400 audit(1791497104.900:3322): avc:  denied  { search } for  pid=4904 comm="syz.2.396" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   99.691780][   T30] audit: type=1400 audit(1791497104.930:3323): avc:  denied  { read write } for  pid=4904 comm="syz.2.396" name="set_event" dev="tracefs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   99.692454][   T30] audit: type=1400 audit(1791497104.930:3324): avc:  denied  { open } for  pid=4904 comm="syz.2.396" path="/80/trace/set_event" dev="tracefs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   99.695713][ T4899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.812881][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[   99.812906][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[   99.812920][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   99.847894][   T30] audit: type=1400 audit(1791497105.060:3325): avc:  denied  { create } for  pid=4906 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.848006][   T30] audit: type=1400 audit(1791497105.060:3326): avc:  denied  { bind } for  pid=4906 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  100.362217][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  100.440386][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.592906][ T4907] loop3: detected capacity change from 0 to 512
[  100.743415][ T4920] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  102.575608][ T4920] ==================================================================
[  102.575640][ T4920] BUG: KCSAN: data-race in probe_sched_switch / tracing_start_sched_switch
[  102.575665][ T4920] 
[  102.575673][ T4920] write to 0xffffffff89601220 of 4 bytes by task 4905 on cpu 0:
[  102.575690][ T4920]  tracing_start_sched_switch+0x8d/0x200
[  102.575711][ T4920]  tracing_start_cmdline_record+0x13/0x20
[  102.575730][ T4920]  __ftrace_event_enable_disable+0x203/0x4b0
[  102.575761][ T4920]  __ftrace_set_clr_event_nolock+0x39e/0x820
[  102.575782][ T4920]  ftrace_set_clr_event+0x2a6/0x340
[  102.575812][ T4920]  ftrace_event_write+0x170/0x1d0
[  102.575834][ T4920]  vfs_write+0x254/0x9a0
[  102.575861][ T4920]  ksys_write+0xdc/0x1a0
[  102.575888][ T4920]  __x64_sys_write+0x40/0x50
[  102.575916][ T4920]  x64_sys_call+0x154e/0x2550
[  102.575949][ T4920]  do_syscall_64+0x112/0x360
[  102.575974][ T4920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.575995][ T4920] 
[  102.576003][ T4920] read to 0xffffffff89601220 of 4 bytes by task 4920 on cpu 1:
[  102.576020][ T4920]  probe_sched_switch+0x46/0xa0
[  102.576040][ T4920]  __traceiter_sched_switch+0x3f/0x60
[  102.576065][ T4920]  __schedule+0xc34/0xd20
[  102.576089][ T4920]  schedule+0x5b/0xa0
[  102.576113][ T4920]  schedule_timeout+0x53/0x180
[  102.576137][ T4920]  unix_wait_for_peer+0x135/0x1a0
[  102.576164][ T4920]  unix_dgram_sendmsg+0x8c2/0x1030
[  102.576207][ T4920]  ____sys_sendmsg+0x532/0x580
[  102.576230][ T4920]  ___sys_sendmsg+0x195/0x1e0
[  102.576252][ T4920]  __sys_sendmmsg+0x185/0x320
[  102.576274][ T4920]  __x64_sys_sendmmsg+0x57/0x70
[  102.576298][ T4920]  x64_sys_call+0x1fb4/0x2550
[  102.576322][ T4920]  do_syscall_64+0x112/0x360
[  102.576344][ T4920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.576364][ T4920] 
[  102.576370][ T4920] value changed: 0x00000537 -> 0x00000538
[  102.576383][ T4920] 
[  102.576388][ T4920] Reported by Kernel Concurrency Sanitizer on:
[  102.576402][ T4920] CPU: 1 UID: 0 PID: 4920 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(lazy) 
[  102.576427][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  102.576441][ T4920] ==================================================================
[  104.510029][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  104.510107][   T30] audit: type=1400 audit(1791497109.750:3332): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  105.667014][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!