last executing test programs:

6m6.938431862s ago: executing program 32 (id=4289):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = gettid()
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x40, @remote, @local, {[], {{0x4e23, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x1001, 0x0, 0x3, {[@sack={0x5, 0xe, [0x3fb, 0x10, 0x7]}]}}}}}}}}, 0x0)

5m30.236415767s ago: executing program 33 (id=5156):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)

5m27.311752566s ago: executing program 6 (id=5233):
r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x3000004, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0x8, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)

5m26.436451615s ago: executing program 6 (id=5253):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000500"/18, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
write(r0, &(0x7f0000000240)="ffffffffffff0011223344554305000f32001847c653ce1bed7d0e9c36907b618be9000000e1", 0xffb7)

5m25.825558188s ago: executing program 6 (id=5259):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000))
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
listen(r1, 0x4)

5m25.533466797s ago: executing program 6 (id=5265):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)="0d8a58bc293729d4559402ab53f50f79563908d7766f1886b897af517ca374602dc8e0cd7e844eba0ac7968f2680", 0x2e}, {0x0}, {&(0x7f0000000480)="b3e50e70e0b7e0b73bdb108b112f7ece59c40e81ffb125f8465efa23ba0872fcf9c990834c306d4ca240cba73fb3c54278ec78ea95a330687509b64e433947f532c12720c8f617c9036a2bdf2e8cf3517ed2d568c0718706e0c77893f0e07c7d86cbb429093f7bd6ddadfbac143cc5f63a899ad9d466b9dfb25570891bf0d22495588e62c773508f9e107df88174f589534b73eb0812514e21d060103b0d06e6f0e0182affc01c4c32beee48d9e8acd4ffc2170eaac61329344ea9b783e9a472f194136a2a64326a9de5550ec59a5e", 0xcf}, {&(0x7f00000002c0)="b471094ee0077f834519eb79d5404134cc218d35c0371ebaf3de8d6cce2c8b5a2776873c265a33ba1c813e3d08517f48494791fd", 0x34}, {&(0x7f00000005c0)="394daa22ebc6d7f91a875e1e7b116d4b709f80bbd9bb1d391a1c53bdcb217ce27c85beecd1c9b79944945c4e109f099ab94e679cc1c26749352862d69d4013ec5e32fe979a9af35bfabca9d969e4c0da4db8be83a9c1926fd37fc89f55fd358e3ebfc1ac73b50385933231809763c32541eee51d0dd1a619e58e7efba4759a9f45f4d6c6938e15496d91932142bea8d3c4ccb7542bd9f5f6ed7e576fef6b8722f6a824800e", 0xa5}], 0x5, 0x2, 0x800008)

5m25.365112244s ago: executing program 6 (id=5270):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00c\x000\x00'], &(0x7f0000000300)='syzkaller\x00', 0x1, 0xdd, &(0x7f0000000340)=""/221, 0x0, 0x20}, 0x94)

5m25.284844723s ago: executing program 6 (id=5274):
syz_clone(0x5000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x1)

5m10.148912788s ago: executing program 34 (id=5274):
syz_clone(0x5000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x1)

3m44.010780838s ago: executing program 0 (id=6879):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000600)='./proc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f00000006c0)='10', 0x2)
r1 = syz_create_resource$futex(0x0)
r2 = syz_create_resource$futex(&(0x7f0000000780)=0x2)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex(r1, 0xb, 0x1, 0x0, r2, 0x1)

3m44.008496679s ago: executing program 0 (id=6881):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='100', 0x3)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket$inet6(0xa, 0x3, 0xff)
lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1}, './proc\x00'})
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x10, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})

3m43.947069805s ago: executing program 0 (id=6883):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r1, 0x2000009)
write$cgroup_int(r0, &(0x7f0000000600)=0x7, 0x12)
write$binfmt_script(r1, &(0x7f0000000640), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000680)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})

3m43.828792237s ago: executing program 0 (id=6886):
r0 = syz_mount_image$ext4(&(0x7f0000002bc0)='ext4\x00', &(0x7f0000002c00)='./file2\x00', 0x2000410, &(0x7f0000002c40)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000002c80)="$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")
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000003480)='./file1\x00', 0x80042, 0x121)
mkdirat(0xffffffffffffff9c, &(0x7f00000034c0)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000003500)='./proc\x00', &(0x7f0000003540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000003580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write$cgroup_int(r2, &(0x7f00000035c0)=0x8, 0x12)
getsockname$packet(r0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000003600)='\"', 0xe7d, 0xe7c)

3m43.59931872s ago: executing program 0 (id=6892):
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = dup(r4)
inotify_rm_watch(r5, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8)

3m43.243696746s ago: executing program 0 (id=6896):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
write$cgroup_int(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000640), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000680)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})

3m43.168876004s ago: executing program 35 (id=6896):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000100)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
write$cgroup_int(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000640), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000680)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})

3m30.389794328s ago: executing program 8 (id=7006):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)

3m30.041412214s ago: executing program 8 (id=7007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100', 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r4=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18}, r4}}, 0x30)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002b540ac3033048bce2d181bd7000fbdbdf258800000008000300", @ANYBLOB="0e003300c4006b00ffffffffffff00000a00060008"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000840)='GPL\x00', 0x8, 0x1002, &(0x7f0000000880)=""/4098, 0x40f00}, 0x94)

3m29.793381039s ago: executing program 8 (id=7008):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

3m29.267179273s ago: executing program 8 (id=7009):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3m29.173795553s ago: executing program 8 (id=7013):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0)
write(r0, &(0x7f0000000280), 0xffffff4a)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)})
syz_open_pts(0xffffffffffffffff, 0x101482)
close_range(r3, 0xffffffffffffffff, 0x0)

3m27.670442856s ago: executing program 8 (id=7022):
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000680), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000006c0), 0x4000087, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000007c0)="000000000000000002", 0x0}, 0x50)

3m23.795430761s ago: executing program 5 (id=7042):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)

3m23.722626489s ago: executing program 5 (id=7046):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18}}}, 0x30)

3m23.662322295s ago: executing program 5 (id=7047):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4)
getsockname$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

3m23.594713742s ago: executing program 5 (id=7048):
r0 = syz_mount_image$ext4(&(0x7f0000002bc0)='ext4\x00', &(0x7f0000002c00)='./file2\x00', 0x2000410, &(0x7f0000002c40)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000002c80)="$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")
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000003480)='./file1\x00', 0x80042, 0x121)
mkdirat(0xffffffffffffff9c, &(0x7f00000034c0)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000003500)='./proc\x00', &(0x7f0000003540)='proc\x00', 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000035c0)=0x8, 0x12)
getsockname$packet(r0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000003600)='\"', 0xe7d, 0xe7c)

3m22.103309004s ago: executing program 5 (id=7053):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000640)={r2, 0x20e, 0x20}, 0x0, 0x0, 0x0)

3m21.590295316s ago: executing program 5 (id=7060):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff94, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10)

3m21.504771555s ago: executing program 36 (id=7060):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff94, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10)

3m15.335016965s ago: executing program 3 (id=7077):
pipe2(0x0, 0x0)
unshare(0x24020400)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r0, 0x0)

3m15.127977136s ago: executing program 3 (id=7078):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x4, 0x436, &(0x7f0000001400)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000140)=@un=@abs, 0x80, 0x0}, 0xe8f}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x2, 0x2022, 0x0)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)="ee2ab8", 0x3}], 0x1}}], 0x1, 0x80)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000016c0)={r0, r1})

3m13.980193803s ago: executing program 3 (id=7080):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/ip_vs_app\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000d80)=""/100, 0x64, 0x3f)

3m12.428088841s ago: executing program 37 (id=7022):
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000680), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000006c0), 0x4000087, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000007c0)="000000000000000002", 0x0}, 0x50)

3m10.962364711s ago: executing program 3 (id=7085):
r0 = syz_mount_image$ext4(&(0x7f0000002bc0)='ext4\x00', &(0x7f0000002c00)='./file2\x00', 0x2000410, &(0x7f0000002c40)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000002c80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000003480)='./file1\x00', 0x80042, 0x121)
mkdirat(0xffffffffffffff9c, &(0x7f00000034c0)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000003500)='./proc\x00', &(0x7f0000003540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000003580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write$cgroup_int(r2, &(0x7f00000035c0)=0x8, 0x12)
getsockname$packet(r0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000003600)='\"', 0xe7d, 0xe7c)

3m10.245829874s ago: executing program 3 (id=7086):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)

3m9.30426058s ago: executing program 3 (id=7089):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

3m7.592789505s ago: executing program 38 (id=7089):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

5.460991962s ago: executing program 9 (id=8573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='27', 0x2)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x10010)

4.957540263s ago: executing program 9 (id=8575):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0)
add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000180)="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", 0x544, r1)

4.371991263s ago: executing program 9 (id=8580):
io_setup(0x8f0, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008080)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x2}])

4.127191919s ago: executing program 9 (id=8582):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, 0x0, 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

3.991092602s ago: executing program 9 (id=8586):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffe0"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080)

3.857221376s ago: executing program 9 (id=8589):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
mlockall(0x3)
write(r1, &(0x7f0000000140)='4', 0x1)

3.146431409s ago: executing program 1 (id=8601):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000540)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"})

2.7423356s ago: executing program 2 (id=8608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000086dd0000110000080000000046250fc02b642c00010144047e71000004d60000000201000fff000080010000000000001000000000c9000000c27ae85a"], 0xfce)

2.465774068s ago: executing program 2 (id=8613):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x0, 0x303, 0x40000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

2.34862518s ago: executing program 2 (id=8614):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve1\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x5, 0x0, 0x400, 0xb7, 0xc20022, r1})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, &(0x7f00000005c0)={0x11, 0x9, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)

2.301996665s ago: executing program 4 (id=8615):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.270134478s ago: executing program 1 (id=8616):
io_setup(0x8f0, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)}}], 0x1, 0x20008080)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x2}])

2.206253515s ago: executing program 2 (id=8617):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="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", 0x185}], 0x1, 0xe7b, 0x0, 0x86)
r1 = openat(0xffffffffffffff9c, &(0x7f0000003340)='./file1\x00', 0x143042, 0x0)
sendfile(r1, r1, 0x0, 0x7a680000)

2.198416336s ago: executing program 4 (id=8618):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x7)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000c40))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x220, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

2.098910795s ago: executing program 1 (id=8620):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='M', 0x1}], 0x1, 0x9, 0x20003, 0x10)

1.650401791s ago: executing program 1 (id=8621):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@user_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@nodiscard}]}, 0xfe, 0x7b9, &(0x7f00000000c0)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1JrvQQ0oPpdBAoD03MbJiUstWsOQQG0MTSqGXQlt6KLSXnPsjvfXaH9BT+1/0UBLSxglN6aG4jDSyFVtybMe23PrzgfG892bk977zZjRPmkETwIE1nP7JRRyNiLeTiMGsPImInlqqO+Jcfb1HS4t9EVFIYnn5pZ+S2joPlxYL0fSa1OEs88+I+OqNiBO59fVW5hemxkul4myWH6lOXx2pzC+cvDI9PlmcLM6cGR0bO332v2fP7FysP3+3cOTuO8//+9Nzv77+j9tvfZ3EuTiSLWuOY6cMx3C2TXrSTfiY53a6sg5LOt0AtiU9NLvqR3kcjcHoqqXa6N/LlgEAu+W1iFgGAA6YxPkfAA6YxvcAD5cWC42ps99I7K17z0ZEXz3+R9lUX9KdXbPrq10HHXiYPHZlJImIoR2ofzgiPvz8lWNdWT5th2tpwF64cTMiLg0Nr3//T9bds7BVpzZauNxbmw2vKT5o5x/opC/S8c//Wo3/civjn2gx/umtH7t/f9r62x7/K4Or3J2nrWMj6fjvmfq9bWvGfys3rQ11Zbm/1JrVk1y+UiqeyrZBKs2P1lKtR27HH/z2oF392fjv43S6/+6rH6X1p/PVNXJ3unsff83EeLX7m6cJusm9mzGQJdfEn6z0f9Jm/Hthk3W88P83P2i3LI0/jbcxrY9/dy3fijjWsv9X+zLZ8P7EkdruMNLYKVr47Pv3B9rV39z/6ZTWn853PtLW7t2MGLg/GEmyug3qS1biH0qa79esbL2Ob28Nftlu2ZPjb7n/jx9KXq6lD2Vl18er1dnRiEPJi+vLT6++tpFvrJ/Gf/xfrY//erWt9//0M+GlTcbffffHT7Yf/+5K45/YeP9f0/99WfFqyZMStx9NdbWrf3P9P1ZLHc9K0v5/Ulybadf29mYAAAAAAAAAAAAAAAAAAAAAAAAA2LpcRByJJJdfSedy+Xz9Gd5/i4FcqVypnrhcnpuZiNqzsoeiJ9f4qcvBpt9DHc1+srWRP70m/5+I+GtEvNfbX8vnC+XSRKeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM4TbP/0/90Nvp1gEAu6av0w0AAPac8z8AHDxbO//371o7AIC94/M/ABw8mz7/X9rddgAAe8fnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZhfPn02n5l6XFQpqfuDY/N1W+dnKiWJnKT88V8oXy7NX8ZLk8WSrmC+Xptv/oRn1WKpevjsXM3PWRarFSHanML1ycLs/NVC9emR6fLF4s9uxZZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACweZX5hanxUqk4+6dI3FgNbIf/c39H4xrYH5u3KdEd+6IZ+zrRG/uiGdtMNL9L9HfgnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgj+H3AAAA//+0Bxg2")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x101042, 0x65)
pwrite64(r0, &(0x7f0000001180), 0x0, 0x84fed0)

1.17352578s ago: executing program 7 (id=8624):
setns(0xc9, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r0, 0x303, 0x40000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

1.118682836s ago: executing program 7 (id=8625):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000600)={[{@max_batch_time}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@oldalloc}, {@nojournal_checksum}, {@test_dummy_encryption}, {@data_err_abort}, {@stripe={'stripe', 0x3d, 0xff}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x100000001}}, {@init_itable_val={'init_itable', 0x3d, 0x80000000}}]}, 0xfa, 0x493, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvbF8ob7/2h/gCglTRSHxpaXmRgxeNJhw0IdEDxlNtC6kUSmhNhBAtHvBoSLwb/wvDSS9GvWjiVe+GhBgugF7GzM5MKWV3u9htt3U/n2Ta55mZzvN855ln+8w8uxtAxxrMfiQR2yLit4joz7P37zCY/7pz6/L43VuXx5NI03f+TKr73b51ebzctfy7rXkmTYv8phrlXn0/Ymx6evJCkR+eO3t+ePbipZenzo6dnjw9eW702LHDh/b2Hh090pI4s7hu7/5kZs+u4+9de3v85LUPfkwqkccdS+JolcH87Nb0XKsLa7Pti9JJ9+It+36+l651JdBOXRGRNVdPtf/3R1dsXtjWH29+1tbKAasqTdO0wavyfAr8hyXR7hoA7VH+o8/uf8tljYYe68LN1/IboCzuO8WSb+mOSp7Y17Pk/nZbC8sfjIiT8399lS2xSs8hAAAW+zYb/7xUa/xXicfyRG/243/FHMpARPw/InZExCMRsTMiHo2Iu2maPh4RTyw5ftcy5S+dISnLv7KwpnJjxUE2kI3/Xi3mtu4f/1XKXQa6itz2avw9yamp6cmDxTk5ED2bTk0lkyMNyvjujV+/qLdt8fgvW7Lyy7FgUY8b3Use0E2MzY2tJObFbl6J2N1dK/4kymmcJCJ2RcTuf1nG1AvddbctH38D9Q/btPTriOfz9p+PJfGXkrrzkyOvHB09MtwX05MHh8ur4kE//XL1RL3yVxR/C2Ttv6Xm9b8Q/0DSFzF78dKZ6nzt7EMdvtr9r/7+ed17miL+rHs1c/0f315c/73Ju9UVvcWGj8fm5i6MRPQmbz24fvTe0cp8uX8W/4H9tfv/jrh3Jp6MiD0RsTcinspuCou6Px0Rz0TE/gYn4YfXn/1wmfhrtP/azJVm8U8s1/6xuP0fPtF15vvry8ffFxH12v9wNXWgWNPM61+zFVzJuQMAAICNIn8PfFIZWkhXKkND+Xv4d8aWyvTM7NyLp2Y+OjeRz3sPRE+lfNLVv+h56EjxbLjMjy7JHyqeG3/ZtbmaHxqfmZ5od/DQ4bbW6f+ZP5abvAE2vhbMowEblP4PnUv/h86U6P/Q0fR/6FwP9P++RnsPfbOqlQHWVPP//683+pwTsAE10f/n81+frnpdgLXl/h86l/4PHanuZ+MrK/rI/5on/i6+z3C91KfliRPn8wZbL/W5FJU2lh7z6+MkrEWiu+kvs3iIRNqfX07Zmk0192nryxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDL/BMAAP//DnHlJg==")

1.082283919s ago: executing program 2 (id=8626):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000540)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"})

930.460505ms ago: executing program 7 (id=8627):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX], 0x3, 0x243, &(0x7f00000005c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000001a40)={0x8, 0x40000cca8, 0x10003})

752.579833ms ago: executing program 7 (id=8628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40040015}, 0x4000040)

510.818118ms ago: executing program 4 (id=8629):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

342.554375ms ago: executing program 1 (id=8630):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff15223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff1c0405b4620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d)

342.436675ms ago: executing program 7 (id=8631):
unshare(0x22020600)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x0, 0x0)
ioctl$SET_BITMAP_FILE(r0, 0x800c0910, 0xffffffffffffffff)

341.940355ms ago: executing program 4 (id=8632):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='M', 0x1}], 0x1, 0x9, 0x20003, 0x10)

240.427385ms ago: executing program 7 (id=8633):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000086dd0000110000080000000046250fc02b642c00010144047e71000004d60000000201000fff000080010000000000001000000000c9000000c27ae85a"], 0xfce)

158.503174ms ago: executing program 4 (id=8634):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, 0x0)

103.464579ms ago: executing program 4 (id=8635):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80c80, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70fd28, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000e80)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
sendmsg$kcm(r4, &(0x7f0000000500)={&(0x7f0000000980)=@xdp={0x2c, 0x7, r6, 0x8}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)="03", 0x1}], 0x1}, 0x20004014)

94.10839ms ago: executing program 1 (id=8636):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="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", 0x185}], 0x1, 0xe7b, 0x0, 0x86)
r1 = openat(0xffffffffffffff9c, &(0x7f0000003340)='./file1\x00', 0x143042, 0x0)
sendfile(r1, r1, 0x0, 0x7a680000)

0s ago: executing program 2 (id=8637):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {}, 0xdd3c})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000f80)={0x0, 'veth0_vlan\x00', {0x4}})

kernel console output (not intermixed with test programs):

]  do_futex+0x3f8/0x460
[  468.492932][T25725]  __se_sys_futex+0x2f6/0x370
[  468.492990][T25725]  __x64_sys_futex+0x78/0x90
[  468.493021][T25725]  x64_sys_call+0x22e2/0x2550
[  468.493095][T25725]  do_syscall_64+0x112/0x360
[  468.493129][T25725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.493206][T25725] RIP: 0033:0x7f9b8ee1fb19
[  468.493227][T25725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.493266][T25725] RSP: 002b:00007f9b8d86f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  468.493290][T25725] RAX: ffffffffffffffda RBX: 00007f9b8f0a5fa8 RCX: 00007f9b8ee1fb19
[  468.493306][T25725] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b8f0a5fac
[  468.493321][T25725] RBP: 00007f9b8f0a5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  468.493336][T25725] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  468.493419][T25725] R13: 00007f9b8f0a6038 R14: 00007ffe2f1f97a0 R15: 00007ffe2f1f9888
[  468.493444][T25725]  </TASK>
[  468.901304][   T29] audit: type=1400 audit(1793623523.036:940): avc:  denied  { create } for  pid=25731 comm="syz.9.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  468.916946][   T29] audit: type=1400 audit(1793623523.036:941): avc:  denied  { bind } for  pid=25731 comm="syz.9.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  468.955932][   T29] audit: type=1400 audit(1793623523.086:942): avc:  denied  { setopt } for  pid=25731 comm="syz.9.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  469.023151][T25746] loop2: detected capacity change from 0 to 512
[  469.060923][T25746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.061031][T25746] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.101651][   T29] audit: type=1400 audit(1793623523.236:943): avc:  denied  { write } for  pid=25745 comm="syz.2.7935" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  469.149074][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.213757][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7938'.
[  469.216257][T25763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7938'.
[  469.224254][T25764] syzkaller0: entered promiscuous mode
[  469.224278][T25764] syzkaller0: entered allmulticast mode
[  469.232142][T25763] netlink: 'syz.2.7938': attribute type 10 has an invalid length.
[  469.232165][T25763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7938'.
[  469.232741][T25763] dummy0: entered promiscuous mode
[  469.293340][T25766] FAULT_INJECTION: forcing a failure.
[  469.293340][T25766] name fail_futex, interval 1, probability 0, space 0, times 0
[  469.293377][T25766] CPU: 1 UID: 0 PID: 25766 Comm: syz.2.7940 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  469.293454][T25766] Tainted: [W]=WARN
[  469.293462][T25766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  469.293477][T25766] Call Trace:
[  469.293488][T25766]  <TASK>
[  469.293500][T25766]  __dump_stack+0x1d/0x30
[  469.293528][T25766]  dump_stack_lvl+0x95/0xd0
[  469.293614][T25766]  dump_stack+0x15/0x1b
[  469.293641][T25766]  should_fail_ex+0x259/0x270
[  469.293689][T25766]  should_fail+0xb/0x20
[  469.293716][T25766]  get_futex_key+0x12c/0xc40
[  469.293776][T25766]  futex_wake+0x89/0x400
[  469.293815][T25766]  do_futex+0x3f8/0x460
[  469.293850][T25766]  __se_sys_futex+0x2f6/0x370
[  469.293925][T25766]  __x64_sys_futex+0x78/0x90
[  469.293949][T25766]  x64_sys_call+0x22e2/0x2550
[  469.294038][T25766]  do_syscall_64+0x112/0x360
[  469.294122][T25766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.294151][T25766] RIP: 0033:0x7f7b321efb19
[  469.294169][T25766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.294193][T25766] RSP: 002b:00007f7b30c3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  469.294294][T25766] RAX: ffffffffffffffda RBX: 00007f7b32475fa8 RCX: 00007f7b321efb19
[  469.294372][T25766] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b32475fac
[  469.294387][T25766] RBP: 00007f7b32475fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  469.294442][T25766] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  469.294531][T25766] R13: 00007f7b32476038 R14: 00007ffe04b7e1b0 R15: 00007ffe04b7e298
[  469.294550][T25766]  </TASK>
[  469.540519][T25778] loop4: detected capacity change from 0 to 512
[  469.544135][T25778] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  469.570624][T25778] syz.4.7946: attempt to access beyond end of device
[  469.570624][T25778] loop4: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  469.571236][T25778] syz.4.7946: attempt to access beyond end of device
[  469.571236][T25778] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  469.574681][T25778] syz.4.7946: attempt to access beyond end of device
[  469.574681][T25778] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  469.652005][T25782] loop4: detected capacity change from 0 to 512
[  469.675638][T25782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.677457][T25782] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.703694][   T29] audit: type=1400 audit(1793623523.836:944): avc:  denied  { write } for  pid=25781 comm="syz.4.7948" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  469.752598][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.104716][T25803] rxe_eth0 speed is unknown, defaulting to 1000
[  470.190636][T25803] lo speed is unknown, defaulting to 1000
[  470.372647][   T29] audit: type=1400 audit(1793623524.506:945): avc:  denied  { checkpoint_restore } for  pid=25802 comm="syz.2.7956" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  470.398582][T25808] loop4: detected capacity change from 0 to 512
[  470.399241][T25808] EXT4-fs: Ignoring removed nomblk_io_submit option
[  470.416460][T25808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  470.416483][T25808] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  470.416573][T25808] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  470.665024][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7959'.
[  470.711531][T25812] rxe_eth0 speed is unknown, defaulting to 1000
[  470.725497][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7959'.
[  470.726898][T25811] netlink: 'syz.4.7959': attribute type 10 has an invalid length.
[  470.726916][T25811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7959'.
[  470.727550][T25811] dummy0: entered promiscuous mode
[  470.810311][T25816] loop4: detected capacity change from 0 to 512
[  470.850598][T25812] lo speed is unknown, defaulting to 1000
[  470.852642][T25816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.852729][T25816] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.874414][   T29] audit: type=1400 audit(1793623524.996:946): avc:  denied  { write } for  pid=25815 comm="syz.4.7960" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  471.135908][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.871271][T25737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.952725][T25837] netlink: 144 bytes leftover after parsing attributes in process `syz.7.7968'.
[  473.274795][T25852] syzkaller0: entered promiscuous mode
[  473.274862][T25852] syzkaller0: entered allmulticast mode
[  474.317536][   T29] audit: type=1400 audit(1793623528.176:947): avc:  denied  { ioctl } for  pid=25850 comm="syz.9.7975" path="socket:[81561]" dev="sockfs" ino=81561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  474.860189][   T29] audit: type=1326 audit(1793623528.976:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.860600][   T29] audit: type=1326 audit(1793623528.996:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.861295][   T29] audit: type=1326 audit(1793623528.996:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.861573][   T29] audit: type=1326 audit(1793623528.996:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.861789][   T29] audit: type=1326 audit(1793623528.996:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.862021][   T29] audit: type=1326 audit(1793623528.996:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.862325][   T29] audit: type=1326 audit(1793623528.996:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.864364][   T29] audit: type=1326 audit(1793623528.996:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.865031][   T29] audit: type=1326 audit(1793623528.996:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  474.866924][   T29] audit: type=1326 audit(1793623528.996:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.1.7979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1e5519fb19 code=0x7ffc0000
[  475.189481][T25873] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  475.189481][T25873] Please contact the netfilter-devel mailing list or update your nftables rules.
[  475.264705][T25875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7981'.
[  475.297732][T25875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7981'.
[  475.318836][T25875] dummy0: left promiscuous mode
[  475.322348][T25875] netlink: 'syz.1.7981': attribute type 10 has an invalid length.
[  475.322370][T25875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7981'.
[  475.322941][T25875] dummy0: entered promiscuous mode
[  476.086630][T25894] bridge0: port 1(syz_tun) entered blocking state
[  476.086682][T25894] bridge0: port 1(syz_tun) entered disabled state
[  476.114970][T25894] syz_tun: entered allmulticast mode
[  476.124551][T25894] syz_tun: entered promiscuous mode
[  476.125056][T25894] bridge0: port 1(syz_tun) entered blocking state
[  476.125164][T25894] bridge0: port 1(syz_tun) entered forwarding state
[  477.082523][T25909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7996'.
[  477.084846][T25909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7996'.
[  477.085881][T25909] dummy0: left promiscuous mode
[  477.215778][T25917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.215910][T25917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.305109][T25921] syzkaller0: entered promiscuous mode
[  477.305132][T25921] syzkaller0: entered allmulticast mode
[  477.412754][T25926] bridge0: port 3(syz_tun) entered blocking state
[  477.412850][T25926] bridge0: port 3(syz_tun) entered disabled state
[  477.413437][T25926] syz_tun: entered allmulticast mode
[  477.415297][T25926] syz_tun: entered promiscuous mode
[  477.415670][T25926] bridge0: port 3(syz_tun) entered blocking state
[  477.415709][T25926] bridge0: port 3(syz_tun) entered forwarding state
[  477.707671][T25863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  480.042032][   T29] kauditd_printk_skb: 521 callbacks suppressed
[  480.042059][   T29] audit: type=1326 audit(1793623534.176:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.043568][   T29] audit: type=1326 audit(1793623534.176:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.045245][   T29] audit: type=1326 audit(1793623534.176:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.046900][   T29] audit: type=1326 audit(1793623534.176:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.048189][   T29] audit: type=1326 audit(1793623534.186:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.049563][   T29] audit: type=1326 audit(1793623534.186:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.056855][   T29] audit: type=1326 audit(1793623534.186:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4249e3034e code=0x7ffc0000
[  480.818100][   T29] audit: type=1326 audit(1793623534.916:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4249e6fb19 code=0x7ffc0000
[  480.818167][   T29] audit: type=1326 audit(1793623534.916:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4249e6fb19 code=0x7ffc0000
[  483.327126][T25965] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.367233][T25967] syzkaller0: entered promiscuous mode
[  483.367258][T25967] syzkaller0: entered allmulticast mode
[  483.392971][T25968] syzkaller0: entered promiscuous mode
[  483.393018][T25968] syzkaller0: entered allmulticast mode
[  483.404639][T25967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.417790][T25967] tipc: Resetting bearer <eth:syzkaller0>
[  483.426584][T25963] tipc: Resetting bearer <eth:syzkaller0>
[  483.437102][T25963] tipc: Disabling bearer <eth:syzkaller0>
[  483.666696][T25976] loop7: detected capacity change from 0 to 2048
[  483.731520][T25976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.745929][T25976] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.125747][T25992] loop9: detected capacity change from 0 to 256
[  484.172399][T25992] FAT-fs (loop9): codepage cp932 not found
[  484.462324][T26001] FAULT_INJECTION: forcing a failure.
[  484.462324][T26001] name failslab, interval 1, probability 0, space 0, times 0
[  484.462357][T26001] CPU: 1 UID: 0 PID: 26001 Comm: syz.9.8030 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  484.462446][T26001] Tainted: [W]=WARN
[  484.462464][T26001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  484.462482][T26001] Call Trace:
[  484.462492][T26001]  <TASK>
[  484.462504][T26001]  __dump_stack+0x1d/0x30
[  484.462536][T26001]  dump_stack_lvl+0x95/0xd0
[  484.462642][T26001]  dump_stack+0x15/0x1b
[  484.462736][T26001]  should_fail_ex+0x259/0x270
[  484.462765][T26001]  ? ip6_mc_add_src+0x341/0x5d0
[  484.462790][T26001]  should_failslab+0x8c/0xb0
[  484.462871][T26001]  __kmalloc_cache_noprof+0x5d/0x3e0
[  484.462910][T26001]  ? ip6_mc_add_src+0x341/0x5d0
[  484.463028][T26001]  ip6_mc_add_src+0x341/0x5d0
[  484.463053][T26001]  ip6_mc_msfilter+0x5b1/0x9b0
[  484.463139][T26001]  ipv6_set_mcast_msfilter+0x1fe/0x250
[  484.463187][T26001]  do_ipv6_setsockopt+0xec4/0x1d30
[  484.463296][T26001]  ? __rcu_read_unlock+0x4e/0x70
[  484.463325][T26001]  ? avc_has_perm_noaudit+0xac/0x160
[  484.463371][T26001]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  484.463413][T26001]  ipv6_setsockopt+0x59/0x130
[  484.463434][T26001]  tcp_setsockopt+0x98/0xb0
[  484.463490][T26001]  sock_common_setsockopt+0x69/0x80
[  484.463526][T26001]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  484.463582][T26001]  __sys_setsockopt+0x184/0x200
[  484.463631][T26001]  __x64_sys_setsockopt+0x64/0x80
[  484.463674][T26001]  x64_sys_call+0x248f/0x2550
[  484.463704][T26001]  do_syscall_64+0x112/0x360
[  484.463737][T26001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.463860][T26001] RIP: 0033:0x7f9b8ee1fb19
[  484.463911][T26001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.463931][T26001] RSP: 002b:00007f9b8d84e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  484.463960][T26001] RAX: ffffffffffffffda RBX: 00007f9b8f0a6090 RCX: 00007f9b8ee1fb19
[  484.464028][T26001] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004
[  484.464127][T26001] RBP: 00007f9b8eeb7af8 R08: 0000000000000590 R09: 0000000000000000
[  484.464145][T26001] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  484.464159][T26001] R13: 00007f9b8f0a6128 R14: 00007f9b8f0a6090 R15: 00007ffe2f1f9888
[  484.464220][T26001]  </TASK>
[  484.615982][T18069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.825398][T26002] bridge_slave_0: left allmulticast mode
[  484.825423][T26002] bridge_slave_0: left promiscuous mode
[  484.825650][T26002] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.843577][T26002] bridge_slave_1: left allmulticast mode
[  484.843649][T26002] bridge_slave_1: left promiscuous mode
[  484.851168][T26002] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.901419][T26002] bond0: (slave bond_slave_0): Releasing backup interface
[  484.950256][T26002] bond0: (slave bond_slave_1): Releasing backup interface
[  484.959322][T26013] netlink: 'syz.9.8035': attribute type 1 has an invalid length.
[  485.025466][T26002] team0: Port device team_slave_0 removed
[  485.027708][T26017] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8035'.
[  485.045869][T26002] team0: Port device team_slave_1 removed
[  485.060196][T26002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.060220][T26002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.084809][T26002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.084831][T26002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.109052][T26002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  485.199934][T26003] team0: Mode changed to "loadbalance"
[  485.201745][T26009] tipc: Enabled bearer <eth:team0>, priority 0
[  485.203063][T26022] netlink: 'syz.9.8035': attribute type 10 has an invalid length.
[  485.203083][T26022] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8035'.
[  485.207108][T26022] dummy0: entered promiscuous mode
[  486.009722][T22153] tipc: Resetting bearer <eth:team0>
[  486.010493][T26013] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  486.019422][T26020] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  486.020602][T26021] dummy0: left promiscuous mode
[  486.374128][T22800] tipc: Node number set to 1137197181
[  486.418520][T26037] bridge0: port 1(syz_tun) entered blocking state
[  486.418567][T26037] bridge0: port 1(syz_tun) entered disabled state
[  486.419033][T26037] syz_tun: entered allmulticast mode
[  486.422703][T26037] syz_tun: entered promiscuous mode
[  486.426912][T26037] bridge0: port 1(syz_tun) entered blocking state
[  486.427003][T26037] bridge0: port 1(syz_tun) entered forwarding state
[  486.444373][T26042] FAULT_INJECTION: forcing a failure.
[  486.444373][T26042] name failslab, interval 1, probability 0, space 0, times 0
[  486.444445][T26042] CPU: 0 UID: 0 PID: 26042 Comm: syz.1.8044 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  486.444479][T26042] Tainted: [W]=WARN
[  486.444489][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  486.444552][T26042] Call Trace:
[  486.444562][T26042]  <TASK>
[  486.444648][T26042]  __dump_stack+0x1d/0x30
[  486.444678][T26042]  dump_stack_lvl+0x95/0xd0
[  486.444705][T26042]  dump_stack+0x15/0x1b
[  486.444730][T26042]  should_fail_ex+0x259/0x270
[  486.444789][T26042]  ? sock_kmalloc+0x85/0xc0
[  486.444813][T26042]  should_failslab+0x8c/0xb0
[  486.444848][T26042]  __kmalloc_noprof+0xb6/0x4b0
[  486.444936][T26042]  ? sock_kmalloc+0x85/0xc0
[  486.444962][T26042]  sock_kmalloc+0x85/0xc0
[  486.444986][T26042]  ip6_mc_msfilter+0x4a7/0x9b0
[  486.445054][T26042]  ipv6_set_mcast_msfilter+0x1fe/0x250
[  486.445142][T26042]  do_ipv6_setsockopt+0xec4/0x1d30
[  486.445233][T26042]  ? __rcu_read_unlock+0x4e/0x70
[  486.445305][T26042]  ? avc_has_perm_noaudit+0xac/0x160
[  486.445410][T26042]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  486.445452][T26042]  ipv6_setsockopt+0x59/0x130
[  486.445482][T26042]  tcp_setsockopt+0x98/0xb0
[  486.445516][T26042]  sock_common_setsockopt+0x69/0x80
[  486.445638][T26042]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  486.445671][T26042]  __sys_setsockopt+0x184/0x200
[  486.445708][T26042]  __x64_sys_setsockopt+0x64/0x80
[  486.445750][T26042]  x64_sys_call+0x248f/0x2550
[  486.445779][T26042]  do_syscall_64+0x112/0x360
[  486.445886][T26042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.445912][T26042] RIP: 0033:0x7f1e5519fb19
[  486.445942][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.445985][T26042] RSP: 002b:00007f1e53bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  486.446012][T26042] RAX: ffffffffffffffda RBX: 00007f1e55425fa0 RCX: 00007f1e5519fb19
[  486.446030][T26042] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004
[  486.446124][T26042] RBP: 00007f1e55237af8 R08: 0000000000000590 R09: 0000000000000000
[  486.446140][T26042] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  486.446233][T26042] R13: 00007f1e55426038 R14: 00007f1e55425fa0 R15: 00007ffe9856bd88
[  486.446255][T26042]  </TASK>
[  486.504325][   T29] audit: type=1400 audit(1793623540.626:1488): avc:  denied  { map } for  pid=26044 comm="syz.9.8047" path="socket:[82455]" dev="sockfs" ino=82455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  486.589262][T26049] loop1: detected capacity change from 0 to 1024
[  486.597946][T26049] EXT4-fs (loop1): unsupported inode size: 16384
[  486.597969][T26049] EXT4-fs (loop1): blocksize: 1024
[  486.601456][T26043] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8046'.
[  488.420654][T26073] syz_tun: left allmulticast mode
[  488.420678][T26073] syz_tun: left promiscuous mode
[  488.422859][T26073] bridge0: port 3(syz_tun) entered disabled state
[  488.895398][T26073] bridge_slave_0: left allmulticast mode
[  488.897165][T26073] bridge_slave_0: left promiscuous mode
[  488.910116][T26073] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.006781][T26073] bridge_slave_1: left allmulticast mode
[  489.006804][T26073] bridge_slave_1: left promiscuous mode
[  489.024722][T26073] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.296908][T26073] bond4: (slave veth0_to_bond): Releasing active interface
[  489.330816][T26073] bond0: (slave bond_slave_0): Releasing backup interface
[  489.352384][T26073] bond0: (slave bond_slave_1): Releasing backup interface
[  489.371314][T26073] team0: Port device team_slave_0 removed
[  489.381530][T26073] team0: Port device team_slave_1 removed
[  489.388598][T26073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  489.389850][ T3392] lo speed is unknown, defaulting to 1000
[  489.431322][T26089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8061'.
[  489.480320][T26091] loop2: detected capacity change from 0 to 1024
[  489.533855][T26095] syzkaller0: entered promiscuous mode
[  489.533877][T26095] syzkaller0: entered allmulticast mode
[  489.563985][T26091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.591717][T26091] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  489.591819][T26091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  489.591939][T26091] EXT4-fs (loop2): This should not happen!! Data will be lost
[  489.591939][T26091] 
[  489.591956][T26091] EXT4-fs (loop2): Total free blocks count 0
[  489.592016][T26091] EXT4-fs (loop2): Free/Dirty block details
[  489.592031][T26091] EXT4-fs (loop2): free_blocks=68451041280
[  489.592094][T26091] EXT4-fs (loop2): dirty_blocks=16
[  489.592107][T26091] EXT4-fs (loop2): Block reservation details
[  489.597095][T26091] EXT4-fs (loop2): i_reserved_data_blocks=1
[  489.660058][   T29] audit: type=1400 audit(1793623543.716:1489): avc:  denied  { write } for  pid=26090 comm="syz.2.8062" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  489.724288][T26091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28
[  490.124698][T26109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8068'.
[  490.552377][T26058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.333705][T26119] syzkaller0: entered promiscuous mode
[  491.333798][T26119] syzkaller0: entered allmulticast mode
[  491.358317][T26119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.368919][T26119] tipc: Resetting bearer <eth:syzkaller0>
[  492.166250][T26118] tipc: Resetting bearer <eth:syzkaller0>
[  492.184125][T26118] tipc: Disabling bearer <eth:syzkaller0>
[  492.242305][T26121] FAULT_INJECTION: forcing a failure.
[  492.242305][T26121] name fail_futex, interval 1, probability 0, space 0, times 0
[  492.242508][T26121] CPU: 0 UID: 0 PID: 26121 Comm: syz.4.8071 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  492.242580][T26121] Tainted: [W]=WARN
[  492.242592][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  492.242617][T26121] Call Trace:
[  492.242627][T26121]  <TASK>
[  492.242639][T26121]  __dump_stack+0x1d/0x30
[  492.242702][T26121]  dump_stack_lvl+0x95/0xd0
[  492.242726][T26121]  dump_stack+0x15/0x1b
[  492.242747][T26121]  should_fail_ex+0x259/0x270
[  492.242862][T26121]  should_fail+0xb/0x20
[  492.242952][T26121]  get_futex_key+0x12c/0xc40
[  492.242979][T26121]  futex_wake+0x89/0x400
[  492.243018][T26121]  do_futex+0x3f8/0x460
[  492.243043][T26121]  __se_sys_futex+0x2f6/0x370
[  492.243073][T26121]  __x64_sys_futex+0x78/0x90
[  492.243119][T26121]  x64_sys_call+0x22e2/0x2550
[  492.243145][T26121]  do_syscall_64+0x112/0x360
[  492.243182][T26121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.243222][T26121] RIP: 0033:0x7f87913dfb19
[  492.243242][T26121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.243266][T26121] RSP: 002b:00007f878fe370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  492.243323][T26121] RAX: ffffffffffffffda RBX: 00007f8791665fa8 RCX: 00007f87913dfb19
[  492.243339][T26121] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8791665fac
[  492.243409][T26121] RBP: 00007f8791665fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  492.243429][T26121] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  492.243447][T26121] R13: 00007f8791666038 R14: 00007fff56a1da20 R15: 00007fff56a1db08
[  492.243472][T26121]  </TASK>
[  492.512353][T26126] syzkaller0: entered promiscuous mode
[  492.512407][T26126] syzkaller0: entered allmulticast mode
[  492.536844][T22800] sony 0005:054C:03D5.0007: UNIQ does not contain a MAC address; duplicate check skipped
[  492.555946][T22800] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0007/input/input5
[  492.568156][   T29] audit: type=1400 audit(1793623546.686:1490): avc:  denied  { read } for  pid=2964 comm="acpid" name="event4" dev="devtmpfs" ino=933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  492.602013][   T29] audit: type=1400 audit(1793623546.686:1491): avc:  denied  { open } for  pid=2964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  492.602235][   T29] audit: type=1400 audit(1793623546.736:1492): avc:  denied  { ioctl } for  pid=2964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=933 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  492.605465][T22800] sony 0005:054C:03D5.0007: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  492.845700][   T29] audit: type=1400 audit(1793623546.976:1493): avc:  denied  { listen } for  pid=26125 comm="syz.9.8075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  492.872975][   T29] audit: type=1400 audit(1793623547.006:1494): avc:  denied  { accept } for  pid=26125 comm="syz.9.8075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  492.916825][T26133] fido_id[26133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  493.236857][T26136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26136 comm=syz.4.8076
[  493.477733][T26143] FAULT_INJECTION: forcing a failure.
[  493.477733][T26143] name failslab, interval 1, probability 0, space 0, times 0
[  493.477769][T26143] CPU: 0 UID: 0 PID: 26143 Comm: syz.2.8080 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  493.477888][T26143] Tainted: [W]=WARN
[  493.477897][T26143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  493.477915][T26143] Call Trace:
[  493.477976][T26143]  <TASK>
[  493.477986][T26143]  __dump_stack+0x1d/0x30
[  493.478016][T26143]  dump_stack_lvl+0x95/0xd0
[  493.478052][T26143]  dump_stack+0x15/0x1b
[  493.478082][T26143]  should_fail_ex+0x259/0x270
[  493.478110][T26143]  ? __rdma_create_id+0x48/0x3e0
[  493.478139][T26143]  should_failslab+0x8c/0xb0
[  493.478219][T26143]  __kmalloc_cache_noprof+0x5d/0x3e0
[  493.478258][T26143]  ? __rdma_create_id+0x48/0x3e0
[  493.478298][T26143]  ? __xa_alloc+0x291/0x300
[  493.478317][T26143]  ? __pfx_ucma_event_handler+0x10/0x10
[  493.478344][T26143]  ? __pfx_ucma_event_handler+0x10/0x10
[  493.478398][T26143]  __rdma_create_id+0x48/0x3e0
[  493.478420][T26143]  ? __pfx_ucma_event_handler+0x10/0x10
[  493.478498][T26143]  rdma_create_user_id+0x5a/0xa0
[  493.478526][T26143]  ucma_create_id+0x19c/0x280
[  493.478551][T26143]  ? __pfx_ucma_create_id+0x10/0x10
[  493.478651][T26143]  ucma_write+0x1c9/0x260
[  493.478677][T26143]  ? __pfx_ucma_write+0x10/0x10
[  493.478700][T26143]  vfs_write+0x24f/0x990
[  493.478738][T26143]  ? __fget_files+0x184/0x1c0
[  493.478775][T26143]  ksys_write+0xdc/0x1a0
[  493.478871][T26143]  __x64_sys_write+0x40/0x50
[  493.478958][T26143]  x64_sys_call+0x154e/0x2550
[  493.478991][T26143]  do_syscall_64+0x112/0x360
[  493.479082][T26143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.479111][T26143] RIP: 0033:0x7f7b321efb19
[  493.479132][T26143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.479178][T26143] RSP: 002b:00007f7b30c3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  493.479203][T26143] RAX: ffffffffffffffda RBX: 00007f7b32475fa0 RCX: 00007f7b321efb19
[  493.479240][T26143] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003
[  493.479306][T26143] RBP: 00007f7b32287af8 R08: 0000000000000000 R09: 0000000000000000
[  493.479322][T26143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.479336][T26143] R13: 00007f7b32476038 R14: 00007f7b32475fa0 R15: 00007ffe04b7e298
[  493.479355][T26143]  </TASK>
[  494.311296][T26152] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8079'.
[  494.773173][T26161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8085'.
[  495.451950][T26179] loop2: detected capacity change from 0 to 1024
[  495.630483][T26179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.649966][   T29] audit: type=1400 audit(1793623549.776:1495): avc:  denied  { write } for  pid=26178 comm="syz.2.8092" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  495.654756][T26179] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  495.654863][T26179] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  495.654983][T26179] EXT4-fs (loop2): This should not happen!! Data will be lost
[  495.654983][T26179] 
[  495.654999][T26179] EXT4-fs (loop2): Total free blocks count 0
[  495.655015][T26179] EXT4-fs (loop2): Free/Dirty block details
[  495.655029][T26179] EXT4-fs (loop2): free_blocks=68451041280
[  495.655046][T26179] EXT4-fs (loop2): dirty_blocks=16
[  495.655085][T26179] EXT4-fs (loop2): Block reservation details
[  495.655098][T26179] EXT4-fs (loop2): i_reserved_data_blocks=1
[  495.762421][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8097'.
[  495.830656][T22153] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[  495.905942][T26206] loop9: detected capacity change from 0 to 1024
[  495.925075][T26206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  495.925189][T26206] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.971763][T26206] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8103'.
[  496.024604][T26216] loop1: detected capacity change from 0 to 256
[  496.348248][T26225] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.8103: Freeing blocks not in datazone - block = 0, count = 16
[  497.252645][T26188] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  497.267750][T26224] loop1: detected capacity change from 0 to 1024
[  497.277532][   T29] audit: type=1400 audit(1793623550.476:1496): avc:  denied  { write } for  pid=26204 comm="syz.9.8103" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  497.429581][T22835] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[  497.429676][T22835] EXT4-fs (loop9): This should not happen!! Data will be lost
[  497.429676][T22835] 
[  497.429691][T22835] EXT4-fs (loop9): Total free blocks count 0
[  497.429704][T22835] EXT4-fs (loop9): Free/Dirty block details
[  497.429721][T22835] EXT4-fs (loop9): free_blocks=0
[  497.429773][T22835] EXT4-fs (loop9): dirty_blocks=3968
[  497.429788][T22835] EXT4-fs (loop9): Block reservation details
[  497.429802][T22835] EXT4-fs (loop9): i_reserved_data_blocks=248
[  497.450650][T26224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.575641][   T29] audit: type=1400 audit(1793623551.706:1497): avc:  denied  { write } for  pid=26223 comm="syz.1.8108" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  497.615995][T26224] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  497.616152][T26224] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  497.616211][T26224] EXT4-fs (loop1): This should not happen!! Data will be lost
[  497.616211][T26224] 
[  497.616224][T26224] EXT4-fs (loop1): Total free blocks count 0
[  497.616241][T26224] EXT4-fs (loop1): Free/Dirty block details
[  497.616285][T26224] EXT4-fs (loop1): free_blocks=68451041280
[  497.616302][T26224] EXT4-fs (loop1): dirty_blocks=16
[  497.616317][T26224] EXT4-fs (loop1): Block reservation details
[  497.668323][T26224] EXT4-fs (loop1): i_reserved_data_blocks=1
[  497.763060][T26225] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 1916 with error 28
[  498.056291][  T362] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[  498.207311][T26241] loop2: detected capacity change from 0 to 2048
[  498.603029][T26246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8113'.
[  498.619280][T26241]  loop2: p1 < > p4
[  498.638617][T26241] loop2: p4 size 722688 extends beyond EOD, truncated
[  498.806497][T26253] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8117'.
[  499.220592][T26261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  499.221372][T26266] syzkaller0: entered promiscuous mode
[  499.221389][T26266] syzkaller0: entered allmulticast mode
[  499.268057][T26265] team0: Mode changed to "loadbalance"
[  499.271465][T26272] vlan0: entered promiscuous mode
[  499.315613][T26272] team0: Port device vlan0 added
[  499.322809][T26275] tipc: Enabled bearer <eth:team0>, priority 0
[  499.334438][T26278] loop1: detected capacity change from 0 to 1024
[  499.381489][T26278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  499.407909][   T29] audit: type=1400 audit(1793623553.536:1498): avc:  denied  { write } for  pid=26276 comm="syz.1.8125" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  499.409668][T26278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  499.410869][T26278] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  499.410899][T26278] EXT4-fs (loop1): This should not happen!! Data will be lost
[  499.410899][T26278] 
[  499.410918][T26278] EXT4-fs (loop1): Total free blocks count 0
[  499.410936][T26278] EXT4-fs (loop1): Free/Dirty block details
[  499.411014][T26278] EXT4-fs (loop1): free_blocks=68451041280
[  499.411080][T26278] EXT4-fs (loop1): dirty_blocks=16
[  499.411097][T26278] EXT4-fs (loop1): Block reservation details
[  499.411126][T26278] EXT4-fs (loop1): i_reserved_data_blocks=1
[  499.551853][  T316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[  499.699223][T26291] netlink: 'syz.1.8127': attribute type 1 has an invalid length.
[  499.771886][T26291] 8021q: adding VLAN 0 to HW filter on device bond2
[  499.876385][T26303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8131'.
[  500.249647][T26297] dummy0: left promiscuous mode
[  500.336335][T26297] bond2: (slave dummy0): making interface the new active one
[  500.369058][T26297] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  500.419677][T26320] syzkaller0: entered promiscuous mode
[  500.419699][T26320] syzkaller0: entered allmulticast mode
[  500.448980][ T3393] tipc: Node number set to 2148498589
[  500.499682][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8139'.
[  500.660364][T26328] loop9: detected capacity change from 0 to 1024
[  500.691489][T26328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  500.731509][   T29] audit: type=1400 audit(1793623554.866:1499): avc:  denied  { write } for  pid=26327 comm="syz.9.8141" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  500.777634][T26229] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  500.834334][T22439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.116852][T26344] syz_tun: left allmulticast mode
[  501.116878][T26344] syz_tun: left promiscuous mode
[  501.117077][T26344] bridge0: port 1(syz_tun) entered disabled state
[  501.168460][T26344] bond2: (slave dummy0): Releasing active interface
[  501.212875][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8151'.
[  501.304066][T26344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  501.304410][T26346] team0: No ports can be present during mode change
[  501.306179][T26353] tipc: Started in network mode
[  501.306292][T26353] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  501.306372][T26353] tipc: Enabled bearer <eth:team0>, priority 0
[  501.376171][T22645] tipc: Resetting bearer <eth:team0>
[  501.398587][T26358] loop7: detected capacity change from 0 to 512
[  501.461958][T26361] netlink: 'syz.1.8154': attribute type 1 has an invalid length.
[  501.756549][T26361] 8021q: adding VLAN 0 to HW filter on device bond3
[  501.806551][T26367] bond3: (slave dummy0): making interface the new active one
[  501.816640][T26367] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  501.826880][T26370] syzkaller0: entered promiscuous mode
[  501.826901][T26370] syzkaller0: entered allmulticast mode
[  501.894162][T26382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26382 comm=syz.1.8162
[  501.940324][T26384] syzkaller0: entered promiscuous mode
[  501.940348][T26384] syzkaller0: entered allmulticast mode
[  501.983100][T26358] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.8153: inode has both inline data and extents flags
[  501.983135][T26358] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  501.983433][T26358] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.8153: couldn't read orphan inode 15 (err -117)
[  501.983498][T26358] loop7: lost filesystem error report for type 5 error -117
[  501.984293][T26358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.065689][   T29] audit: type=1400 audit(1793623556.196:1500): avc:  denied  { write } for  pid=26357 comm="syz.7.8153" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  502.176672][T18069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.190423][T26388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8164'.
[  502.220266][T26389] netlink: 'syz.4.8165': attribute type 1 has an invalid length.
[  502.295232][T26389] 8021q: adding VLAN 0 to HW filter on device bond3
[  502.355042][T26391] tipc: Resetting bearer <eth:team0>
[  502.359148][T26391] bond3: (slave dummy0): Releasing active interface
[  502.371449][T26389] netlink: 'syz.4.8165': attribute type 10 has an invalid length.
[  502.371544][T26389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8165'.
[  502.553667][T26406] loop9: detected capacity change from 0 to 1024
[  502.612690][T26391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  502.938224][T26393] bond3: (slave dummy0): making interface the new active one
[  502.939917][T26393] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  502.940042][T26398] team0: No ports can be present during mode change
[  502.940273][ T3396] tipc: Node number set to 11578026
[  503.279597][T26408] loop9: detected capacity change from 0 to 128
[  503.364849][T26389] dummy0: entered promiscuous mode
[  503.412964][T26389] bond3: (slave dummy0): Releasing active interface
[  503.628158][T26411] ip_tables: iptables: counters copy to user failed while replacing table
[  503.669571][T26404] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  503.727598][T26415] syzkaller0: entered promiscuous mode
[  503.727622][T26415] syzkaller0: entered allmulticast mode
[  503.850064][T26417] loop2: detected capacity change from 0 to 512
[  503.854811][T26417] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  503.854829][T26417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  503.903405][T26417] EXT4-fs (loop2): 1 truncate cleaned up
[  503.904156][T26417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.975044][   T29] audit: type=1400 audit(1793623558.106:1501): avc:  denied  { write } for  pid=26416 comm="syz.2.8172" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.032727][T26420] syzkaller0: entered promiscuous mode
[  504.032752][T26420] syzkaller0: entered allmulticast mode
[  504.236901][T26427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8179'.
[  504.403866][T26435] loop7: detected capacity change from 0 to 1024
[  505.430878][T26435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.757918][   T29] audit: type=1400 audit(1793623559.856:1502): avc:  denied  { write } for  pid=26434 comm="syz.7.8183" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  507.414538][T26385] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  507.450777][T18069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.081140][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.212914][T26448] netlink: 'syz.4.8190': attribute type 1 has an invalid length.
[  508.406715][T26453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8190'.
[  508.468985][T26448] 8021q: adding VLAN 0 to HW filter on device bond4
[  508.490100][T26457] dummy0: left promiscuous mode
[  508.519977][T26457] bond4: (slave dummy0): making interface the new active one
[  508.524296][T26457] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  508.536420][T26458] syzkaller0: entered promiscuous mode
[  508.536444][T26458] syzkaller0: entered allmulticast mode
[  508.555321][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8192'.
[  509.162196][T26474] tmpfs: Bad value for 'mpol'
[  509.580644][   T29] audit: type=1400 audit(1793623563.716:1503): avc:  denied  { write } for  pid=26475 comm="syz.4.8198" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  509.831686][   T29] audit: type=1400 audit(1793623563.966:1504): avc:  denied  { create } for  pid=26475 comm="syz.4.8198" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  510.945990][T26498] syzkaller0: entered promiscuous mode
[  510.946016][T26498] syzkaller0: entered allmulticast mode
[  511.159915][T26516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26516 comm=syz.9.8211
[  511.212985][   T29] audit: type=1400 audit(1793623565.346:1505): avc:  denied  { write } for  pid=26491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  511.298895][T26524] syz_tun: entered allmulticast mode
[  511.361517][   T29] audit: type=1400 audit(1793623565.496:1506): avc:  denied  { write } for  pid=26527 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  511.361566][T26526] FAULT_INJECTION: forcing a failure.
[  511.361566][T26526] name fail_futex, interval 1, probability 0, space 0, times 0
[  511.361593][T26526] CPU: 1 UID: 0 PID: 26526 Comm: syz.2.8214 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  511.361623][T26526] Tainted: [W]=WARN
[  511.361634][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  511.361728][T26526] Call Trace:
[  511.361736][T26526]  <TASK>
[  511.361747][T26526]  __dump_stack+0x1d/0x30
[  511.361836][T26526]  dump_stack_lvl+0x95/0xd0
[  511.361859][T26526]  dump_stack+0x15/0x1b
[  511.361884][T26526]  should_fail_ex+0x259/0x270
[  511.361920][T26526]  should_fail+0xb/0x20
[  511.362005][T26526]  get_futex_key+0x12c/0xc40
[  511.362069][T26526]  ? ring_buffer_lock_reserve+0x71e/0x860
[  511.362107][T26526]  futex_wait_setup+0x49/0x3e0
[  511.362238][T26526]  __futex_wait+0xb2/0x2a0
[  511.362274][T26526]  ? __pfx_futex_wake_mark+0x10/0x10
[  511.362331][T26526]  futex_wait+0x98/0x1c0
[  511.362376][T26526]  do_futex+0x391/0x460
[  511.362405][T26526]  __se_sys_futex+0x2f6/0x370
[  511.362435][T26526]  ? trace_event_raw_event_sys_enter+0x195/0x1f0
[  511.362473][T26526]  __x64_sys_futex+0x78/0x90
[  511.362502][T26526]  x64_sys_call+0x22e2/0x2550
[  511.362664][T26526]  do_syscall_64+0x112/0x360
[  511.362711][T26526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.362739][T26526] RIP: 0033:0x7f7b321efb19
[  511.362760][T26526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.362864][T26526] RSP: 002b:00007f7b30c3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  511.362893][T26526] RAX: ffffffffffffffda RBX: 00007f7b32475fa8 RCX: 00007f7b321efb19
[  511.362913][T26526] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b32475fa8
[  511.362932][T26526] RBP: 00007f7b32475fa0 R08: 0000000000000000 R09: 0000000000000000
[  511.363011][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.363027][T26526] R13: 00007f7b32476038 R14: 00007ffe04b7e1b0 R15: 00007ffe04b7e298
[  511.363050][T26526]  </TASK>
[  511.413367][ T3396] sony 0005:054C:03D5.0008: UNIQ does not contain a MAC address; duplicate check skipped
[  511.429326][ T3396] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0008/input/input6
[  511.454507][ T3396] sony 0005:054C:03D5.0008: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  511.670416][T26532] fido_id[26532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  511.850442][T26544] syzkaller0: entered promiscuous mode
[  511.850483][T26544] syzkaller0: entered allmulticast mode
[  511.991621][T26550] syzkaller0: entered promiscuous mode
[  511.991645][T26550] syzkaller0: entered allmulticast mode
[  512.013948][   T29] audit: type=1400 audit(1793623566.146:1507): avc:  denied  { write } for  pid=26535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.190606][T26566] netlink: 'syz.9.8223': attribute type 1 has an invalid length.
[  512.284088][T26570] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8223'.
[  512.343976][   T29] audit: type=1400 audit(1793623566.476:1508): avc:  denied  { write } for  pid=26564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.344713][T26569] loop2: detected capacity change from 0 to 2048
[  512.352016][T26573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8227'.
[  512.377830][T26566] 8021q: adding VLAN 0 to HW filter on device bond4
[  512.546074][T26566] netlink: 'syz.9.8223': attribute type 10 has an invalid length.
[  512.546098][T26566] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8223'.
[  512.567580][T26575] bond4: (slave dummy0): making interface the new active one
[  512.570233][T26575] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  512.570644][T26566] dummy0: entered promiscuous mode
[  512.575080][T26566] bond4: (slave dummy0): Releasing active interface
[  512.612104][T26569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.612267][T26569] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.657511][T26569] EXT4-fs (loop2): resizing filesystem from 256 to 0 blocks
[  512.657542][T26569] EXT4-fs warning (device loop2): ext4_resize_fs:2044: can't shrink FS - resize aborted
[  512.705571][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.888265][T26593] syzkaller0: entered promiscuous mode
[  512.888292][T26593] syzkaller0: entered allmulticast mode
[  512.920607][T26596] syzkaller0: entered promiscuous mode
[  512.920639][T26596] syzkaller0: entered allmulticast mode
[  512.990022][   T29] audit: type=1400 audit(1793623567.126:1509): avc:  denied  { write } for  pid=26584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  513.041849][T26607] syzkaller0: entered promiscuous mode
[  513.041875][T26607] syzkaller0: entered allmulticast mode
[  513.099488][   T29] audit: type=1400 audit(1793623567.236:1510): avc:  denied  { write } for  pid=26608 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  513.151347][   T29] audit: type=1400 audit(1793623567.286:1511): avc:  denied  { getopt } for  pid=26609 comm="syz.2.8237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  513.214551][T26614] syzkaller0: entered promiscuous mode
[  513.214575][T26614] syzkaller0: entered allmulticast mode
[  513.230786][T26615] syz_tun: entered allmulticast mode
[  513.238878][T26615] syz_tun: left allmulticast mode
[  513.269281][T26620] netlink: 'syz.7.8241': attribute type 1 has an invalid length.
[  513.305026][T26620] 8021q: adding VLAN 0 to HW filter on device bond8
[  513.328605][T26620] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8241'.
[  513.331411][T26620] dummy0: left promiscuous mode
[  513.366211][T26620] bond8: (slave dummy0): making interface the new active one
[  513.375832][T26620] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  513.393018][T26620] netlink: 'syz.7.8241': attribute type 10 has an invalid length.
[  513.393042][T26620] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8241'.
[  513.393108][T26620] dummy0: entered promiscuous mode
[  513.399099][T26620] bond8: (slave dummy0): Releasing active interface
[  513.453792][T26631] loop2: detected capacity change from 0 to 2048
[  513.495542][T26631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.544852][T26644] syzkaller0: entered promiscuous mode
[  513.544872][T26644] syzkaller0: entered allmulticast mode
[  513.583360][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.623964][T26648] syzkaller0: entered promiscuous mode
[  513.624041][T26648] syzkaller0: entered allmulticast mode
[  513.652528][T26646] syzkaller0: entered promiscuous mode
[  513.652551][T26646] syzkaller0: entered allmulticast mode
[  513.722817][T26654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26654 comm=syz.1.8254
[  513.989822][T26668] loop9: detected capacity change from 0 to 1024
[  514.065672][T26668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.082374][   T29] audit: type=1400 audit(1793623568.216:1512): avc:  denied  { write } for  pid=26667 comm="syz.9.8259" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  514.126009][T22439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.156886][T26684] bridge0: port 1(syz_tun) entered blocking state
[  514.156935][T26684] bridge0: port 1(syz_tun) entered disabled state
[  514.173433][T26684] syz_tun: entered allmulticast mode
[  514.174011][T26684] FAULT_INJECTION: forcing a failure.
[  514.174011][T26684] name failslab, interval 1, probability 0, space 0, times 0
[  514.174122][T26684] CPU: 1 UID: 0 PID: 26684 Comm: syz.1.8264 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  514.174192][T26684] Tainted: [W]=WARN
[  514.174202][T26684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  514.174217][T26684] Call Trace:
[  514.174225][T26684]  <TASK>
[  514.174234][T26684]  __dump_stack+0x1d/0x30
[  514.174264][T26684]  dump_stack_lvl+0x95/0xd0
[  514.174354][T26684]  dump_stack+0x15/0x1b
[  514.174381][T26684]  should_fail_ex+0x259/0x270
[  514.174455][T26684]  ? __kernfs_new_node+0x70/0x440
[  514.174483][T26684]  should_failslab+0x8c/0xb0
[  514.174520][T26684]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  514.174561][T26684]  ? __kernfs_new_node+0x70/0x440
[  514.174610][T26684]  __kernfs_new_node+0x70/0x440
[  514.174637][T26684]  ? __rcu_read_unlock+0x4e/0x70
[  514.174664][T26684]  ? up_write+0x19/0x60
[  514.174729][T26684]  ? kernfs_link_sibling+0x2f5/0x320
[  514.174758][T26684]  ? __rcu_read_unlock+0x4e/0x70
[  514.174791][T26684]  kernfs_new_node+0x107/0x140
[  514.174817][T26684]  __kernfs_create_file+0x4b/0x180
[  514.174876][T26684]  ? __pfx_brport_show+0x10/0x10
[  514.174901][T26684]  ? __pfx_brport_store+0x10/0x10
[  514.174927][T26684]  sysfs_add_file_mode_ns+0x132/0x1b0
[  514.174974][T26684]  sysfs_create_file_ns+0xd9/0x120
[  514.175011][T26684]  br_sysfs_addif+0x7d/0x190
[  514.175034][T26684]  br_add_if+0x2f7/0xa60
[  514.175061][T26684]  ? ring_buffer_unlock_commit+0x3cc/0x450
[  514.175162][T26684]  ? __pfx_br_add_slave+0x10/0x10
[  514.175197][T26684]  br_add_slave+0x2c/0x40
[  514.175256][T26684]  do_set_master+0x37b/0x450
[  514.175330][T26684]  do_setlink+0x976/0x2930
[  514.175364][T26684]  ? cred_has_capability+0x224/0x2a0
[  514.175437][T26684]  ? selinux_capable+0x31/0x40
[  514.175463][T26684]  ? security_capable+0x7b/0x90
[  514.175490][T26684]  ? ns_capable+0x80/0xb0
[  514.175518][T26684]  ? netlink_ns_capable+0x86/0xa0
[  514.175581][T26684]  rtnl_setlink+0x3a8/0x4f0
[  514.175622][T26684]  ? selinux_capable+0x31/0x40
[  514.175651][T26684]  ? security_capable+0x7b/0x90
[  514.175749][T26684]  ? ns_capable+0x80/0xb0
[  514.175804][T26684]  ? __pfx_rtnl_setlink+0x10/0x10
[  514.175905][T26684]  rtnetlink_rcv_msg+0x64b/0x720
[  514.175938][T26684]  ? __copy_skb_header+0x22f/0x2b0
[  514.175962][T26684]  netlink_rcv_skb+0x11e/0x220
[  514.176029][T26684]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  514.176137][T26684]  rtnetlink_rcv+0x1c/0x30
[  514.176164][T26684]  netlink_unicast+0x665/0x740
[  514.176275][T26684]  netlink_sendmsg+0x5ef/0x740
[  514.176298][T26684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  514.176318][T26684]  ____sys_sendmsg+0x54a/0x590
[  514.176419][T26684]  ___sys_sendmsg+0x195/0x1e0
[  514.176449][T26684]  __x64_sys_sendmsg+0xd4/0x160
[  514.176473][T26684]  x64_sys_call+0x22ab/0x2550
[  514.176499][T26684]  do_syscall_64+0x112/0x360
[  514.176555][T26684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.176593][T26684] RIP: 0033:0x7f1e5519fb19
[  514.176613][T26684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.176632][T26684] RSP: 002b:00007f1e53bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  514.176675][T26684] RAX: ffffffffffffffda RBX: 00007f1e55425fa0 RCX: 00007f1e5519fb19
[  514.176694][T26684] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  514.176711][T26684] RBP: 00007f1e55237af8 R08: 0000000000000000 R09: 0000000000000000
[  514.176735][T26684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.176752][T26684] R13: 00007f1e55426038 R14: 00007f1e55425fa0 R15: 00007ffe9856bd88
[  514.176777][T26684]  </TASK>
[  514.177133][T26684] syz_tun: left allmulticast mode
[  514.203466][T22800] sony 0005:054C:03D5.0009: UNIQ does not contain a MAC address; duplicate check skipped
[  514.223363][T22800] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0009/input/input7
[  514.243489][T22800] sony 0005:054C:03D5.0009: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  514.404939][T26691] syzkaller0: entered promiscuous mode
[  514.405028][T26691] syzkaller0: entered allmulticast mode
[  514.419690][T26689] fido_id[26689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  514.597228][   T29] audit: type=1400 audit(1793623568.726:1513): avc:  denied  { create } for  pid=26692 comm="syz.9.8267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  514.612840][   T29] audit: type=1400 audit(1793623568.736:1514): avc:  denied  { bind } for  pid=26692 comm="syz.9.8267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  514.784661][T26710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26710 comm=syz.1.8272
[  514.861731][T26716] loop1: detected capacity change from 0 to 2048
[  514.902391][T26721] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.006587][T26716]  loop1: p1 < > p4
[  515.011634][T26716] loop1: p4 size 722688 extends beyond EOD, truncated
[  515.133655][T26737] syzkaller0: entered promiscuous mode
[  515.133747][T26737] syzkaller0: entered allmulticast mode
[  515.143378][T26131] udevd[26131]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  515.145986][T26129] udevd[26129]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  515.173150][T26731] syzkaller0: entered promiscuous mode
[  515.173172][T26731] syzkaller0: entered allmulticast mode
[  515.320411][ T1505] sony 0005:054C:03D5.000A: UNIQ does not contain a MAC address; duplicate check skipped
[  515.341586][ T1505] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000A/input/input8
[  515.353878][ T1505] sony 0005:054C:03D5.000A: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  515.406928][T26760] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.449824][T26762] fido_id[26762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  515.569810][T26771] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8288'.
[  515.596843][T26771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.656570][T26779] loop1: detected capacity change from 0 to 2048
[  515.696721][T26779]  loop1: p1 < > p4
[  515.709101][T26779] loop1: p4 size 722688 extends beyond EOD, truncated
[  515.767157][T26784] loop2: detected capacity change from 0 to 2048
[  515.812662][T26784]  loop2: p1 < > p4
[  515.814528][T26784] loop2: p4 size 722688 extends beyond EOD, truncated
[  515.904360][T26794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26794 comm=syz.1.8293
[  515.965712][T26130] udevd[26130]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  515.972869][T26129] udevd[26129]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  516.028084][T26810] syzkaller0: entered promiscuous mode
[  516.028182][T26810] syzkaller0: entered allmulticast mode
[  516.061821][T26803] syzkaller0: entered promiscuous mode
[  516.061876][T26803] syzkaller0: entered allmulticast mode
[  516.193263][ T1505] sony 0005:054C:03D5.000B: UNIQ does not contain a MAC address; duplicate check skipped
[  516.224448][ T1505] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000B/input/input9
[  516.230421][ T1505] sony 0005:054C:03D5.000B: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  516.349637][T26825] fido_id[26825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  516.365997][T26824] FAULT_INJECTION: forcing a failure.
[  516.365997][T26824] name failslab, interval 1, probability 0, space 0, times 0
[  516.366112][T26824] CPU: 0 UID: 0 PID: 26824 Comm: syz.7.8302 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  516.366183][T26824] Tainted: [W]=WARN
[  516.366194][T26824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  516.366215][T26824] Call Trace:
[  516.366226][T26824]  <TASK>
[  516.366237][T26824]  __dump_stack+0x1d/0x30
[  516.366268][T26824]  dump_stack_lvl+0x95/0xd0
[  516.366395][T26824]  dump_stack+0x15/0x1b
[  516.366442][T26824]  should_fail_ex+0x259/0x270
[  516.366497][T26824]  ? call_usermodehelper_setup+0x72/0x190
[  516.366521][T26824]  should_failslab+0x8c/0xb0
[  516.366558][T26824]  __kmalloc_cache_noprof+0x5d/0x3e0
[  516.366629][T26824]  ? __kmalloc_node_track_caller_noprof+0x45b/0x4d0
[  516.366667][T26824]  ? call_usermodehelper_setup+0x72/0x190
[  516.366693][T26824]  ? __pfx_free_modprobe_argv+0x10/0x10
[  516.366845][T26824]  call_usermodehelper_setup+0x72/0x190
[  516.366948][T26824]  __request_module+0x264/0x3c0
[  516.366982][T26824]  ? capable+0x81/0xb0
[  516.367011][T26824]  dev_load+0x61/0xc0
[  516.367107][T26824]  dev_ioctl+0x4fe/0x960
[  516.367135][T26824]  sock_do_ioctl+0x1aa/0x230
[  516.367169][T26824]  sock_ioctl+0x439/0x610
[  516.367197][T26824]  ? __pfx_sock_ioctl+0x10/0x10
[  516.367299][T26824]  __se_sys_ioctl+0xce/0x140
[  516.367333][T26824]  __x64_sys_ioctl+0x43/0x50
[  516.367412][T26824]  x64_sys_call+0x239d/0x2550
[  516.367443][T26824]  do_syscall_64+0x112/0x360
[  516.367481][T26824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.367552][T26824] RIP: 0033:0x7f4249e6fb19
[  516.367572][T26824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.367725][T26824] RSP: 002b:00007f42488bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  516.367761][T26824] RAX: ffffffffffffffda RBX: 00007f424a0f5fa0 RCX: 00007f4249e6fb19
[  516.367780][T26824] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000003
[  516.367866][T26824] RBP: 00007f4249f07af8 R08: 0000000000000000 R09: 0000000000000000
[  516.367883][T26824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.367899][T26824] R13: 00007f424a0f6038 R14: 00007f424a0f5fa0 R15: 00007fff80b74748
[  516.367918][T26824]  </TASK>
[  516.475636][T26828] loop2: detected capacity change from 0 to 2048
[  516.525403][T26828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.525559][T26828] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.633501][T26834] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.664786][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.775562][T26841] syzkaller0: entered promiscuous mode
[  516.775622][T26841] syzkaller0: entered allmulticast mode
[  516.824086][T26845] loop9: detected capacity change from 0 to 2048
[  516.855243][T26845]  loop9: p1 < > p4
[  516.856821][T26845] loop9: p4 size 722688 extends beyond EOD, truncated
[  516.986704][T26848] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8312'.
[  517.005438][T26850] netlink: 'syz.9.8313': attribute type 1 has an invalid length.
[  517.006625][T26848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.028064][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.037811][T26850] 8021q: adding VLAN 0 to HW filter on device bond5
[  517.056536][T26850] dummy0: left promiscuous mode
[  517.068499][T26850] bond5: (slave dummy0): making interface the new active one
[  517.069673][T26850] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  517.170385][T26863] loop9: detected capacity change from 0 to 1024
[  517.194369][T26863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.233281][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  517.233297][   T29] audit: type=1400 audit(1793623571.366:1524): avc:  denied  { write } for  pid=26861 comm="syz.9.8319" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  517.303010][T22439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.322078][T26872] loop2: detected capacity change from 0 to 512
[  517.324100][T26872] EXT4-fs: dax option not supported
[  517.472652][T26877] syzkaller0: entered promiscuous mode
[  517.472676][T26877] syzkaller0: entered allmulticast mode
[  517.748089][T26883] netlink: 'syz.9.8326': attribute type 1 has an invalid length.
[  517.795704][T26883] 8021q: adding VLAN 0 to HW filter on device bond6
[  517.861341][T26883] bond5: (slave dummy0): Releasing active interface
[  517.865338][T26894] netlink: 'syz.1.8330': attribute type 1 has an invalid length.
[  517.893128][T26883] bond6: (slave dummy0): making interface the new active one
[  517.894857][T26883] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  517.953683][T26894] 8021q: adding VLAN 0 to HW filter on device bond4
[  517.976010][T26896] bond4: (slave dummy0): making interface the new active one
[  517.990332][T26894] netlink: 'syz.1.8330': attribute type 10 has an invalid length.
[  517.990353][T26894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8330'.
[  517.990399][T26896] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  518.016090][T26894] dummy0: entered promiscuous mode
[  518.027059][T26894] bond4: (slave dummy0): Releasing active interface
[  518.062468][T26893] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8329'.
[  518.243845][T26912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26912 comm=syz.2.8334
[  518.286171][T26887] rxe_eth0 speed is unknown, defaulting to 1000
[  518.420708][T26923] loop4: detected capacity change from 0 to 2048
[  518.425930][T26887] lo speed is unknown, defaulting to 1000
[  518.463779][T26923]  loop4: p1 < > p4
[  518.466539][T26923] loop4: p4 size 722688 extends beyond EOD, truncated
[  518.553935][T26924] syzkaller0: entered promiscuous mode
[  518.553967][T26924] syzkaller0: entered allmulticast mode
[  518.592811][T26129] udevd[26129]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  518.603236][T26131] udevd[26131]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  518.821089][T26938] netlink: 144 bytes leftover after parsing attributes in process `syz.9.8343'.
[  518.832920][T26938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.994331][T26947] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26947 comm=syz.9.8346
[  519.051395][T26950] netlink: 'syz.1.8347': attribute type 1 has an invalid length.
[  519.072094][T26950] 8021q: adding VLAN 0 to HW filter on device bond5
[  519.081853][T26950] dummy0: left promiscuous mode
[  519.090633][T26950] bond5: (slave dummy0): making interface the new active one
[  519.092695][T26950] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  519.160798][T26956] loop1: detected capacity change from 0 to 2048
[  519.185662][T26958] syz_tun: left allmulticast mode
[  519.185726][T26958] syz_tun: left promiscuous mode
[  519.185990][T26958] bridge0: port 1(syz_tun) entered disabled state
[  519.196378][T26956]  loop1: p1 < > p4
[  519.198561][T26956] loop1: p4 size 722688 extends beyond EOD, truncated
[  519.247220][T26887] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.254939][T26887] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.255404][T26887] bridge_slave_0: entered allmulticast mode
[  519.257071][T26887] bridge_slave_0: entered promiscuous mode
[  519.281380][T26887] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.281424][T26887] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.281902][T26887] bridge_slave_1: entered allmulticast mode
[  519.283298][T26887] bridge_slave_1: entered promiscuous mode
[  519.312651][T26965] netlink: 'syz.4.8351': attribute type 1 has an invalid length.
[  519.327009][T26131] udevd[26131]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  519.341378][T26129] udevd[26129]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  519.370467][T26965] 8021q: adding VLAN 0 to HW filter on device bond5
[  519.371931][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8351'.
[  519.415941][T26887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.430243][T26965] bond4: (slave dummy0): Releasing active interface
[  519.444261][T26965] bond5: (slave dummy0): making interface the new active one
[  519.445631][T26965] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  519.453752][T26965] netlink: 'syz.4.8351': attribute type 10 has an invalid length.
[  519.453775][T26965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8351'.
[  519.461817][T26887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.498793][T26965] dummy0: entered promiscuous mode
[  519.501050][T26965] bond5: (slave dummy0): Releasing active interface
[  519.606512][T26887] team0: Port device team_slave_0 added
[  519.613101][T26978] FAULT_INJECTION: forcing a failure.
[  519.613101][T26978] name fail_futex, interval 1, probability 0, space 0, times 0
[  519.613138][T26978] CPU: 1 UID: 0 PID: 26978 Comm: syz.4.8357 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  519.613194][T26978] Tainted: [W]=WARN
[  519.613204][T26978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  519.613265][T26978] Call Trace:
[  519.613315][T26978]  <TASK>
[  519.613380][T26978]  __dump_stack+0x1d/0x30
[  519.613411][T26978]  dump_stack_lvl+0x95/0xd0
[  519.613437][T26978]  dump_stack+0x15/0x1b
[  519.613467][T26978]  should_fail_ex+0x259/0x270
[  519.613506][T26978]  should_fail+0xb/0x20
[  519.613535][T26978]  get_futex_key+0x12c/0xc40
[  519.613562][T26978]  futex_wake+0x89/0x400
[  519.613657][T26978]  do_futex+0x3f8/0x460
[  519.613685][T26978]  __se_sys_futex+0x2f6/0x370
[  519.613726][T26978]  __x64_sys_futex+0x78/0x90
[  519.613810][T26978]  x64_sys_call+0x22e2/0x2550
[  519.613840][T26978]  do_syscall_64+0x112/0x360
[  519.613905][T26978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.613935][T26978] RIP: 0033:0x7f87913dfb19
[  519.613960][T26978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.613997][T26978] RSP: 002b:00007f878fe370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  519.614022][T26978] RAX: ffffffffffffffda RBX: 00007f8791665fa8 RCX: 00007f87913dfb19
[  519.614040][T26978] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8791665fac
[  519.614124][T26978] RBP: 00007f8791665fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  519.614149][T26978] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.614166][T26978] R13: 00007f8791666038 R14: 00007fff56a1da20 R15: 00007fff56a1db08
[  519.614188][T26978]  </TASK>
[  519.710728][T26887] team0: Port device team_slave_1 added
[  519.805121][T26887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.805162][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.807095][T26887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.811695][T26887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.811711][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.811798][T26887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.920149][T26887] hsr_slave_0: entered promiscuous mode
[  519.922076][T26887] hsr_slave_1: entered promiscuous mode
[  520.022794][T26993] netlink: 'syz.9.8364': attribute type 1 has an invalid length.
[  520.073470][T26993] 8021q: adding VLAN 0 to HW filter on device bond7
[  520.086870][T27001] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8364'.
[  520.138115][T26993] bond6: (slave dummy0): Releasing active interface
[  520.156757][T26993] bond7: (slave dummy0): making interface the new active one
[  520.166545][T26993] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  520.181380][T26993] netlink: 'syz.9.8364': attribute type 10 has an invalid length.
[  520.181432][T26993] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8364'.
[  520.206876][T27009] loop2: detected capacity change from 0 to 1024
[  520.225129][T27009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.243905][T26887] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.262693][T26993] dummy0: entered promiscuous mode
[  520.265684][   T29] audit: type=1400 audit(1793623574.396:1525): avc:  denied  { write } for  pid=27008 comm="syz.2.8371" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  520.266944][T26993] bond7: (slave dummy0): Releasing active interface
[  520.306930][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.343100][T26887] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.376386][T27016] loop2: detected capacity change from 0 to 512
[  520.395914][T27014] syzkaller0: entered promiscuous mode
[  520.395934][T27014] syzkaller0: entered allmulticast mode
[  520.406808][T27016] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.8372: inode has both inline data and extents flags
[  520.406921][T27016] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  520.407377][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  520.407398][    C1] EXT4-fs (loop2): initial error at time 1793623574: ext4_orphan_get:1404: inode 15
[  520.407435][    C1] EXT4-fs (loop2): last error at time 1793623574: ext4_orphan_get:1404: inode 15
[  520.409155][T27016] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.8372: couldn't read orphan inode 15 (err -117)
[  520.409194][T27016] loop2: lost filesystem error report for type 5 error -117
[  520.410073][T27016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.417449][   T29] audit: type=1400 audit(1793623574.546:1526): avc:  denied  { write } for  pid=27015 comm="syz.2.8372" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  520.481812][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.532983][T26887] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.588221][T26887] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.618000][T27026] netlink: 144 bytes leftover after parsing attributes in process `syz.9.8377'.
[  520.623134][T27026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.731543][T26887] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  520.746536][T26887] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  520.754743][T26887] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  520.765887][T26887] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  520.766555][T26887] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  520.782467][T27036] loop2: detected capacity change from 0 to 1024
[  520.795179][T26887] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  520.805269][T27036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.826695][   T29] audit: type=1400 audit(1793623574.956:1527): avc:  denied  { write } for  pid=27033 comm="syz.2.8381" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  520.831030][T27036] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  520.831223][T27036] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  520.831284][T27036] EXT4-fs (loop2): This should not happen!! Data will be lost
[  520.831284][T27036] 
[  520.831301][T27036] EXT4-fs (loop2): Total free blocks count 0
[  520.831351][T27036] EXT4-fs (loop2): Free/Dirty block details
[  520.831366][T27036] EXT4-fs (loop2): free_blocks=68451041280
[  520.831383][T27036] EXT4-fs (loop2): dirty_blocks=16
[  520.831532][T27036] EXT4-fs (loop2): Block reservation details
[  520.831547][T27036] EXT4-fs (loop2): i_reserved_data_blocks=1
[  520.835232][T27036] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  520.858811][T26887] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  520.878878][T26887] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  521.017720][ T3396] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  521.023146][ T3396] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  521.036961][T27053] FAULT_INJECTION: forcing a failure.
[  521.036961][T27053] name failslab, interval 1, probability 0, space 0, times 0
[  521.037049][T27053] CPU: 1 UID: 0 PID: 27053 Comm: syz.1.8386 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  521.037107][T27053] Tainted: [W]=WARN
[  521.037117][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  521.037134][T27053] Call Trace:
[  521.037144][T27053]  <TASK>
[  521.037156][T27053]  __dump_stack+0x1d/0x30
[  521.037186][T27053]  dump_stack_lvl+0x95/0xd0
[  521.037266][T27053]  dump_stack+0x15/0x1b
[  521.037291][T27053]  should_fail_ex+0x259/0x270
[  521.037322][T27053]  ? skb_clone+0x151/0x1f0
[  521.037379][T27053]  should_failslab+0x8c/0xb0
[  521.037459][T27053]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  521.037492][T27053]  ? skb_clone+0x151/0x1f0
[  521.037516][T27053]  skb_clone+0x151/0x1f0
[  521.037592][T27053]  netlink_broadcast_filtered+0x4fc/0xe00
[  521.037642][T27053]  netlink_broadcast+0x37/0x50
[  521.037677][T27053]  kobject_uevent_net_broadcast+0x2a0/0x410
[  521.037754][T27053]  kobject_uevent_env+0x424/0x560
[  521.037785][T27053]  ? devres_release_all+0x28b/0x2d0
[  521.037878][T27053]  kobject_uevent+0x1d/0x30
[  521.037909][T27053]  device_del+0x708/0x790
[  521.037953][T27053]  device_destroy+0x66/0xa0
[  521.037987][T27053]  drop_ref+0xbf/0x1a0
[  521.038026][T27053]  hidraw_disconnect+0x39/0x50
[  521.038109][T27053]  hid_hw_stop+0x119/0x160
[  521.038137][T27053]  hid_device_remove+0x94/0x100
[  521.038187][T27053]  ? __pfx_hid_device_remove+0x10/0x10
[  521.038217][T27053]  device_release_driver_internal+0x2bb/0x510
[  521.038358][T27053]  device_release_driver+0x19/0x20
[  521.038386][T27053]  bus_remove_device+0x2fa/0x320
[  521.038440][T27053]  device_del+0x35f/0x790
[  521.038465][T27053]  ? __pfx_uhid_char_release+0x10/0x10
[  521.038558][T27053]  hid_destroy_device+0x54/0x120
[  521.038587][T27053]  uhid_char_release+0x76/0x3c0
[  521.038657][T27053]  __fput+0x286/0x610
[  521.038685][T27053]  ____fput+0x1c/0x30
[  521.038712][T27053]  task_work_run+0x133/0x190
[  521.038775][T27053]  exit_to_user_mode_loop+0x1e4/0x8c0
[  521.038854][T27053]  ? trace_syscall_exit+0xfe/0x120
[  521.038887][T27053]  do_syscall_64+0x212/0x360
[  521.038944][T27053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.038976][T27053] RIP: 0033:0x7f1e5519fb19
[  521.038997][T27053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.039019][T27053] RSP: 002b:00007f1e53bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[  521.039075][T27053] RAX: 0000000000000007 RBX: 00007f1e55425fa0 RCX: 00007f1e5519fb19
[  521.039093][T27053] RDX: 0000000000080000 RSI: 0000000000000007 RDI: 0000000000000008
[  521.039110][T27053] RBP: 00007f1e55237af8 R08: 0000000000000000 R09: 0000000000000000
[  521.039127][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.039193][T27053] R13: 00007f1e55426038 R14: 00007f1e55425fa0 R15: 00007ffe9856bd88
[  521.039229][T27053]  </TASK>
[  521.046517][T27057] tmpfs: Bad value for 'mpol'
[  521.173007][T27056] No such timeout policy "syz1"
[  521.243158][T26887] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.246255][T27058] fido_id[27058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  521.333757][T26887] 8021q: adding VLAN 0 to HW filter on device team0
[  521.362962][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.363009][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.382044][T27063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27063 comm=syz.9.8389
[  521.405333][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.405506][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.456991][T27068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8393'.
[  521.482474][T27070] loop4: detected capacity change from 0 to 1024
[  521.509000][T27070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.535264][   T29] audit: type=1400 audit(1793623575.666:1528): avc:  denied  { write } for  pid=27069 comm="syz.4.8394" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  521.571962][T27070] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  521.572122][T27070] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  521.572150][T27070] EXT4-fs (loop4): This should not happen!! Data will be lost
[  521.572150][T27070] 
[  521.572182][T27070] EXT4-fs (loop4): Total free blocks count 0
[  521.572227][T27070] EXT4-fs (loop4): Free/Dirty block details
[  521.572244][T27070] EXT4-fs (loop4): free_blocks=68451041280
[  521.572261][T27070] EXT4-fs (loop4): dirty_blocks=16
[  521.572274][T27070] EXT4-fs (loop4): Block reservation details
[  521.572302][T27070] EXT4-fs (loop4): i_reserved_data_blocks=1
[  521.592529][T27070] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  521.863498][T27094] netlink: 'syz.9.8402': attribute type 1 has an invalid length.
[  521.901326][T27094] 8021q: adding VLAN 0 to HW filter on device bond8
[  521.913216][T27094] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8402'.
[  521.913593][T27094] dummy0: left promiscuous mode
[  521.925429][T27094] bond8: (slave dummy0): making interface the new active one
[  521.931893][T27094] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  521.942499][T27094] netlink: 'syz.9.8402': attribute type 10 has an invalid length.
[  521.942521][T27094] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8402'.
[  521.971391][T27094] dummy0: entered promiscuous mode
[  521.985384][T27094] bond8: (slave dummy0): Releasing active interface
[  522.002778][T27101] loop4: detected capacity change from 0 to 512
[  522.021793][T27101] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.8404: inode has both inline data and extents flags
[  522.021904][T27101] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  522.022420][T27101] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.8404: couldn't read orphan inode 15 (err -117)
[  522.022452][T27101] loop4: lost filesystem error report for type 5 error -117
[  522.023948][T27101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.059690][   T29] audit: type=1400 audit(1793623576.196:1529): avc:  denied  { write } for  pid=27100 comm="syz.4.8404" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  522.097785][T27107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8405'.
[  522.125794][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.195195][T26887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.232188][T27114] tmpfs: Bad value for 'mpol'
[  522.248116][ T3393] sony 0005:054C:03D5.000D: UNIQ does not contain a MAC address; duplicate check skipped
[  522.269415][ T3393] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000D/input/input10
[  522.274465][ T3393] sony 0005:054C:03D5.000D: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  522.587742][T27136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  523.619274][ T3393] sony 0005:054C:03D5.000E: UNIQ does not contain a MAC address; duplicate check skipped
[  523.631512][ T3393] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000E/input/input11
[  523.635206][T27155] netlink: 'syz.4.8417': attribute type 1 has an invalid length.
[  523.640855][ T3393] sony 0005:054C:03D5.000E: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  523.754742][T27161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8417'.
[  523.869911][T27162] netlink: 'syz.4.8417': attribute type 10 has an invalid length.
[  523.869932][T27162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8417'.
[  524.601646][T27155] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  524.608428][T27157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  524.615034][T27159] dummy0: left promiscuous mode
[  524.650680][T27162] dummy0: entered promiscuous mode
[  524.689738][T26887] veth0_vlan: entered promiscuous mode
[  524.820335][T27166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  524.853673][T26887] veth1_vlan: entered promiscuous mode
[  524.977442][T26887] veth0_macvtap: entered promiscuous mode
[  525.015163][T26887] veth1_macvtap: entered promiscuous mode
[  525.078848][T26887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.110336][T26887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.231119][   T29] audit: type=1400 audit(1793623579.366:1530): avc:  denied  { mount } for  pid=26887 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  525.301293][T27178] loop4: detected capacity change from 0 to 1024
[  525.521705][T27182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27182 comm=syz.9.8432
[  525.704678][T27178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.740109][   T29] audit: type=1400 audit(1793623579.876:1531): avc:  denied  { write } for  pid=27177 comm="syz.4.8430" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  525.794321][T27178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  525.794445][T27178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  525.794475][T27178] EXT4-fs (loop4): This should not happen!! Data will be lost
[  525.794475][T27178] 
[  525.794546][T27178] EXT4-fs (loop4): Total free blocks count 0
[  525.794563][T27178] EXT4-fs (loop4): Free/Dirty block details
[  525.794576][T27178] EXT4-fs (loop4): free_blocks=68451041280
[  525.794590][T27178] EXT4-fs (loop4): dirty_blocks=16
[  525.794604][T27178] EXT4-fs (loop4): Block reservation details
[  525.794618][T27178] EXT4-fs (loop4): i_reserved_data_blocks=1
[  525.897223][T27178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  525.962309][T22645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.962414][T22645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.962454][T22645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.962517][T22645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.032936][T27192] No such timeout policy "syz1"
[  527.075864][T27198] loop7: detected capacity change from 0 to 2048
[  527.089671][T27196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  527.098165][T27198]  loop7: p1 < > p4
[  527.115940][T27198] loop7: p4 size 722688 extends beyond EOD, truncated
[  527.133124][ T2979]  loop7: p1 < > p4
[  527.148750][ T2979] loop7: p4 size 722688 extends beyond EOD, truncated
[  528.382694][   T29] audit: type=1400 audit(1793623582.516:1532): avc:  denied  { append } for  pid=27209 comm="syz.1.8442" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  528.616403][   T29] audit: type=1400 audit(1793623582.746:1533): avc:  denied  { connect } for  pid=27217 comm="syz.7.8444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  528.680628][   T29] audit: type=1400 audit(1793623582.816:1534): avc:  denied  { read } for  pid=27217 comm="syz.7.8444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  528.755788][T27235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  528.893353][T27241] FAULT_INJECTION: forcing a failure.
[  528.893353][T27241] name failslab, interval 1, probability 0, space 0, times 0
[  528.893390][T27241] CPU: 1 UID: 0 PID: 27241 Comm: syz.9.8452 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  528.893423][T27241] Tainted: [W]=WARN
[  528.893432][T27241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  528.893449][T27241] Call Trace:
[  528.893459][T27241]  <TASK>
[  528.893470][T27241]  __dump_stack+0x1d/0x30
[  528.893551][T27241]  dump_stack_lvl+0x95/0xd0
[  528.893579][T27241]  dump_stack+0x15/0x1b
[  528.893604][T27241]  should_fail_ex+0x259/0x270
[  528.893670][T27241]  ? radix_tree_node_alloc+0xa0/0x200
[  528.893712][T27241]  should_failslab+0x8c/0xb0
[  528.893829][T27241]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  528.893865][T27241]  ? uapi_add_get_elm+0x36/0x110
[  528.893949][T27241]  ? radix_tree_node_alloc+0xa0/0x200
[  528.893986][T27241]  radix_tree_node_alloc+0xa0/0x200
[  528.894024][T27241]  radix_tree_insert+0x17b/0x3c0
[  528.894114][T27241]  uapi_add_get_elm+0x4f/0x110
[  528.894148][T27241]  uapi_merge_def+0x64c/0xd50
[  528.894240][T27241]  ? trace_event_buffer_commit+0x174/0x590
[  528.894286][T27241]  ? uverbs_alloc_api+0x4f/0x1420
[  528.894334][T27241]  uapi_merge_def+0x206/0xd50
[  528.894372][T27241]  ? uverbs_alloc_api+0x4f/0x1420
[  528.894437][T27241]  ? __kmalloc_cache_noprof+0x314/0x3e0
[  528.894510][T27241]  uverbs_alloc_api+0xbf/0x1420
[  528.894549][T27241]  ? ida_alloc_range+0x6f4/0x730
[  528.894579][T27241]  ib_uverbs_add_one+0x2b9/0x450
[  528.894676][T27241]  add_client_context+0x297/0x550
[  528.894717][T27241]  enable_device_and_get+0x116/0x260
[  528.894754][T27241]  ib_register_device+0x8c9/0xa40
[  528.894855][T27241]  siw_newlink+0x62d/0x670
[  528.894954][T27241]  nldev_newlink+0x3a8/0x430
[  528.895035][T27241]  ? __pfx_nldev_newlink+0x10/0x10
[  528.895094][T27241]  rdma_nl_rcv+0x439/0x570
[  528.895127][T27241]  ? selinux_nlmsg_lookup+0x9b/0x870
[  528.895232][T27241]  netlink_unicast+0x665/0x740
[  528.895299][T27241]  netlink_sendmsg+0x5ef/0x740
[  528.895335][T27241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  528.895381][T27241]  ____sys_sendmsg+0x54a/0x590
[  528.895409][T27241]  ___sys_sendmsg+0x195/0x1e0
[  528.895441][T27241]  __x64_sys_sendmsg+0xd4/0x160
[  528.895473][T27241]  x64_sys_call+0x22ab/0x2550
[  528.895504][T27241]  do_syscall_64+0x112/0x360
[  528.895539][T27241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.895709][T27241] RIP: 0033:0x7f9b8ee1fb19
[  528.895730][T27241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.895755][T27241] RSP: 002b:00007f9b8d86f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.895784][T27241] RAX: ffffffffffffffda RBX: 00007f9b8f0a5fa0 RCX: 00007f9b8ee1fb19
[  528.895804][T27241] RDX: 000000000000c000 RSI: 0000200000000440 RDI: 0000000000000005
[  528.895824][T27241] RBP: 00007f9b8eeb7af8 R08: 0000000000000000 R09: 0000000000000000
[  528.895844][T27241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.895858][T27241] R13: 00007f9b8f0a6038 R14: 00007f9b8f0a5fa0 R15: 00007ffe2f1f9888
[  528.895914][T27241]  </TASK>
[  529.197255][T27243] syzkaller0: entered promiscuous mode
[  529.202215][T27243] syzkaller0: entered allmulticast mode
[  529.847664][T27254] No such timeout policy "syz1"
[  530.039092][T27264] FAULT_INJECTION: forcing a failure.
[  530.039092][T27264] name failslab, interval 1, probability 0, space 0, times 0
[  530.039128][T27264] CPU: 1 UID: 0 PID: 27264 Comm: syz.7.8461 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  530.039159][T27264] Tainted: [W]=WARN
[  530.039228][T27264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  530.039246][T27264] Call Trace:
[  530.039310][T27264]  <TASK>
[  530.039321][T27264]  __dump_stack+0x1d/0x30
[  530.039348][T27264]  dump_stack_lvl+0x95/0xd0
[  530.039433][T27264]  dump_stack+0x15/0x1b
[  530.039456][T27264]  should_fail_ex+0x259/0x270
[  530.039488][T27264]  ? __kernfs_new_node+0x70/0x440
[  530.039625][T27264]  should_failslab+0x8c/0xb0
[  530.039664][T27264]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  530.039701][T27264]  ? __kernfs_new_node+0x70/0x440
[  530.039739][T27264]  __kernfs_new_node+0x70/0x440
[  530.039765][T27264]  ? __rcu_read_unlock+0x4e/0x70
[  530.039793][T27264]  ? up_write+0x19/0x60
[  530.039822][T27264]  ? kernfs_link_sibling+0x2f5/0x320
[  530.039908][T27264]  ? __rcu_read_unlock+0x4e/0x70
[  530.039973][T27264]  kernfs_new_node+0x107/0x140
[  530.040036][T27264]  __kernfs_create_file+0x4b/0x180
[  530.040103][T27264]  ? __pfx_dev_attr_show+0x10/0x10
[  530.040215][T27264]  ? __pfx_dev_attr_store+0x10/0x10
[  530.040246][T27264]  sysfs_add_file_mode_ns+0x132/0x1b0
[  530.040354][T27264]  sysfs_merge_group+0xed/0x1c0
[  530.040380][T27264]  dpm_sysfs_add+0xaf/0x1e0
[  530.040426][T27264]  device_add+0x3bc/0x790
[  530.040452][T27264]  netdev_register_kobject+0x127/0x240
[  530.040478][T27264]  register_netdevice+0xc68/0x13f0
[  530.040514][T27264]  tun_set_iff+0x603/0x880
[  530.040549][T27264]  __tun_chr_ioctl+0x682/0x1550
[  530.040601][T27264]  ? selinux_file_ioctl+0x333/0x3b0
[  530.040640][T27264]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  530.040749][T27264]  tun_chr_ioctl+0x27/0x40
[  530.040781][T27264]  __se_sys_ioctl+0xce/0x140
[  530.040821][T27264]  __x64_sys_ioctl+0x43/0x50
[  530.040906][T27264]  x64_sys_call+0x239d/0x2550
[  530.040944][T27264]  do_syscall_64+0x112/0x360
[  530.040984][T27264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.041071][T27264] RIP: 0033:0x7f34eceffb19
[  530.041094][T27264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.041118][T27264] RSP: 002b:00007f34eb94f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  530.041147][T27264] RAX: ffffffffffffffda RBX: 00007f34ed185fa0 RCX: 00007f34eceffb19
[  530.041165][T27264] RDX: 0000200000000580 RSI: 00000000400454ca RDI: 0000000000000004
[  530.041213][T27264] RBP: 00007f34ecf97af8 R08: 0000000000000000 R09: 0000000000000000
[  530.041232][T27264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.041250][T27264] R13: 00007f34ed186038 R14: 00007f34ed185fa0 R15: 00007ffc6ff0d608
[  530.041270][T27264]  </TASK>
[  530.531469][T27275] loop4: detected capacity change from 0 to 2048
[  530.552922][T27275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.575626][   T29] audit: type=1400 audit(1793623584.706:1535): avc:  denied  { write } for  pid=27274 comm="syz.4.8465" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  530.615321][T27275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  530.633216][T27275] EXT4-fs (loop4): Remounting filesystem read-only
[  530.663867][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.751998][T27285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8468'.
[  531.126521][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8482'.
[  531.331170][T27316] siw: device registration error -23
[  531.490118][   T29] audit: type=1326 audit(1793623585.626:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.494114][   T29] audit: type=1326 audit(1793623585.626:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.592100][   T29] audit: type=1326 audit(1793623585.726:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.594596][   T29] audit: type=1326 audit(1793623585.726:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.595360][   T29] audit: type=1326 audit(1793623585.726:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.625177][   T29] audit: type=1326 audit(1793623585.726:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.626477][   T29] audit: type=1326 audit(1793623585.756:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.723907][   T29] audit: type=1326 audit(1793623585.856:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  531.760907][   T29] audit: type=1326 audit(1793623585.896:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.9.8485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9b8ee1fb19 code=0x7ffc0000
[  533.478152][T27349] syz_tun: entered allmulticast mode
[  533.496273][T27349] syz_tun: left allmulticast mode
[  533.585156][T27354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8499'.
[  533.602753][T27354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8499'.
[  534.089327][T27371] tipc: Resetting bearer <eth:team0>
[  534.140934][T27374] loop9: detected capacity change from 0 to 1024
[  534.173636][T27374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  534.212111][T27371] bond5: (slave dummy0): Releasing active interface
[  534.213835][T27374] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  534.214056][T27374] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  534.214081][T27374] EXT4-fs (loop9): This should not happen!! Data will be lost
[  534.214081][T27374] 
[  534.214099][T27374] EXT4-fs (loop9): Total free blocks count 0
[  534.214116][T27374] EXT4-fs (loop9): Free/Dirty block details
[  534.214158][T27374] EXT4-fs (loop9): free_blocks=68451041280
[  534.214196][T27374] EXT4-fs (loop9): dirty_blocks=16
[  534.214212][T27374] EXT4-fs (loop9): Block reservation details
[  534.214224][T27374] EXT4-fs (loop9): i_reserved_data_blocks=1
[  534.269672][T27374] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  534.401008][T27371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  534.405067][T27380] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  534.528283][T27386] syz_tun: left allmulticast mode
[  534.591788][T27391] FAULT_INJECTION: forcing a failure.
[  534.591788][T27391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.591829][T27391] CPU: 0 UID: 0 PID: 27391 Comm: syz.4.8514 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  534.591859][T27391] Tainted: [W]=WARN
[  534.591868][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  534.591909][T27391] Call Trace:
[  534.591919][T27391]  <TASK>
[  534.591930][T27391]  __dump_stack+0x1d/0x30
[  534.591976][T27391]  dump_stack_lvl+0x95/0xd0
[  534.592034][T27391]  dump_stack+0x15/0x1b
[  534.592058][T27391]  should_fail_ex+0x259/0x270
[  534.592086][T27391]  should_fail+0xb/0x20
[  534.592184][T27391]  should_fail_usercopy+0x1a/0x20
[  534.592220][T27391]  _copy_from_iter+0xcc/0xe80
[  534.592245][T27391]  ? bcm_tx_setup+0x350/0xee0
[  534.592336][T27391]  ? trace_kmalloc+0x54/0x70
[  534.592372][T27391]  ? __kmalloc_noprof+0x29c/0x4b0
[  534.592409][T27391]  ? bcm_tx_setup+0x350/0xee0
[  534.592459][T27391]  bcm_tx_setup+0x425/0xee0
[  534.592488][T27391]  bcm_sendmsg+0x38c/0x4c0
[  534.592555][T27391]  ? __pfx_bcm_sendmsg+0x10/0x10
[  534.592644][T27391]  ____sys_sendmsg+0x54a/0x590
[  534.592674][T27391]  ___sys_sendmsg+0x195/0x1e0
[  534.592711][T27391]  __x64_sys_sendmsg+0xd4/0x160
[  534.592768][T27391]  x64_sys_call+0x22ab/0x2550
[  534.592825][T27391]  do_syscall_64+0x112/0x360
[  534.592869][T27391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.592898][T27391] RIP: 0033:0x7f87913dfb19
[  534.592929][T27391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.592951][T27391] RSP: 002b:00007f878fe37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.592974][T27391] RAX: ffffffffffffffda RBX: 00007f8791665fa0 RCX: 00007f87913dfb19
[  534.592991][T27391] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004
[  534.593008][T27391] RBP: 00007f8791477af8 R08: 0000000000000000 R09: 0000000000000000
[  534.593077][T27391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.593185][T27391] R13: 00007f8791666038 R14: 00007f8791665fa0 R15: 00007fff56a1db08
[  534.593274][T27391]  </TASK>
[  534.830396][T27401] netlink: 'syz.7.8517': attribute type 1 has an invalid length.
[  534.858672][T27401] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8517'.
[  534.858714][T27401] veth0_to_team: entered promiscuous mode
[  534.858733][T27401] veth0_to_team: entered allmulticast mode
[  536.143235][T27419] bridge_slave_0: left allmulticast mode
[  536.143313][T27419] bridge_slave_0: left promiscuous mode
[  536.143441][T27419] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.150349][T27419] bridge_slave_1: left allmulticast mode
[  536.150397][T27419] bridge_slave_1: left promiscuous mode
[  536.150503][T27419] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.202154][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  536.202172][   T29] audit: type=1400 audit(1793623590.336:1547): avc:  denied  { write } for  pid=27393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  536.429202][   T29] audit: type=1400 audit(1793623590.566:1548): avc:  denied  { write } for  pid=27450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  536.594897][T27455] loop1: detected capacity change from 0 to 1024
[  536.613283][T27455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.637177][   T29] audit: type=1400 audit(1793623590.766:1549): avc:  denied  { write } for  pid=27454 comm="syz.1.8529" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  536.671316][T27455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  536.671534][T27455] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  536.671566][T27455] EXT4-fs (loop1): This should not happen!! Data will be lost
[  536.671566][T27455] 
[  536.671581][T27455] EXT4-fs (loop1): Total free blocks count 0
[  536.671596][T27455] EXT4-fs (loop1): Free/Dirty block details
[  536.671658][T27455] EXT4-fs (loop1): free_blocks=68451041280
[  536.671677][T27455] EXT4-fs (loop1): dirty_blocks=16
[  536.671694][T27455] EXT4-fs (loop1): Block reservation details
[  536.671708][T27455] EXT4-fs (loop1): i_reserved_data_blocks=1
[  536.674055][T27455] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  536.784768][T27419] bond0: (slave bond_slave_1): Releasing backup interface
[  536.840051][T27419] team0: Port device team_slave_0 removed
[  536.863383][T27419] team0: Port device team_slave_1 removed
[  536.880547][T27419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  536.937570][T27429] team0: Mode changed to "loadbalance"
[  536.939938][T27438] tipc: Enabled bearer <eth:team0>, priority 0
[  536.940728][T27435] vlan0: entered promiscuous mode
[  536.982664][T27435] team0: Port device vlan0 added
[  537.149279][T27470] loop4: detected capacity change from 0 to 1024
[  537.174278][T27470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.264955][   T29] audit: type=1400 audit(1793623591.396:1550): avc:  denied  { write } for  pid=27442 comm="syz.4.8526" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  537.591380][   T29] audit: type=1400 audit(1793623591.726:1551): avc:  denied  { write } for  pid=27468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  537.818215][   T29] audit: type=1400 audit(1793623591.956:1552): avc:  denied  { write } for  pid=27504 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.057445][ T3392] tipc: Node number set to 1867339270
[  538.183328][   T29] audit: type=1400 audit(1793623592.316:1553): avc:  denied  { write } for  pid=27508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.250758][   T29] audit: type=1400 audit(1793623592.386:1554): avc:  denied  { write } for  pid=27526 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.413692][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.433280][T27532] loop7: detected capacity change from 0 to 128
[  538.444743][T27532] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  538.545629][T22695] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  538.556103][T22695] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  538.654680][T27534] loop1: detected capacity change from 0 to 2048
[  538.722169][T27534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  538.752646][T27538] netlink: 'syz.4.8551': attribute type 1 has an invalid length.
[  538.864006][T22557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.033189][T27547] netlink: 'syz.7.8554': attribute type 1 has an invalid length.
[  539.070334][T27547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8554'.
[  539.070427][T27547] vlan0: entered promiscuous mode
[  539.070561][T27547] vlan0: entered allmulticast mode
[  539.070631][T27547] veth0_vlan: entered allmulticast mode
[  539.076921][T27547] netlink: 'syz.7.8554': attribute type 10 has an invalid length.
[  539.076945][T27547] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8554'.
[  539.077037][T27547] dummy0: entered promiscuous mode
[  541.117407][T27573] loop9: detected capacity change from 0 to 2048
[  541.144739][T27573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.220266][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8566'.
[  541.225057][T22439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.364696][T27589] netlink: 'syz.9.8567': attribute type 1 has an invalid length.
[  541.401264][T27589] 8021q: adding VLAN 0 to HW filter on device bond9
[  541.408948][T27589] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8567'.
[  541.429279][T27589] bond9: entered promiscuous mode
[  541.429304][T27589] bond9: entered allmulticast mode
[  541.436475][T27589] netlink: 'syz.9.8567': attribute type 10 has an invalid length.
[  541.436496][T27589] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8567'.
[  541.507025][   T29] audit: type=1400 audit(1793623595.636:1555): avc:  denied  { map } for  pid=27593 comm="syz.7.8571" path="socket:[88236]" dev="sockfs" ino=88236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  541.512199][   T29] audit: type=1400 audit(1793623595.646:1556): avc:  denied  { write } for  pid=27593 comm="syz.7.8571" path="socket:[88236]" dev="sockfs" ino=88236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  542.737375][T27613] loop2: detected capacity change from 0 to 2048
[  542.770939][T27613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.785322][   T29] audit: type=1400 audit(1793623596.916:1557): avc:  denied  { write } for  pid=27609 comm="syz.2.8577" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  542.878441][T18597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.965930][T27627] netlink: 'syz.7.8584': attribute type 1 has an invalid length.
[  542.985359][T27627] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8584'.
[  542.985429][T27627] netdevsim netdevsim7 netdevsim3: entered promiscuous mode
[  542.985451][T27627] netdevsim netdevsim7 netdevsim3: entered allmulticast mode
[  542.994585][T27627] netlink: 'syz.7.8584': attribute type 10 has an invalid length.
[  542.994605][T27627] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8584'.
[  543.329039][T27643] loop1: detected capacity change from 0 to 2048
[  543.364119][T27643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  543.397196][   T29] audit: type=1400 audit(1793623597.526:1558): avc:  denied  { write } for  pid=27642 comm="syz.1.8593" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  543.465384][T22557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.665315][   T29] audit: type=1400 audit(1793623597.796:1559): avc:  denied  { write } for  pid=27661 comm="syz.1.8596" path="socket:[87333]" dev="sockfs" ino=87333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  543.816406][ T3396] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  543.827825][ T3396] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  543.922778][T27676] loop4: detected capacity change from 0 to 1024
[  543.963023][T27676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  543.971730][   T29] audit: type=1400 audit(1793623598.106:1560): avc:  denied  { write } for  pid=27674 comm="syz.4.8603" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  543.973880][T27676] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  543.974106][T27676] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  543.974139][T27676] EXT4-fs (loop4): This should not happen!! Data will be lost
[  543.974139][T27676] 
[  543.974155][T27676] EXT4-fs (loop4): Total free blocks count 0
[  543.974172][T27676] EXT4-fs (loop4): Free/Dirty block details
[  543.974261][T27676] EXT4-fs (loop4): free_blocks=68451041280
[  543.974278][T27676] EXT4-fs (loop4): dirty_blocks=16
[  543.974348][T27676] EXT4-fs (loop4): Block reservation details
[  543.974363][T27676] EXT4-fs (loop4): i_reserved_data_blocks=1
[  543.976336][T27676] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  544.266398][T27689] loop4: detected capacity change from 0 to 2048
[  544.315901][T27689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  544.349228][   T29] audit: type=1400 audit(1793623598.476:1561): avc:  denied  { write } for  pid=27686 comm="syz.4.8606" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  544.414542][T22633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.763308][T27723] loop2: detected capacity change from 0 to 1024
[  544.793171][T27723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  544.798031][   T29] audit: type=1400 audit(1793623598.936:1562): avc:  denied  { write } for  pid=27722 comm="syz.2.8617" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  544.839720][T27723] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  544.839910][T27723] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  544.839940][T27723] EXT4-fs (loop2): This should not happen!! Data will be lost
[  544.839940][T27723] 
[  544.840007][T27723] EXT4-fs (loop2): Total free blocks count 0
[  544.840022][T27723] EXT4-fs (loop2): Free/Dirty block details
[  544.840035][T27723] EXT4-fs (loop2): free_blocks=68451041280
[  544.840049][T27723] EXT4-fs (loop2): dirty_blocks=16
[  544.840076][T27723] EXT4-fs (loop2): Block reservation details
[  544.840092][T27723] EXT4-fs (loop2): i_reserved_data_blocks=1
[  544.851417][T27723] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  545.113949][T27730] bridge0: port 3(syz_tun) entered blocking state
[  545.114595][T27730] bridge0: port 3(syz_tun) entered disabled state
[  545.140916][T27730] syz_tun: entered allmulticast mode
[  545.173313][T27730] syz_tun: entered promiscuous mode
[  545.187235][T27730] bridge0: port 3(syz_tun) entered blocking state
[  545.187372][T27730] bridge0: port 3(syz_tun) entered listening state
[  545.644281][T27738] loop1: detected capacity change from 0 to 2048
[  545.887255][T27747] loop7: detected capacity change from 0 to 512
[  545.906785][T27747] EXT4-fs: Ignoring removed oldalloc option
[  545.906838][T27747] EXT4-fs: test_dummy_encryption option not supported
[  546.031006][T22800] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  546.033632][T22800] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  546.036969][T27753] loop7: detected capacity change from 0 to 128
[  546.067466][T27753] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  546.443467][T27738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  546.507641][   T29] audit: type=1400 audit(1793623600.636:1563): avc:  denied  { write } for  pid=27737 comm="syz.1.8621" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  546.584153][T22557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.907911][T27777] loop1: detected capacity change from 0 to 1024
[  546.927210][T27778] ==================================================================
[  546.927240][T27778] BUG: KCSAN: data-race in __set_task_comm / strlen
[  546.927270][T27778] 
[  546.927277][T27778] write to 0xffff8881148a9920 of 8 bytes by task 27779 on cpu 1:
[  546.927294][T27778]  __set_task_comm+0x92/0x180
[  546.927318][T27778]  begin_new_exec+0xec6/0x1200
[  546.927341][T27778]  load_elf_binary+0x5e2/0x18f0
[  546.927362][T27778]  bprm_execve+0x46b/0xa50
[  546.927386][T27778]  kernel_execve+0x6d5/0x710
[  546.927412][T27778]  call_usermodehelper_exec_async+0x196/0x250
[  546.927433][T27778]  ret_from_fork+0x146/0x330
[  546.927460][T27778]  ret_from_fork_asm+0x1a/0x30
[  546.927484][T27778] 
[  546.927491][T27778] read to 0xffff8881148a9920 of 1 bytes by task 27778 on cpu 0:
[  546.927507][T27778]  strlen+0x19/0x40
[  546.927523][T27778]  trace_event_raw_event_sched_stat_runtime+0x5a/0x150
[  546.927553][T27778]  update_se+0x14f/0x3b0
[  546.927578][T27778]  update_curr+0x1e/0x210
[  546.927598][T27778]  enqueue_task_fair+0x77/0x850
[  546.927617][T27778]  ttwu_do_activate+0xa7/0x230
[  546.927640][T27778]  try_to_wake_up+0x3f1/0x660
[  546.927664][T27778]  child_wait_callback+0x111/0x120
[  546.927684][T27778]  __wake_up_sync_key+0x52/0x80
[  546.927713][T27778]  __wake_up_parent+0x36/0x40
[  546.927742][T27778]  selinux_bprm_committed_creds+0x1c2/0x1e0
[  546.927771][T27778]  security_bprm_committed_creds+0x2f/0x50
[  546.927794][T27778]  begin_new_exec+0xffc/0x1200
[  546.927818][T27778]  load_elf_binary+0x5e2/0x18f0
[  546.927838][T27778]  bprm_execve+0x46b/0xa50
[  546.927861][T27778]  kernel_execve+0x6d5/0x710
[  546.927885][T27778]  call_usermodehelper_exec_async+0x196/0x250
[  546.927905][T27778]  ret_from_fork+0x146/0x330
[  546.927937][T27778]  ret_from_fork_asm+0x1a/0x30
[  546.927961][T27778] 
[  546.927967][T27778] value changed: 0x75 -> 0x00
[  546.927979][T27778] 
[  546.927985][T27778] Reported by Kernel Concurrency Sanitizer on:
[  546.927999][T27778] CPU: 0 UID: 0 PID: 27778 Comm: modprobe Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  546.928027][T27778] Tainted: [W]=WARN
[  546.928035][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  546.928048][T27778] ==================================================================
[  546.961190][T27777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.035605][   T29] audit: type=1400 audit(1793623601.166:1564): avc:  denied  { write } for  pid=27776 comm="syz.1.8636" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  547.049208][T27777] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  547.049430][T27777] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  547.052705][T27777] EXT4-fs (loop1): This should not happen!! Data will be lost
[  547.052705][T27777] 
[  547.052732][T27777] EXT4-fs (loop1): Total free blocks count 0
[  547.052820][T27777] EXT4-fs (loop1): Free/Dirty block details
[  547.052836][T27777] EXT4-fs (loop1): free_blocks=68451041280
[  547.052853][T27777] EXT4-fs (loop1): dirty_blocks=16
[  547.052869][T27777] EXT4-fs (loop1): Block reservation details
[  547.052883][T27777] EXT4-fs (loop1): i_reserved_data_blocks=1
[  547.092557][T27777] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28