last executing test programs:

4m45.72383893s ago: executing program 32 (id=56):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x800)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x7f, 0xfffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)

4m44.249193976s ago: executing program 33 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8935, &(0x7f0000000040)={'pimreg\x00', @ifru_map={0x9, 0xfffffefa, 0x2e27, 0x4, 0xd, 0x5}})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x9, 0xc, 0xffffffffffffffff}, {0x8000, 0x9, 0x7ffe, 0x6}]})

4m20.841330633s ago: executing program 34 (id=240):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "93b5aa98c3705c8b", "e422ea4eae9d199b5cdfadf0c3cfc9047452cd1fbcff163129a3425e3e8c7be5", "dee5e3c3", "2bd6745852a5d504"}, 0x38)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

4m17.980186242s ago: executing program 35 (id=344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)

4m2.876489648s ago: executing program 36 (id=578):
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m57.44045864s ago: executing program 37 (id=652):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x79, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000fc0)='scalable', 0x8)
sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="c8b7df938dc9dffcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b3ff61e7d0101b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd4662a22f180e5eb042a742acfe546daedbd31cd4b5cda70186dd7ec449ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc6b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893735e26097a90a63af8f66cdae432cd7ae74af90b87224b", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4", 0x6d}], 0x1}}], 0x2, 0x4000000)

3m52.05763651s ago: executing program 7 (id=733):
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f00000013c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x20004004)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000004c0)={r0, 0x0, 0x5, 0x9, 0x3, 0xf, [0x470, 0x0, 0xffff, 0x0, 0xf95b, 0x4]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe8ff}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0x3000000}}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

3m49.260129608s ago: executing program 7 (id=736):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x39a, &(0x7f0000000340)="$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")
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ff"], 0x0, 0xf}, 0x94)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

3m49.096586092s ago: executing program 7 (id=740):
unshare(0x64000600)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setuid(0xee01)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)

3m48.608872074s ago: executing program 7 (id=758):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x80)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4, 0x0], 0x0, 0x0, 0x2, 0x1}}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

3m48.578183894s ago: executing program 38 (id=758):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x80)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4, 0x0], 0x0, 0x0, 0x2, 0x1}}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

3m33.436537371s ago: executing program 39 (id=998):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
personality(0x87bf5ac905ea0f7f)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})

3m26.432526521s ago: executing program 40 (id=1096):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

2m44.531599075s ago: executing program 5 (id=1794):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil)
unshare(0x4020400)
acct(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00')
unshare(0x2c020400)

2m44.161097615s ago: executing program 5 (id=1784):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)

2m43.780182233s ago: executing program 5 (id=1797):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ff9, 0xf)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4)
sendmsg$netlink(r0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)

2m42.603323292s ago: executing program 5 (id=1816):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000000)={0x4, 0xf5, 0x80000}, 0x20)

2m42.420555567s ago: executing program 5 (id=1818):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
add_key$user(0x0, 0x0, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m42.021789587s ago: executing program 5 (id=1824):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write(r1, &(0x7f0000000100)="ce28aec652", 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0)

2m41.957082108s ago: executing program 41 (id=1824):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write(r1, &(0x7f0000000100)="ce28aec652", 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0)

2m28.144774772s ago: executing program 6 (id=2031):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x20000000}, 0x10)

2m28.066724054s ago: executing program 6 (id=2044):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000001640)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001680)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)="f6", 0x1}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="2000000000000000840000000200000004"], 0x20, 0x40801}, 0x50)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000017c0)={0x0, 0x4, 0x800}, 0x8)

2m27.83311966s ago: executing program 6 (id=2048):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1})
eventfd(0x3ff)
pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

2m27.417521789s ago: executing program 6 (id=2040):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000180)="$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")
open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000740)=@loop={'/dev/loop', 0x0}, &(0x7f0000000780)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000007c0)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x1, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff01000000000000000e00000000001d00", [0x4]})
openat(0xffffffffffffff9c, 0x0, 0x18000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, 0x0)

2m27.252095764s ago: executing program 6 (id=2046):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000001c0)}, 0x20)

2m26.436559093s ago: executing program 6 (id=2058):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x4008, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x52}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4)
sendto$inet(r0, &(0x7f0000000300)='<', 0xfdef, 0x805, 0x0, 0x0)

2m26.436017413s ago: executing program 42 (id=2058):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x4008, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x52}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4)
sendto$inet(r0, &(0x7f0000000300)='<', 0xfdef, 0x805, 0x0, 0x0)

1m40.177558594s ago: executing program 3 (id=3045):
r0 = io_uring_setup(0x5509, &(0x7f0000000340)={0x0, 0x83a4, 0x10, 0x0, 0x213})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008841}, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x25, &(0x7f0000000000)="01", 0x1)

1m40.109579135s ago: executing program 3 (id=3048):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x16, 0x8, &(0x7f0000002540)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000002600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002640)={r1, 0x0, 0xe, 0x0, &(0x7f00000026c0)="0000000004000000000000000000", 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m37.02263737s ago: executing program 3 (id=3063):
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x306580, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f00000001c0)=0x9, 0x9, 0x1)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil)
mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)

1m36.911870053s ago: executing program 3 (id=3068):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000000)={0x4, 0xf5, 0x80000}, 0x20)

1m36.574671881s ago: executing program 3 (id=3070):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="312ba7f79f91b2f480a0d60a013f61353671dff379860a9c60d20d506067355c28dc3ff1316b91f69e7237799d7e6836d63782bf5992185f62dc1c5da324298bb7488dce8f28f212c075b01aa0c429da9972fce050710fa4c11ff56b49d87872c5d809a3efe7953a03e4d4694ac26f1e751ff72a2ac3de22918d16256cf7e7682e6db47e8f2dfbc2aed81181f9f90c8c6b7c34ed29db8d", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x5, 0x56d, &(0x7f0000001500)="$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")
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)=0x40)

1m36.304726468s ago: executing program 3 (id=3071):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x97, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d00), 0xffffffffffffff37}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000d40)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000d80)=r0, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000000f00)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000001080)=r3, 0x4)

1m36.287472938s ago: executing program 43 (id=3071):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x97, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d00), 0xffffffffffffff37}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000d40)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000d80)=r0, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000000f00)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000001080)=r3, 0x4)

1m34.254680288s ago: executing program 7 (id=3072):
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_setup(0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./mysys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m34.029566873s ago: executing program 7 (id=3083):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000680), 0xf4c1, &(0x7f0000fff000/0x1000)=nil, 0x3)

1m18.03630948s ago: executing program 44 (id=3083):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000680), 0xf4c1, &(0x7f0000fff000/0x1000)=nil, 0x3)

55.152198954s ago: executing program 2 (id=3400):
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8], 0xc)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

54.991365018s ago: executing program 2 (id=3407):
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0xb}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040015}, 0x40040)
read(r2, &(0x7f0000000080)=""/1024, 0x400)

54.949557949s ago: executing program 2 (id=3409):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001042dbd7000030000000000", @ANYRES32=0x0, @ANYBLOB="2b8b03"], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x44, 0x1, 0x9, 0x8016}, {0x1, 0x9, 0x7, 0x5}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x7, @mcast1, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x58a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

54.616630257s ago: executing program 2 (id=3419):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000180)="$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")
open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000740)=@loop={'/dev/loop', 0x0}, &(0x7f0000000780)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000007c0)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x1, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff01000000000000000e00000000001d00", [0x4]})
openat(0xffffffffffffff9c, 0x0, 0x18000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, 0x0)

54.488870601s ago: executing program 2 (id=3423):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000002000)=""/8192, 0x2000, 0x800, 0x9, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000004000)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000004040)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000004080)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000040c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004100)={'netdevsim0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000004140)={0x2c, 0xe, r2}, 0x10)

54.128735449s ago: executing program 2 (id=3424):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4)
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)='*', 0x1}], 0x1, 0xd)

54.128497359s ago: executing program 45 (id=3424):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4)
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)='*', 0x1}], 0x1, 0xd)

8.171519962s ago: executing program 0 (id=3863):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000008c23de67af"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

8.170342702s ago: executing program 0 (id=3866):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}})
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

8.036922316s ago: executing program 9 (id=3874):
clock_adjtime(0xffffffd3, &(0x7f0000000380)={0xb, 0x3, 0x9, 0xa000000, 0x7, 0x43, 0x52e6ac5d, 0x4, 0x9657, 0xfffffffffffffffe, 0x200000000000006, 0x8000000000000, 0x5, 0x80000007, 0x7fffffffffffff, 0x916, 0xfffffffffffffffe, 0x85, 0x17, 0x3, 0x19, 0x1, 0x2200000006, 0xfffffffffffffffc, 0x7, 0xa})
socket$nl_generic(0x10, 0x3, 0x10)
ptrace$getregset(0x4205, 0x0, 0x202, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000680)=""/126, 0x7e}], 0x1, 0x111, 0x0)

7.958973758s ago: executing program 0 (id=3875):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r1 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

7.896719579s ago: executing program 9 (id=3877):
iopl(0x3)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
waitid(0x2, r1, 0x0, 0x4, 0x0)

7.881412499s ago: executing program 0 (id=3878):
r0 = openat(0xffffffffffffff9c, 0x0, 0xc8442, 0x11)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="000900002537a940240012800b0001006772657461700000140002800600020022000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x2, 0x4, 0x29, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

1.051773735s ago: executing program 0 (id=3883):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000340)=[{&(0x7f0000000380)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)

1.050994165s ago: executing program 9 (id=3886):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.050591305s ago: executing program 9 (id=3888):
mknod(0x0, 0x1000, 0x4c)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0)
mount(0x0, &(0x7f0000000840)='./sys\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000100000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000000000100014000180090001006c617374000000000400028014000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r0)

1.050451645s ago: executing program 9 (id=3889):
socket$inet_tcp(0x2, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r1, 0x802)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)

874.415929ms ago: executing program 0 (id=3892):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x401, 0x2, 0x5]}, &(0x7f0000000080)=0x44)
connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000180)='j', 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

873.699379ms ago: executing program 9 (id=3893):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)

625.411965ms ago: executing program 4 (id=3899):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000480)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3df974", 0x3}], 0x1}}], 0x1, 0x24040014)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600), 0x4)

621.581805ms ago: executing program 1 (id=3900):
gettid()
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

609.812275ms ago: executing program 4 (id=3902):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xb)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20804}, 0x44800)
memfd_create(&(0x7f00000001c0)='^\x00', 0x2)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000000)=""/132, &(0x7f00000000c0)=0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48)

589.831386ms ago: executing program 4 (id=3903):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x2000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

582.510046ms ago: executing program 1 (id=3904):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="800000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000005800128009000100766c616e000000004800028006000100010000000400048006000500810000000600050088a800000c00020007000000000000001c0003800c0001000a000000000000380c00010044bf0000ffffff7f08000500", @ANYRES32=r4], 0x80}, 0x1, 0x0, 0x0, 0x20000600}, 0x40c0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

571.190736ms ago: executing program 4 (id=3905):
r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
ptrace$cont(0x1f, r0, 0xf658, 0xf)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

517.846398ms ago: executing program 4 (id=3906):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
sync_file_range(r1, 0x2202, 0x80000001, 0x459d40a2f537aae9)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0)
writev(r2, &(0x7f00000003c0), 0x100000000000022d)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)

476.129379ms ago: executing program 1 (id=3907):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
personality(0x87bf5ac905ea0f7f)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r1, 0x2007ffb)

455.572669ms ago: executing program 1 (id=3908):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

440.587989ms ago: executing program 1 (id=3909):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @mcast1, 0x40}, 0x1c)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xe, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='2', 0x1)

299.087253ms ago: executing program 8 (id=3914):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @broadcast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})

291.821273ms ago: executing program 1 (id=3915):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1ff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

271.480244ms ago: executing program 4 (id=3916):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000200)="c7", 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

193.839256ms ago: executing program 8 (id=3917):
r0 = io_uring_setup(0x68f6, &(0x7f0000000380)={0x0, 0xe6f1, 0x1, 0x4, 0x100016b})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90)
close_range(r0, 0xffffffffffffffff, 0x0)

177.853866ms ago: executing program 8 (id=3918):
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000e00)=0x7, 0x127)

125.111177ms ago: executing program 8 (id=3919):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3)
chdir(0x0)
ioprio_set$pid(0x7, 0x0, 0x2004)

107.688258ms ago: executing program 8 (id=3920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd75, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

0s ago: executing program 8 (id=3921):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000})
fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

nsert_color+0x291/0x2a0
[  223.426475][T15743]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  223.426586][T15743]  ? mbind_range+0x2fd/0x430
[  223.426618][T15743]  __se_sys_mbind+0xc9c/0xdd0
[  223.426694][T15743]  __x64_sys_mbind+0x78/0x90
[  223.426737][T15743]  x64_sys_call+0x1d78/0x2550
[  223.426766][T15743]  do_syscall_64+0x112/0x360
[  223.426795][T15743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.426893][T15743] RIP: 0033:0x7ff85815e559
[  223.426911][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.426933][T15743] RSP: 002b:00007ff856bb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  223.426969][T15743] RAX: ffffffffffffffda RBX: 00007ff8583e5fa0 RCX: 00007ff85815e559
[  223.426986][T15743] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000
[  223.427001][T15743] RBP: 00007ff8581f58b0 R08: 0000000000000000 R09: 0000000000000002
[  223.427053][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.427067][T15743] R13: 00007ff8583e6038 R14: 00007ff8583e5fa0 R15: 00007fffda197128
[  223.427089][T15743]  </TASK>
[  223.802275][   T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  223.802333][   T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  224.145403][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3057'.
[  226.564330][   T29] audit: type=1326 audit(1792152960.008:18750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.564461][   T29] audit: type=1326 audit(1792152960.008:18751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.571099][   T29] audit: type=1326 audit(1792152960.018:18752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.571175][   T29] audit: type=1326 audit(1792152960.018:18753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.571206][   T29] audit: type=1326 audit(1792152960.018:18754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.632168][   T29] audit: type=1326 audit(1792152960.068:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.632267][   T29] audit: type=1326 audit(1792152960.068:18756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.632736][   T29] audit: type=1326 audit(1792152960.068:18757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f646801e559 code=0x7ffc0000
[  226.771045][T15825] loop3: detected capacity change from 0 to 512
[  226.771701][T15825] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  226.860547][T15819] loop8: detected capacity change from 0 to 8192
[  226.929011][ T6538] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  226.929140][ T6538] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  227.412313][T15834] rxe_eth0 speed is unknown, defaulting to 1000
[  227.445424][T15834] lo speed is unknown, defaulting to 1000
[  227.578511][T15847] xt_hashlimit: max too large, truncated to 1048576
[  227.647826][T15834] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.647854][T15834] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.648040][T15834] bridge_slave_0: entered allmulticast mode
[  227.648439][T15834] bridge_slave_0: entered promiscuous mode
[  227.690555][T15834] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.690615][T15834] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.690740][T15834] bridge_slave_1: entered allmulticast mode
[  227.691239][T15834] bridge_slave_1: entered promiscuous mode
[  227.729057][T15834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.729949][T15834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.761263][T15834] team0: Port device team_slave_0 added
[  227.762185][T15834] team0: Port device team_slave_1 added
[  227.772087][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.772100][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.772192][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.772768][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.772780][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.772809][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.789351][T15834] hsr_slave_0: entered promiscuous mode
[  227.789643][T15834] hsr_slave_1: entered promiscuous mode
[  227.789839][T15834] debugfs: 'hsr0' already exists in 'hsr'
[  227.789852][T15834] Cannot create hsr debugfs directory
[  227.984105][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  227.984126][   T29] audit: type=1400 audit(1792152961.428:18761): avc:  denied  { write } for  pid=15855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.006718][   T29] audit: type=1400 audit(1792152961.438:18762): avc:  denied  { write } for  pid=15867 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.153507][   T29] audit: type=1400 audit(1792152961.598:18763): avc:  denied  { write } for  pid=15870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.193045][   T29] audit: type=1400 audit(1792152961.638:18764): avc:  denied  { write } for  pid=15884 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.227837][T15834] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  228.237881][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  228.238509][T15834] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  228.256504][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  228.257092][T15834] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  228.274447][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  228.275358][T15834] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  228.277842][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  228.324417][T15834] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.324503][T15834] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.324576][T15834] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.324662][T15834] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.330614][   T29] audit: type=1400 audit(1792152961.768:18765): avc:  denied  { write } for  pid=15886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.380324][   T29] audit: type=1400 audit(1792152961.798:18766): avc:  denied  { write } for  pid=15903 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.439270][T15834] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.459810][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.467813][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.506328][T15834] 8021q: adding VLAN 0 to HW filter on device team0
[  228.519410][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.519441][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.542237][ T4952] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.542269][ T4952] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.634917][T15925] FAULT_INJECTION: forcing a failure.
[  228.634917][T15925] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  228.634951][T15925] CPU: 0 UID: 0 PID: 15925 Comm: syz.0.3080 Not tainted syzkaller #0 PREEMPT(lazy) 
[  228.634978][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.634993][T15925] Call Trace:
[  228.635016][T15925]  <TASK>
[  228.635025][T15925]  __dump_stack+0x1d/0x30
[  228.635054][T15925]  dump_stack_lvl+0x95/0xd0
[  228.635080][T15925]  dump_stack+0x15/0x1b
[  228.635118][T15925]  should_fail_ex+0x262/0x280
[  228.635149][T15925]  should_fail_alloc_page+0xf2/0x100
[  228.635258][T15925]  __alloc_frozen_pages_noprof+0x157/0x400
[  228.635287][T15925]  alloc_pages_mpol+0xaf/0x1d0
[  228.635318][T15925]  folio_alloc_mpol_noprof+0x39/0x80
[  228.635356][T15925]  shmem_get_folio_gfp+0x3ff/0xd90
[  228.635398][T15925]  shmem_fallocate+0x631/0x8d0
[  228.635431][T15925]  vfs_fallocate+0x3ac/0x400
[  228.635455][T15925]  __x64_sys_fallocate+0x7a/0xd0
[  228.635507][T15925]  x64_sys_call+0x1e1d/0x2550
[  228.635591][T15925]  do_syscall_64+0x112/0x360
[  228.635672][T15925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.635699][T15925] RIP: 0033:0x7f0f001be559
[  228.635718][T15925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.635740][T15925] RSP: 002b:00007f0efec17028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  228.635762][T15925] RAX: ffffffffffffffda RBX: 00007f0f00445fa0 RCX: 00007f0f001be559
[  228.635815][T15925] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000004
[  228.635830][T15925] RBP: 00007f0f002558b0 R08: 0000000000000000 R09: 0000000000000000
[  228.635846][T15925] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000
[  228.635860][T15925] R13: 00007f0f00446038 R14: 00007f0f00445fa0 R15: 00007ffc150df378
[  228.635942][T15925]  </TASK>
[  228.639131][T15926] loop8: detected capacity change from 0 to 512
[  228.640682][   T29] audit: type=1400 audit(1792152962.078:18767): avc:  denied  { write } for  pid=15905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.742675][T15926] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3092: bg 0: block 385: padding at end of block bitmap is not set
[  228.742709][T15926] loop8: lost filesystem error report for type 5 error -117
[  228.742874][T15926] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  228.742892][T15926] loop8: lost filesystem error report for type 5 error -117
[  228.744580][T15926] EXT4-fs (loop8): 2 truncates cleaned up
[  228.744992][T15926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.761295][T15938] ip_tables: iptables: counters copy to user failed while replacing table
[  228.773281][   T29] audit: type=1400 audit(1792152962.208:18768): avc:  denied  { write } for  pid=15923 comm="syz.8.3092" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  228.780186][   T29] audit: type=1400 audit(1792152962.208:18769): avc:  denied  { write } for  pid=15935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  228.915589][T15834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.936361][T11291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.054705][   T29] audit: type=1400 audit(1792152962.498:18770): avc:  denied  { write } for  pid=15946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  229.097284][T15834] veth0_vlan: entered promiscuous mode
[  229.101834][T15834] veth1_vlan: entered promiscuous mode
[  229.117801][T15834] veth0_macvtap: entered promiscuous mode
[  229.122562][T15834] veth1_macvtap: entered promiscuous mode
[  229.135193][T15834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.147605][T15834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.200543][ T2807] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.202471][   T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.202523][   T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.202553][   T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.269649][T15995] loop8: detected capacity change from 0 to 512
[  229.277261][T15995] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  229.321484][T11291] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  229.321610][T11291] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  229.880201][T16001] syz_tun (unregistering): left allmulticast mode
[  230.120417][    C1] ip6_tunnel: .²ê xmit: Local address not yet configured!
[  244.840581][    C1] ip6_tunnel: .²ê xmit: Local address not yet configured!
[  245.647496][ T4952] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.689430][ T4952] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.713309][T16114] rxe_eth0 speed is unknown, defaulting to 1000
[  245.747083][ T4952] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.806999][T16114] lo speed is unknown, defaulting to 1000
[  245.807607][ T2426] IPVS: starting estimator thread 0...
[  245.807947][T16116] rxe_eth0 speed is unknown, defaulting to 1000
[  245.901779][T16151] IPVS: using max 2544 ests per chain, 127200 per kthread
[  245.909416][T16116] lo speed is unknown, defaulting to 1000
[  245.975796][ T4952] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.158770][ T4952] bridge_slave_1: left allmulticast mode
[  246.158790][ T4952] bridge_slave_1: left promiscuous mode
[  246.158913][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.159712][ T4952] bridge_slave_0: left allmulticast mode
[  246.159728][ T4952] bridge_slave_0: left promiscuous mode
[  246.159844][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.205989][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'.
[  246.265617][ T4952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.268721][ T4952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.269891][ T4952] bond0 (unregistering): Released all slaves
[  246.326864][T16114] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.326898][T16114] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.327087][T16114] bridge_slave_0: entered allmulticast mode
[  246.327501][T16114] bridge_slave_0: entered promiscuous mode
[  246.328887][T16114] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.328981][T16114] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.329049][T16114] bridge_slave_1: entered allmulticast mode
[  246.329702][T16114] bridge_slave_1: entered promiscuous mode
[  246.342381][T16114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.344721][T16114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.359530][T16114] team0: Port device team_slave_0 added
[  246.362349][T16114] team0: Port device team_slave_1 added
[  246.378287][T16114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.378301][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.378331][T16114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.379258][T16114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.379270][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.379300][T16114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.407998][T16114] hsr_slave_0: entered promiscuous mode
[  246.408410][T16114] hsr_slave_1: entered promiscuous mode
[  246.408710][T16114] debugfs: 'hsr0' already exists in 'hsr'
[  246.408723][T16114] Cannot create hsr debugfs directory
[  246.645308][T16197] ip_tables: iptables: counters copy to user failed while replacing table
[  246.678406][ T4952] hsr_slave_0: left promiscuous mode
[  246.679138][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  246.679208][   T29] audit: type=1400 audit(1792152980.118:18788): avc:  denied  { write } for  pid=16187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  246.685827][ T4952] hsr_slave_1: left promiscuous mode
[  246.686261][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.686281][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.693239][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.693299][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.715161][   T29] audit: type=1400 audit(1792152980.138:18789): avc:  denied  { write } for  pid=16203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  246.728120][ T4952] veth1_macvtap: left promiscuous mode
[  246.728146][ T4952] veth0_macvtap: left promiscuous mode
[  246.728259][ T4952] veth1_vlan: left promiscuous mode
[  246.728376][ T4952] veth0_vlan: left promiscuous mode
[  246.809280][T16209] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3127'.
[  246.847419][ T4952] team0 (unregistering): Port device team_slave_1 removed
[  246.850275][ T4952] team0 (unregistering): Port device team_slave_0 removed
[  246.898760][T16116] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.898795][T16116] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.898920][T16116] bridge_slave_0: entered allmulticast mode
[  246.899480][T16116] bridge_slave_0: entered promiscuous mode
[  246.900659][ T3031] 8021q: adding VLAN 0 to HW filter on device eth1
[  246.905375][T16209] bridge3: entered promiscuous mode
[  246.905393][T16209] bridge3: entered allmulticast mode
[  246.907926][T16209] team0: Port device bridge3 added
[  246.908044][T16211] bridge0: port 3(team0) entered blocking state
[  246.908072][T16211] bridge0: port 3(team0) entered disabled state
[  246.908217][T16211] team0: entered allmulticast mode
[  246.908284][T16211] team_slave_0: entered allmulticast mode
[  246.908300][T16211] team_slave_1: entered allmulticast mode
[  246.909364][T16211] team0: entered promiscuous mode
[  246.909378][T16211] team_slave_0: entered promiscuous mode
[  246.909633][T16211] team_slave_1: entered promiscuous mode
[  246.910037][T16211] bridge0: port 3(team0) entered blocking state
[  246.910066][T16211] bridge0: port 3(team0) entered forwarding state
[  246.916404][T16116] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.916435][T16116] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.916566][T16116] bridge_slave_1: entered allmulticast mode
[  246.916967][T16116] bridge_slave_1: entered promiscuous mode
[  246.978053][T16116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.989460][T16116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.031491][T16116] team0: Port device team_slave_0 added
[  247.037361][T16116] team0: Port device team_slave_1 added
[  247.073659][T16116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.073675][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.073706][T16116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.074320][T16116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.074334][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.074366][T16116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.119782][T16116] hsr_slave_0: entered promiscuous mode
[  247.120159][T16116] hsr_slave_1: entered promiscuous mode
[  247.125392][T16116] debugfs: 'hsr0' already exists in 'hsr'
[  247.125408][T16116] Cannot create hsr debugfs directory
[  247.195090][   T29] audit: type=1400 audit(1792152980.638:18790): avc:  denied  { write } for  pid=16218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.223782][   T29] audit: type=1400 audit(1792152980.648:18791): avc:  denied  { write } for  pid=16230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.249317][ T3031] 8021q: adding VLAN 0 to HW filter on device eth2
[  247.383167][   T29] audit: type=1400 audit(1792152980.828:18792): avc:  denied  { write } for  pid=16234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.415289][   T29] audit: type=1400 audit(1792152980.838:18793): avc:  denied  { write } for  pid=16245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.416318][ T3031] 8021q: adding VLAN 0 to HW filter on device eth4
[  247.507294][T16116] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.511010][T16114] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  247.524876][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.525652][T16114] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  247.536167][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  247.537162][T16114] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  247.550216][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  247.550375][   T29] audit: type=1400 audit(1792152980.988:18794): avc:  denied  { write } for  pid=16248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.570210][   T29] audit: type=1400 audit(1792152981.008:18795): avc:  denied  { write } for  pid=16259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.585826][T16116] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.608253][T16114] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  247.619781][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  247.634662][ T3031] 8021q: adding VLAN 0 to HW filter on device eth3
[  247.665019][T16116] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.720778][T16116] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.799131][   T29] audit: type=1400 audit(1792152981.238:18796): avc:  denied  { write } for  pid=16261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.823348][T16116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  247.833639][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.834212][T16116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  247.842477][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  247.854751][T16114] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.855269][T16116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  247.863970][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  247.864750][T16116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  247.872945][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  247.883535][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'.
[  247.916917][   T29] audit: type=1400 audit(1792152981.358:18797): avc:  denied  { write } for  pid=16286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.923380][T16114] 8021q: adding VLAN 0 to HW filter on device team0
[  247.958154][T16292] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  247.966822][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.966855][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.974246][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.974279][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.024628][T16297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'.
[  248.182836][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3126'.
[  248.219812][T16116] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.249670][T16116] 8021q: adding VLAN 0 to HW filter on device team0
[  248.262267][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.262303][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.275153][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.275187][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.503231][T16114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.645860][T16116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.726268][T16114] veth0_vlan: entered promiscuous mode
[  248.734290][T16114] veth1_vlan: entered promiscuous mode
[  248.762393][T16114] veth0_macvtap: entered promiscuous mode
[  248.767964][T16114] veth1_macvtap: entered promiscuous mode
[  248.795730][T16114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.804293][T16114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.830650][ T2347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.830686][ T2347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.830719][ T2347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.830764][ T2347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.973825][T16397] loop2: detected capacity change from 0 to 2048
[  248.993088][T16397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.003713][T16116] veth0_vlan: entered promiscuous mode
[  249.006395][T16116] veth1_vlan: entered promiscuous mode
[  249.016120][T16116] veth0_macvtap: entered promiscuous mode
[  249.018076][T16116] veth1_macvtap: entered promiscuous mode
[  249.066353][T16116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.071496][T16116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.091218][ T2347] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.091367][ T2347] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.091562][ T2347] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.091696][ T2347] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.144368][T16114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.186451][T16425] ip_tables: iptables: counters copy to user failed while replacing table
[  249.259829][T16432] batadv0: mtu less than device minimum
[  249.260464][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.260864][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.261476][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.262243][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.262749][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.263342][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.263926][T16432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.323830][T16432] netlink: 'syz.9.3134': attribute type 10 has an invalid length.
[  249.323848][T16432] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3134'.
[  249.323869][T16432] batadv0: entered promiscuous mode
[  249.323884][T16432] batadv0: entered allmulticast mode
[  249.324867][T16432] bridge0: port 4(batadv0) entered blocking state
[  249.324897][T16432] bridge0: port 4(batadv0) entered disabled state
[  249.337646][T16432] bridge0: port 4(batadv0) entered blocking state
[  249.337705][T16432] bridge0: port 4(batadv0) entered forwarding state
[  249.464104][T16454] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3144'.
[  249.499965][T16458] FAULT_INJECTION: forcing a failure.
[  249.499965][T16458] name failslab, interval 1, probability 0, space 0, times 0
[  249.500012][T16458] CPU: 0 UID: 0 PID: 16458 Comm: syz.8.3145 Not tainted syzkaller #0 PREEMPT(lazy) 
[  249.500063][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  249.500089][T16458] Call Trace:
[  249.500097][T16458]  <TASK>
[  249.500105][T16458]  __dump_stack+0x1d/0x30
[  249.500130][T16458]  dump_stack_lvl+0x95/0xd0
[  249.500203][T16458]  dump_stack+0x15/0x1b
[  249.500228][T16458]  should_fail_ex+0x262/0x280
[  249.500263][T16458]  ? limit_mt_check+0x159/0x2e0
[  249.500291][T16458]  should_failslab+0x8c/0xb0
[  249.500371][T16458]  __kmalloc_cache_noprof+0x7a/0x400
[  249.500474][T16458]  ? memalloc_restore_scope+0x37/0x50
[  249.500508][T16458]  ? limit_mt_check+0x159/0x2e0
[  249.500555][T16458]  limit_mt_check+0x159/0x2e0
[  249.500589][T16458]  xt_check_match+0x3b7/0x5e0
[  249.500615][T16458]  ? xt_find_match+0x208/0x240
[  249.500635][T16458]  ? xt_find_match+0x1e4/0x240
[  249.500683][T16458]  translate_table+0xc1c/0x1220
[  249.500713][T16458]  ? _copy_from_user+0x89/0xb0
[  249.500749][T16458]  do_ip6t_set_ctl+0x73e/0x990
[  249.500844][T16458]  ? __rcu_read_unlock+0x4e/0x70
[  249.500885][T16458]  nf_setsockopt+0x199/0x1b0
[  249.500968][T16458]  ipv6_setsockopt+0x11a/0x130
[  249.500990][T16458]  rawv6_setsockopt+0x1cc/0x3f0
[  249.501135][T16458]  sock_common_setsockopt+0x69/0x80
[  249.501170][T16458]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  249.501233][T16458]  __sys_setsockopt+0x184/0x200
[  249.501258][T16458]  __x64_sys_setsockopt+0x64/0x80
[  249.501292][T16458]  x64_sys_call+0x248f/0x2550
[  249.501320][T16458]  do_syscall_64+0x112/0x360
[  249.501391][T16458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.501423][T16458] RIP: 0033:0x7f000c23e559
[  249.501443][T16458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.501541][T16458] RSP: 002b:00007f000ac97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  249.501565][T16458] RAX: ffffffffffffffda RBX: 00007f000c4c5fa0 RCX: 00007f000c23e559
[  249.501583][T16458] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  249.501603][T16458] RBP: 00007f000c2d58b0 R08: 0000000000000410 R09: 0000000000000000
[  249.501620][T16458] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000000
[  249.501636][T16458] R13: 00007f000c4c6038 R14: 00007f000c4c5fa0 R15: 00007ffe1dbb4dc8
[  249.501656][T16458]  </TASK>
[  249.703602][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  249.703620][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  252.681992][T16581] batman_adv: batadv0: Adding interface: dummy0
[  252.682010][T16581] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.682043][T16581] batman_adv: batadv0: Interface activated: dummy0
[  252.685845][T16581] net_ratelimit: 13 callbacks suppressed
[  252.685859][T16581] batadv0: mtu less than device minimum
[  252.686507][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.687093][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.687636][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.688074][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.688574][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.689046][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.689536][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.690189][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.690694][T16581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.763225][T16587] netlink: 'syz.0.3155': attribute type 10 has an invalid length.
[  252.763245][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3155'.
[  252.842671][T16587] batadv0: entered promiscuous mode
[  252.842709][T16587] batadv0: entered allmulticast mode
[  252.843564][T16587] bridge0: port 3(batadv0) entered blocking state
[  252.843595][T16587] bridge0: port 3(batadv0) entered disabled state
[  252.845990][T16587] bridge0: port 3(batadv0) entered blocking state
[  252.846023][T16587] bridge0: port 3(batadv0) entered forwarding state
[  253.020153][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.024051][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.057218][T16599] tipc: Started in network mode
[  253.057308][T16599] tipc: Node identity 2a3c1d631718, cluster identity 4711
[  253.057341][T16599] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  253.066287][T16598] tipc: Resetting bearer <eth:syzkaller0>
[  253.080509][T16598] tipc: Disabling bearer <eth:syzkaller0>
[  253.159972][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  253.159995][   T29] audit: type=1400 audit(1792152986.598:18823): avc:  denied  { write } for  pid=16605 comm="syz.0.3168" name="c.1" dev="configfs" ino=27814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  253.271218][ T2426] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  253.271235][ T2426] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  253.363497][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3175'.
[  253.539722][T16627] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.671505][T16627] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.747149][T16627] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.776548][T16627] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.860440][ T2347] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.861851][ T2426] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.861890][ T2426] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.861985][ T2426] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.447223][ T2347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.447298][ T2347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.482141][ T2347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.482166][ T2347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.522769][ T2347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.522792][ T2347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.572297][ T2347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.572341][ T2347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.631933][ T2347] bridge_slave_1: left allmulticast mode
[  254.631955][ T2347] bridge_slave_1: left promiscuous mode
[  254.632067][ T2347] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.632651][ T2347] bridge_slave_0: left allmulticast mode
[  254.632712][ T2347] bridge_slave_0: left promiscuous mode
[  254.632795][ T2347] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.634547][ T2347] pimreg9: left allmulticast mode
[  254.684761][ T2347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.685633][ T2347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.686383][ T2347] bond0 (unregistering): Released all slaves
[  254.722592][ T2347] tipc: Left network mode
[  254.767902][   T29] audit: type=1400 audit(1792152988.208:18824): avc:  denied  { write } for  pid=16647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.768761][ T2347] hsr_slave_0: left promiscuous mode
[  254.769114][ T2347] hsr_slave_1: left promiscuous mode
[  254.769551][ T2347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.769567][ T2347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.769904][ T2347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.769919][ T2347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.794827][   T29] audit: type=1400 audit(1792152988.228:18825): avc:  denied  { write } for  pid=16658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.801715][ T2347] veth1_macvtap: left promiscuous mode
[  254.801742][ T2347] veth0_macvtap: left promiscuous mode
[  254.874814][ T2347] team0 (unregistering): Port device team_slave_1 removed
[  254.876628][ T2347] team0 (unregistering): Port device team_slave_0 removed
[  254.894929][ T2426] smc: removing ib device syz0
[  254.904075][ T3031] 8021q: adding VLAN 0 to HW filter on device eth5
[  254.905411][ T8806] infiniband syz0: ib_query_port failed (-19)
[  254.991798][   T29] audit: type=1400 audit(1792152988.438:18826): avc:  denied  { write } for  pid=16661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.034739][   T29] audit: type=1400 audit(1792152988.478:18827): avc:  denied  { write } for  pid=16672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.075636][ T3031] 8021q: adding VLAN 0 to HW filter on device eth6
[  255.149431][   T29] audit: type=1400 audit(1792152988.588:18828): avc:  denied  { write } for  pid=16675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.173668][   T29] audit: type=1400 audit(1792152988.608:18829): avc:  denied  { write } for  pid=16686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.183322][ T3031] 8021q: adding VLAN 0 to HW filter on device eth7
[  255.206182][ T2347] IPVS: stop unused estimator thread 0...
[  255.248522][   T29] audit: type=1400 audit(1792152988.688:18830): avc:  denied  { write } for  pid=16689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.279203][   T29] audit: type=1400 audit(1792152988.718:18831): avc:  denied  { write } for  pid=16700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.311385][ T3031] 8021q: adding VLAN 0 to HW filter on device eth8
[  256.742466][T16718] netlink: 'syz.9.3189': attribute type 1 has an invalid length.
[  256.748896][T16718] 8021q: adding VLAN 0 to HW filter on device bond5
[  256.784071][T16718] bond5: (slave geneve2): making interface the new active one
[  256.786721][T16718] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  256.898152][T16737] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3195'.
[  256.985978][T16756] FAULT_INJECTION: forcing a failure.
[  256.985978][T16756] name failslab, interval 1, probability 0, space 0, times 0
[  256.986045][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.0.3204 Not tainted syzkaller #0 PREEMPT(lazy) 
[  256.986084][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.986100][T16756] Call Trace:
[  256.986108][T16756]  <TASK>
[  256.986117][T16756]  __dump_stack+0x1d/0x30
[  256.986263][T16756]  dump_stack_lvl+0x95/0xd0
[  256.986290][T16756]  dump_stack+0x15/0x1b
[  256.986314][T16756]  should_fail_ex+0x262/0x280
[  256.986389][T16756]  ? dst_alloc+0xbd/0x100
[  256.986420][T16756]  should_failslab+0x8c/0xb0
[  256.986463][T16756]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  256.986507][T16756]  ? dst_alloc+0xbd/0x100
[  256.986633][T16756]  dst_alloc+0xbd/0x100
[  256.986734][T16756]  ip_route_output_key_hash_rcu+0xed9/0x1320
[  256.986769][T16756]  ip_route_output_flow+0x65/0x110
[  256.986796][T16756]  udp_sendmsg+0x12ce/0x14e0
[  256.986823][T16756]  ? inode_doinit_with_dentry+0x98/0x7b0
[  256.986906][T16756]  ? inode_set_ctime_current+0x65b/0x8f0
[  256.986973][T16756]  udpv6_sendmsg+0x8ee/0x1700
[  256.987004][T16756]  ? __rcu_read_unlock+0x4e/0x70
[  256.987051][T16756]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  256.987090][T16756]  ? __pfx_inet6_sendmsg+0x10/0x10
[  256.987118][T16756]  inet6_sendmsg+0xac/0xd0
[  256.987152][T16756]  sock_write_iter+0x21c/0x2f0
[  256.987189][T16756]  ? __pfx_sock_write_iter+0x10/0x10
[  256.987372][T16756]  vfs_write+0x57f/0x9a0
[  256.987459][T16756]  ksys_write+0xdc/0x1a0
[  256.987496][T16756]  __x64_sys_write+0x40/0x50
[  256.987597][T16756]  x64_sys_call+0x154e/0x2550
[  256.987622][T16756]  do_syscall_64+0x112/0x360
[  256.987717][T16756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.987781][T16756] RIP: 0033:0x7f0f001be559
[  256.987799][T16756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.987821][T16756] RSP: 002b:00007f0efec17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  256.987870][T16756] RAX: ffffffffffffffda RBX: 00007f0f00445fa0 RCX: 00007f0f001be559
[  256.987951][T16756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  256.987967][T16756] RBP: 00007f0f002558b0 R08: 0000000000000000 R09: 0000000000000000
[  256.987983][T16756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.987999][T16756] R13: 00007f0f00446038 R14: 00007f0f00445fa0 R15: 00007ffc150df378
[  256.988077][T16756]  </TASK>
[  257.653958][T16814] loop2: detected capacity change from 0 to 2048
[  257.673785][T16814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.680067][   T29] audit: type=1400 audit(1792152991.118:18832): avc:  denied  { write } for  pid=16813 comm="syz.2.3218" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  257.759100][T16114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.641400][   T29] audit: type=1326 audit(1792152992.078:18833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.641434][   T29] audit: type=1326 audit(1792152992.078:18834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.641961][   T29] audit: type=1326 audit(1792152992.088:18835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.641989][   T29] audit: type=1326 audit(1792152992.088:18836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.642692][   T29] audit: type=1326 audit(1792152992.088:18837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.644397][   T29] audit: type=1326 audit(1792152992.088:18838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.644582][   T29] audit: type=1326 audit(1792152992.088:18839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.645163][   T29] audit: type=1326 audit(1792152992.088:18840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.645515][   T29] audit: type=1326 audit(1792152992.088:18841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.645637][   T29] audit: type=1326 audit(1792152992.088:18842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.0.3233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f001be559 code=0x7ffc0000
[  258.714136][T16916] FAULT_INJECTION: forcing a failure.
[  258.714136][T16916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.714166][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.2.3224 Not tainted syzkaller #0 PREEMPT(lazy) 
[  258.714245][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.714260][T16916] Call Trace:
[  258.714267][T16916]  <TASK>
[  258.714275][T16916]  __dump_stack+0x1d/0x30
[  258.714362][T16916]  dump_stack_lvl+0x95/0xd0
[  258.714388][T16916]  dump_stack+0x15/0x1b
[  258.714469][T16916]  should_fail_ex+0x262/0x280
[  258.714500][T16916]  should_fail+0xb/0x20
[  258.714528][T16916]  should_fail_usercopy+0x1a/0x20
[  258.714615][T16916]  _copy_from_user+0x1c/0xb0
[  258.714650][T16916]  proc_do_submiturb+0x822/0x1c70
[  258.714733][T16916]  proc_submiturb+0x7b/0xa0
[  258.714770][T16916]  usbdev_ioctl+0xc5d/0x16a0
[  258.714805][T16916]  ? __pfx_usbdev_ioctl+0x10/0x10
[  258.714839][T16916]  __se_sys_ioctl+0xce/0x140
[  258.714927][T16916]  __x64_sys_ioctl+0x43/0x50
[  258.714961][T16916]  x64_sys_call+0x239d/0x2550
[  258.714991][T16916]  do_syscall_64+0x112/0x360
[  258.715101][T16916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.715126][T16916] RIP: 0033:0x7f5dce5ae559
[  258.715143][T16916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.715164][T16916] RSP: 002b:00007f5dcd007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.715187][T16916] RAX: ffffffffffffffda RBX: 00007f5dce835fa0 RCX: 00007f5dce5ae559
[  258.715239][T16916] RDX: 0000200000000180 RSI: 000000008038550a RDI: 0000000000000003
[  258.715255][T16916] RBP: 00007f5dce6458b0 R08: 0000000000000000 R09: 0000000000000000
[  258.715270][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.715361][T16916] R13: 00007f5dce836038 R14: 00007f5dce835fa0 R15: 00007ffdee0f5428
[  258.715382][T16916]  </TASK>
[  259.602585][T16962] batman_adv: batadv0: Adding interface: syzkaller0
[  259.602602][T16962] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.602697][T16962] batman_adv: batadv0: Interface activated: syzkaller0
[  259.604699][T16961] batman_adv: batadv0: Interface deactivated: syzkaller0
[  259.653868][T16961] batman_adv: batadv0: Removing interface: syzkaller0
[  259.710364][T16971] syzkaller1: entered promiscuous mode
[  259.710382][T16971] syzkaller1: entered allmulticast mode
[  260.628180][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.628342][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.673344][T17000] ./dev/sda1: Can't lookup blockdev
[  260.905620][T17016] netlink: 'syz.0.3269': attribute type 5 has an invalid length.
[  260.926274][T17021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  261.294666][T17060] FAULT_INJECTION: forcing a failure.
[  261.294666][T17060] name failslab, interval 1, probability 0, space 0, times 0
[  261.294694][T17060] CPU: 1 UID: 0 PID: 17060 Comm: syz.8.3265 Not tainted syzkaller #0 PREEMPT(lazy) 
[  261.294725][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  261.294741][T17060] Call Trace:
[  261.294749][T17060]  <TASK>
[  261.294758][T17060]  __dump_stack+0x1d/0x30
[  261.294821][T17060]  dump_stack_lvl+0x95/0xd0
[  261.294842][T17060]  dump_stack+0x15/0x1b
[  261.294862][T17060]  should_fail_ex+0x262/0x280
[  261.294956][T17060]  ? io_cache_alloc_new+0x2a/0xb0
[  261.294989][T17060]  should_failslab+0x8c/0xb0
[  261.295086][T17060]  __kmalloc_noprof+0xd0/0x4d0
[  261.295124][T17060]  ? io_cache_alloc_new+0x2a/0xb0
[  261.295189][T17060]  io_cache_alloc_new+0x2a/0xb0
[  261.295246][T17060]  io_sqe_buffer_register+0x193/0xf50
[  261.295279][T17060]  ? __pfx_futex_wake_mark+0x10/0x10
[  261.295366][T17060]  __io_register_rsrc_update+0x29a/0xaa0
[  261.295396][T17060]  io_register_rsrc_update+0x12f/0x140
[  261.295466][T17060]  __se_sys_io_uring_register+0xc82/0x1340
[  261.295527][T17060]  __x64_sys_io_uring_register+0x55/0x70
[  261.295556][T17060]  x64_sys_call+0x1ff6/0x2550
[  261.295615][T17060]  do_syscall_64+0x112/0x360
[  261.295687][T17060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.295724][T17060] RIP: 0033:0x7f000c23e559
[  261.295791][T17060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.295810][T17060] RSP: 002b:00007f000ac97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  261.295830][T17060] RAX: ffffffffffffffda RBX: 00007f000c4c5fa0 RCX: 00007f000c23e559
[  261.295846][T17060] RDX: 0000200000000280 RSI: 0000000000000010 RDI: 0000000000000003
[  261.295863][T17060] RBP: 00007f000c2d58b0 R08: 0000000000000000 R09: 0000000000000000
[  261.295879][T17060] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[  261.295935][T17060] R13: 00007f000c4c6038 R14: 00007f000c4c5fa0 R15: 00007ffe1dbb4dc8
[  261.295958][T17060]  </TASK>
[  261.772291][T17070] ./dev/sda1: Can't lookup blockdev
[  261.962070][T17091] syzkaller0: entered promiscuous mode
[  261.962089][T17091] syzkaller0: entered allmulticast mode
[  262.002760][T17096] tipc: Started in network mode
[  262.002791][T17096] tipc: Node identity 7edbc357b316, cluster identity 4711
[  262.002824][T17096] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  262.003447][T17095] tipc: Resetting bearer <eth:syzkaller0>
[  262.008357][T17095] tipc: Disabling bearer <eth:syzkaller0>
[  262.147111][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3290'.
[  262.389195][T17148] FAULT_INJECTION: forcing a failure.
[  262.389195][T17148] name failslab, interval 1, probability 0, space 0, times 0
[  262.389216][T17148] CPU: 0 UID: 0 PID: 17148 Comm: syz.2.3298 Not tainted syzkaller #0 PREEMPT(lazy) 
[  262.389234][T17148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  262.389298][T17148] Call Trace:
[  262.389302][T17148]  <TASK>
[  262.389307][T17148]  __dump_stack+0x1d/0x30
[  262.389323][T17148]  dump_stack_lvl+0x95/0xd0
[  262.389338][T17148]  dump_stack+0x15/0x1b
[  262.389356][T17148]  should_fail_ex+0x262/0x280
[  262.389434][T17148]  ? security_sk_alloc+0x52/0x120
[  262.389474][T17148]  should_failslab+0x8c/0xb0
[  262.389547][T17148]  __kmalloc_noprof+0xd0/0x4d0
[  262.389568][T17148]  ? security_sk_alloc+0x52/0x120
[  262.389588][T17148]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  262.389617][T17148]  security_sk_alloc+0x52/0x120
[  262.389637][T17148]  sk_prot_alloc+0xc2/0x180
[  262.389702][T17148]  sk_alloc+0x34/0x3e0
[  262.389717][T17148]  unix_create1+0xa1/0x400
[  262.389770][T17148]  unix_create+0xf6/0x130
[  262.389786][T17148]  __sock_create+0x2e5/0x580
[  262.389834][T17148]  __sys_socketpair+0x1c4/0x430
[  262.389881][T17148]  __x64_sys_socketpair+0x52/0x60
[  262.389894][T17148]  x64_sys_call+0x1bf7/0x2550
[  262.389910][T17148]  do_syscall_64+0x112/0x360
[  262.389998][T17148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.390012][T17148] RIP: 0033:0x7f5dce5ae559
[  262.390052][T17148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.390064][T17148] RSP: 002b:00007f5dcd007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  262.390078][T17148] RAX: ffffffffffffffda RBX: 00007f5dce835fa0 RCX: 00007f5dce5ae559
[  262.390087][T17148] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  262.390095][T17148] RBP: 00007f5dce6458b0 R08: 0000000000000000 R09: 0000000000000000
[  262.390104][T17148] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  262.390123][T17148] R13: 00007f5dce836038 R14: 00007f5dce835fa0 R15: 00007ffdee0f5428
[  262.390146][T17148]  </TASK>
[  262.642273][T17165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  263.073582][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'.
[  263.454392][T17218] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  263.653669][T17251] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 0, id = 0
[  263.654611][T17246] IPVS: stopping backup sync thread 17251 ...
[  265.675857][   T29] kauditd_printk_skb: 723 callbacks suppressed
[  265.675877][   T29] audit: type=1400 audit(1792153005.110:19566): avc:  denied  { write } for  pid=17269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  265.695523][   T29] audit: type=1400 audit(1792153005.130:19567): avc:  denied  { write } for  pid=17280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  265.871862][   T29] audit: type=1400 audit(1792153005.310:19568): avc:  denied  { write } for  pid=17284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  265.908713][T17301] netlink: 'syz.1.3340': attribute type 1 has an invalid length.
[  265.929557][T17301] 8021q: adding VLAN 0 to HW filter on device bond3
[  265.939548][   T29] audit: type=1400 audit(1792153005.370:19569): avc:  denied  { write } for  pid=17303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.715444][   T29] audit: type=1400 audit(1792153006.150:19570): avc:  denied  { write } for  pid=17307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.759441][   T29] audit: type=1400 audit(1792153006.190:19571): avc:  denied  { write } for  pid=17330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.842616][T17349] FAULT_INJECTION: forcing a failure.
[  266.842616][T17349] name failslab, interval 1, probability 0, space 0, times 0
[  266.842669][T17349] CPU: 1 UID: 0 PID: 17349 Comm: syz.2.3355 Not tainted syzkaller #0 PREEMPT(lazy) 
[  266.842706][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.842720][T17349] Call Trace:
[  266.842728][T17349]  <TASK>
[  266.842738][T17349]  __dump_stack+0x1d/0x30
[  266.842766][T17349]  dump_stack_lvl+0x95/0xd0
[  266.842793][T17349]  dump_stack+0x15/0x1b
[  266.842846][T17349]  should_fail_ex+0x262/0x280
[  266.842877][T17349]  ? __anon_vma_prepare+0xcd/0x2f0
[  266.842900][T17349]  should_failslab+0x8c/0xb0
[  266.842985][T17349]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  266.843017][T17349]  ? __anon_vma_prepare+0xcd/0x2f0
[  266.843066][T17349]  __anon_vma_prepare+0xcd/0x2f0
[  266.843090][T17349]  handle_mm_fault+0x31b6/0x3bb0
[  266.843126][T17349]  ? vma_is_secretmem+0x16/0x30
[  266.843256][T17349]  __get_user_pages+0x12e9/0x1eb0
[  266.843354][T17349]  get_user_pages_remote+0x1d5/0x6b0
[  266.843386][T17349]  ? down_read+0x77/0xb0
[  266.843465][T17349]  copy_string_kernel+0x1c6/0x460
[  266.843502][T17349]  do_execveat_common+0x650/0x8a0
[  266.843545][T17349]  __x64_sys_execveat+0x76/0xa0
[  266.843680][T17349]  x64_sys_call+0x21ae/0x2550
[  266.843727][T17349]  do_syscall_64+0x112/0x360
[  266.843760][T17349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.843789][T17349] RIP: 0033:0x7f5dce5ae559
[  266.843806][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.843835][T17349] RSP: 002b:00007f5dcd007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  266.843872][T17349] RAX: ffffffffffffffda RBX: 00007f5dce835fa0 RCX: 00007f5dce5ae559
[  266.843887][T17349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  266.843903][T17349] RBP: 00007f5dce6458b0 R08: 0000000000001000 R09: 0000000000000000
[  266.843920][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.843936][T17349] R13: 00007f5dce836038 R14: 00007f5dce835fa0 R15: 00007ffdee0f5428
[  266.843980][T17349]  </TASK>
[  266.859535][T17347] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3354'.
[  266.870039][T17347] ip6erspan0: entered promiscuous mode
[  266.877552][T17347] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3354'.
[  267.063052][T17353] ref_ctr increment failed for inode: 0x579 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811826a1c0
[  267.079585][T17362] loop2: detected capacity change from 0 to 512
[  267.106158][T17362] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.3357: iget: bad i_size value: 38620345925642
[  267.106192][T17362] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  267.106317][T17362] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3357: couldn't read orphan inode 15 (err -117)
[  267.106364][T17362] loop2: lost filesystem error report for type 5 error -117
[  267.106815][T17362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.141636][   T29] audit: type=1400 audit(1792153006.560:19572): avc:  denied  { write } for  pid=17361 comm="syz.2.3357" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.228560][   T29] audit: type=1400 audit(1792153006.660:19573): avc:  denied  { write } for  pid=17346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  267.260916][   T29] audit: type=1400 audit(1792153006.700:19574): avc:  denied  { write } for  pid=17361 comm="syz.2.3357" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.294535][ T2589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:10: bg 0: block 5: invalid block bitmap
[  267.295119][ T2589] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28
[  267.295143][ T2589] EXT4-fs (loop2): This should not happen!! Data will be lost
[  267.295143][ T2589] 
[  267.295157][ T2589] EXT4-fs (loop2): Total free blocks count 0
[  267.295338][ T2589] EXT4-fs (loop2): Free/Dirty block details
[  267.295350][ T2589] EXT4-fs (loop2): free_blocks=0
[  267.295376][ T2589] EXT4-fs (loop2): dirty_blocks=39
[  267.295390][ T2589] EXT4-fs (loop2): Block reservation details
[  267.295458][ T2589] EXT4-fs (loop2): i_reserved_data_blocks=19
[  267.295570][ T2589] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 18 with error 28
[  267.325457][   T29] audit: type=1400 audit(1792153006.760:19575): avc:  denied  { write } for  pid=17380 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  267.432179][T17395] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3366'.
[  267.433065][T17395] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3366'.
[  267.557058][T17407] loop2: detected capacity change from 0 to 164
[  268.069520][T17451] netlink: 'syz.1.3391': attribute type 4 has an invalid length.
[  268.362355][T17479] netlink: 'syz.0.3411': attribute type 1 has an invalid length.
[  268.411903][T17479] bond3: (slave bridge3): making interface the new active one
[  268.412204][T17479] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  268.418231][T17486] netlink: 'syz.9.3403': attribute type 1 has an invalid length.
[  268.463504][T17486] 8021q: adding VLAN 0 to HW filter on device bond6
[  268.485765][T17486] batman_adv: batadv0: Interface deactivated: dummy0
[  268.499662][T17486] batman_adv: batadv0: Removing interface: dummy0
[  268.512312][T17486] bond6: (slave dummy0): Enslaving as a backup interface with an up link
[  268.527684][T17486] netlink: 'syz.9.3403': attribute type 10 has an invalid length.
[  268.527742][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3403'.
[  268.570818][ T2347] net_ratelimit: 11 callbacks suppressed
[  268.570833][ T2347] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  268.579835][T17500] xt_hashlimit: size too large, truncated to 1048576
[  268.617345][T17486] dummy0: entered promiscuous mode
[  268.619475][T17486] bond6: (slave dummy0): Removing an active aggregator
[  268.619629][T17486] bond6: (slave dummy0): Releasing backup interface
[  268.807328][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'.
[  268.906131][T17526] loop2: detected capacity change from 0 to 1024
[  268.908192][T17526] EXT4-fs: Ignoring removed oldalloc option
[  268.908210][T17526] EXT4-fs: Ignoring removed oldalloc option
[  268.932142][T17526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.961937][T17526] loop2: detected capacity change from 1024 to 0
[  268.962571][T17526] EXT4-fs error (device loop2): __ext4_find_entry:1617: inode #2: comm syz.2.3419: reading directory lblock 0
[  268.962615][T17526] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  268.962634][T17526] EXT4-fs (loop2): I/O error while writing superblock
[  269.011590][T16114] EXT4-fs error (device loop2): ext4_get_inode_loc:5054: inode #2: block 5: comm syz-executor: unable to read itable block
[  269.011637][T16114] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  269.011655][T16114] EXT4-fs (loop2): I/O error while writing superblock
[  269.011670][T16114] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: IO failure
[  269.011693][T16114] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  269.011709][T16114] EXT4-fs (loop2): I/O error while writing superblock
[  269.011722][T16114] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error
[  269.011762][T16114] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  269.011777][T16114] EXT4-fs (loop2): I/O error while writing superblock
[  269.114962][T16602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.115578][T16602] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  269.115612][T16602] EXT4-fs (loop2): I/O error while writing superblock
[  269.115951][T17528] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  269.335178][ T2589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.355765][T17538] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3425'.
[  269.355828][T17538] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  269.358321][T17538] 0ªX¹¦Dö»: entered allmulticast mode
[  269.394051][ T2589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.445956][ T2589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.475789][T17539] rxe_eth0 speed is unknown, defaulting to 1000
[  269.505398][ T2589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.559665][ T2589] bridge_slave_1: left allmulticast mode
[  269.559688][ T2589] bridge_slave_1: left promiscuous mode
[  269.559856][ T2589] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.574831][ T2589] bridge_slave_0: left allmulticast mode
[  269.574852][ T2589] bridge_slave_0: left promiscuous mode
[  269.575006][ T2589] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.634830][ T2589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.635880][ T2589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.636608][ T2589] bond0 (unregistering): Released all slaves
[  269.674251][ T2589] tipc: Left network mode
[  269.679004][T17539] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.679086][T17539] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.679133][T17539] bridge_slave_0: entered allmulticast mode
[  269.679655][T17539] bridge_slave_0: entered promiscuous mode
[  269.684991][T17539] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.685024][T17539] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.685160][T17539] bridge_slave_1: entered allmulticast mode
[  269.719570][T17539] bridge_slave_1: entered promiscuous mode
[  269.727967][ T2589] hsr_slave_0: left promiscuous mode
[  269.734323][ T2589] hsr_slave_1: left promiscuous mode
[  269.734866][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.734920][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.742434][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.742455][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.751469][ T2589] veth1_macvtap: left promiscuous mode
[  269.751494][ T2589] veth0_macvtap: left promiscuous mode
[  269.751702][ T2589] veth1_vlan: left promiscuous mode
[  269.751796][ T2589] veth0_vlan: left promiscuous mode
[  269.862989][ T2589] team0 (unregistering): Port device team_slave_1 removed
[  269.871446][ T2589] team0 (unregistering): Port device team_slave_0 removed
[  269.937036][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  269.938218][T17539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.942865][T17539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.017687][T17539] team0: Port device team_slave_0 added
[  270.018605][T17539] team0: Port device team_slave_1 added
[  270.053273][T17539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.053289][T17539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.053393][T17539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.053836][T17539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.053849][T17539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.053881][T17539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.149695][T17539] hsr_slave_0: entered promiscuous mode
[  270.150016][T17539] hsr_slave_1: entered promiscuous mode
[  270.150215][T17539] debugfs: 'hsr0' already exists in 'hsr'
[  270.152267][T17539] Cannot create hsr debugfs directory
[  270.276061][ T3031] 8021q: adding VLAN 0 to HW filter on device eth13
[  270.932634][T17653] loop8: detected capacity change from 0 to 512
[  270.944565][T17653] EXT4-fs: Ignoring removed bh option
[  270.964897][T17653] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  270.966752][T17653] EXT4-fs (loop8): 1 truncate cleaned up
[  270.967224][T17653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.997674][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  270.997690][   T29] audit: type=1400 audit(1792153010.430:19600): avc:  denied  { write } for  pid=17646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.027975][   T29] audit: type=1400 audit(1792153010.450:19601): avc:  denied  { write } for  pid=17666 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.070250][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3456'.
[  271.153587][T16116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.172722][   T29] audit: type=1400 audit(1792153010.610:19602): avc:  denied  { write } for  pid=17669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.185260][T17682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3470'.
[  271.189701][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3459'.
[  271.227587][T17682] syzkaller1: entered promiscuous mode
[  271.227608][T17682] syzkaller1: entered allmulticast mode
[  271.256342][T17539] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  271.259884][T17539] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  271.276607][   T29] audit: type=1400 audit(1792153010.710:19603): avc:  denied  { write } for  pid=17686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.305493][T17539] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  271.319841][T17539] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  271.327480][T17539] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  271.337688][T17539] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  271.339445][T17539] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  271.355641][T17539] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  271.410633][T17539] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.417410][T17539] 8021q: adding VLAN 0 to HW filter on device team0
[  271.422671][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.422704][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.426797][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.426829][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.515869][   T29] audit: type=1400 audit(1792153010.950:19604): avc:  denied  { write } for  pid=17701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.553280][   T29] audit: type=1400 audit(1792153010.990:19605): avc:  denied  { write } for  pid=17719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.576082][T17539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.595914][ T3031] 8021q: adding VLAN 0 to HW filter on device eth14
[  271.679539][   T29] audit: type=1400 audit(1792153011.110:19606): avc:  denied  { write } for  pid=17731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.688959][T17539] veth0_vlan: entered promiscuous mode
[  271.692763][T17539] veth1_vlan: entered promiscuous mode
[  271.704146][T17539] veth0_macvtap: entered promiscuous mode
[  271.706170][T17539] veth1_macvtap: entered promiscuous mode
[  271.714193][T17539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.718723][T17539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.748195][   T29] audit: type=1400 audit(1792153011.180:19607): avc:  denied  { write } for  pid=17748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.771798][ T2426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.771902][ T2426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.771948][ T2426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.771983][ T2426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.806845][ T3031] 8021q: adding VLAN 0 to HW filter on device eth15
[  271.847395][   T29] audit: type=1326 audit(1792153011.280:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.1.3478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  271.847502][   T29] audit: type=1326 audit(1792153011.280:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.1.3478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  272.079770][T17793] loop4: detected capacity change from 0 to 512
[  272.080238][T17793] EXT4-fs: Ignoring removed bh option
[  272.093445][T17793] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  272.098812][T17793] EXT4-fs (loop4): 1 truncate cleaned up
[  272.099257][T17793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.126085][ T3031] 8021q: adding VLAN 0 to HW filter on device eth16
[  272.126640][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'.
[  272.207051][T17805] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001
[  273.580826][T17539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.661318][T17969] FAULT_INJECTION: forcing a failure.
[  273.661318][T17969] name failslab, interval 1, probability 0, space 0, times 0
[  273.661413][T17969] CPU: 1 UID: 0 PID: 17969 Comm: syz.4.3489 Not tainted syzkaller #0 PREEMPT(lazy) 
[  273.661440][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  273.661460][T17969] Call Trace:
[  273.661467][T17969]  <TASK>
[  273.661476][T17969]  __dump_stack+0x1d/0x30
[  273.661504][T17969]  dump_stack_lvl+0x95/0xd0
[  273.661529][T17969]  dump_stack+0x15/0x1b
[  273.661549][T17969]  should_fail_ex+0x262/0x280
[  273.661606][T17969]  ? sctp_auth_shkey_create+0x65/0x110
[  273.661707][T17969]  should_failslab+0x8c/0xb0
[  273.661745][T17969]  __kmalloc_cache_noprof+0x7a/0x400
[  273.661778][T17969]  ? sctp_auth_shkey_create+0x65/0x110
[  273.661819][T17969]  sctp_auth_shkey_create+0x65/0x110
[  273.661883][T17969]  sctp_endpoint_new+0x2cc/0x560
[  273.661967][T17969]  sctp_clone_sock+0x32c/0xc30
[  273.661995][T17969]  ? sock_create_lite+0x250/0x290
[  273.662035][T17969]  sctp_getsockopt_peeloff_common+0x263/0x450
[  273.662111][T17969]  sctp_getsockopt_peeloff_flags+0xaf/0x180
[  273.662185][T17969]  sctp_getsockopt+0x353/0xaa0
[  273.662206][T17969]  sock_common_getsockopt+0x60/0x70
[  273.662289][T17969]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  273.662329][T17969]  do_sock_getsockopt+0x2f5/0x570
[  273.662358][T17969]  __x64_sys_getsockopt+0x11d/0x1a0
[  273.662385][T17969]  x64_sys_call+0x1032/0x2550
[  273.662448][T17969]  do_syscall_64+0x112/0x360
[  273.662547][T17969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.662572][T17969] RIP: 0033:0x7fabd641e559
[  273.662634][T17969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.662656][T17969] RSP: 002b:00007fabd4e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  273.662722][T17969] RAX: ffffffffffffffda RBX: 00007fabd66a5fa0 RCX: 00007fabd641e559
[  273.662738][T17969] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  273.662751][T17969] RBP: 00007fabd64b58b0 R08: 0000200000000640 R09: 0000000000000000
[  273.662764][T17969] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  273.662779][T17969] R13: 00007fabd66a6038 R14: 00007fabd66a5fa0 R15: 00007ffeac76eb78
[  273.662841][T17969]  </TASK>
[  274.280443][    C1] ip6_tunnel: .²ê xmit: Local address not yet configured!
[  274.621924][T18000] FAULT_INJECTION: forcing a failure.
[  274.621924][T18000] name failslab, interval 1, probability 0, space 0, times 0
[  274.621951][T18000] CPU: 1 UID: 0 PID: 18000 Comm: syz.0.3504 Not tainted syzkaller #0 PREEMPT(lazy) 
[  274.621980][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.621995][T18000] Call Trace:
[  274.622002][T18000]  <TASK>
[  274.622010][T18000]  __dump_stack+0x1d/0x30
[  274.622039][T18000]  dump_stack_lvl+0x95/0xd0
[  274.622060][T18000]  dump_stack+0x15/0x1b
[  274.622080][T18000]  should_fail_ex+0x262/0x280
[  274.622111][T18000]  ? anon_vma_clone+0xc2/0x450
[  274.622134][T18000]  should_failslab+0x8c/0xb0
[  274.622171][T18000]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  274.622200][T18000]  ? anon_vma_clone+0xc2/0x450
[  274.622221][T18000]  anon_vma_clone+0xc2/0x450
[  274.622246][T18000]  __split_vma+0x319/0x720
[  274.622274][T18000]  ? __mod_memcg_lruvec_state+0x1b5/0x2a0
[  274.622297][T18000]  vms_gather_munmap_vmas+0x176/0x7f0
[  274.622321][T18000]  ? mod_lruvec_state+0x10c/0x120
[  274.622342][T18000]  ? __rcu_read_unlock+0x4e/0x70
[  274.622379][T18000]  do_vmi_align_munmap+0x1e1/0x400
[  274.622415][T18000]  do_vmi_munmap+0x1da/0x220
[  274.622447][T18000]  move_vma+0xc6a/0xf50
[  274.622480][T18000]  ? cap_mmap_addr+0xb1/0x250
[  274.622508][T18000]  mremap_to+0x3ef/0x450
[  274.622539][T18000]  ? check_prep_vma+0x5b0/0x640
[  274.622568][T18000]  __se_sys_mremap+0x727/0xc50
[  274.622604][T18000]  ? xfd_validate_state+0x45/0xf0
[  274.622630][T18000]  ? restore_fpregs_from_fpstate+0x61/0x110
[  274.622653][T18000]  __x64_sys_mremap+0x67/0x80
[  274.622681][T18000]  x64_sys_call+0x1072/0x2550
[  274.622708][T18000]  do_syscall_64+0x112/0x360
[  274.622735][T18000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.622755][T18000] RIP: 0033:0x7f0f001be559
[  274.622770][T18000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.622788][T18000] RSP: 002b:00007f0efec17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  274.622811][T18000] RAX: ffffffffffffffda RBX: 00007f0f00445fa0 RCX: 00007f0f001be559
[  274.622828][T18000] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000200000097000
[  274.622842][T18000] RBP: 00007f0f002558b0 R08: 0000200000bff000 R09: 0000000000000000
[  274.622857][T18000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  274.622872][T18000] R13: 00007f0f00446038 R14: 00007f0f00445fa0 R15: 00007ffc150df378
[  274.622892][T18000]  </TASK>
[  274.674842][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'.
[  274.758374][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3507'.
[  274.758459][T18010] netlink: 'syz.4.3507': attribute type 7 has an invalid length.
[  274.758473][T18010] netlink: 'syz.4.3507': attribute type 8 has an invalid length.
[  274.758535][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'.
[  274.764273][T18010] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  274.768726][T18010] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  274.777324][T18010] erspan0: entered promiscuous mode
[  274.782589][T18010] debugfs: 'hsr1' already exists in 'hsr'
[  274.782606][T18010] Cannot create hsr debugfs directory
[  274.782798][T18010] 8021q: adding VLAN 0 to HW filter on device hsr1
[  274.925536][T18024] loop8: detected capacity change from 0 to 1024
[  274.929219][T18024] EXT4-fs: inline encryption not supported
[  274.929248][T18024] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.929346][T18024] EXT4-fs: Ignoring removed i_version option
[  274.946630][T18024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.946775][T18024] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.069612][T16116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  275.135477][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3518'.
[  275.154173][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3518'.
[  280.052953][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  280.052971][   T29] audit: type=1400 audit(1792153019.490:19650): avc:  denied  { write } for  pid=18045 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.055844][ T2347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.114595][   T29] audit: type=1400 audit(1792153019.550:19651): avc:  denied  { write } for  pid=18045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.148760][ T2347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.162689][   T29] audit: type=1400 audit(1792153019.600:19652): avc:  denied  { write } for  pid=18059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.204005][ T2347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.223086][ T2347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.288139][ T2347] bridge_slave_1: left allmulticast mode
[  280.288169][ T2347] bridge_slave_1: left promiscuous mode
[  280.288314][ T2347] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.289282][ T2347] bridge_slave_0: left allmulticast mode
[  280.289306][ T2347] bridge_slave_0: left promiscuous mode
[  280.289396][ T2347] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.348665][ T2347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.349643][ T2347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.352599][ T2347] bond0 (unregistering): Released all slaves
[  280.383369][ T2347] tipc: Left network mode
[  280.404760][ T2347] hsr_slave_0: left promiscuous mode
[  280.405003][ T2347] hsr_slave_1: left promiscuous mode
[  280.405462][ T2347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.405553][ T2347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.406034][ T2347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.406047][ T2347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.408002][ T2347] veth1_macvtap: left promiscuous mode
[  280.408139][ T2347] veth0_macvtap: left promiscuous mode
[  280.408182][ T2347] veth1_vlan: left promiscuous mode
[  280.408214][ T2347] veth0_vlan: left promiscuous mode
[  280.473351][   T29] audit: type=1400 audit(1792153019.900:19653): avc:  denied  { write } for  pid=18068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.478776][   T29] audit: type=1400 audit(1792153019.920:19654): avc:  denied  { write } for  pid=18079 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.547428][ T2347] team0 (unregistering): Port device team_slave_1 removed
[  280.549705][ T2347] team0 (unregistering): Port device team_slave_0 removed
[  280.570987][ T3031] 8021q: adding VLAN 0 to HW filter on device eth9
[  280.647269][   T29] audit: type=1400 audit(1792153020.080:19655): avc:  denied  { write } for  pid=18083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.680200][   T29] audit: type=1400 audit(1792153020.110:19656): avc:  denied  { write } for  pid=18094 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.712910][ T3031] 8021q: adding VLAN 0 to HW filter on device eth10
[  280.776687][   T29] audit: type=1400 audit(1792153020.210:19657): avc:  denied  { write } for  pid=18097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.809695][   T29] audit: type=1400 audit(1792153020.240:19658): avc:  denied  { write } for  pid=18108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.842164][ T3031] 8021q: adding VLAN 0 to HW filter on device eth12
[  280.900861][   T29] audit: type=1400 audit(1792153020.340:19659): avc:  denied  { write } for  pid=18111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  280.944020][ T3031] 8021q: adding VLAN 0 to HW filter on device eth11
[  281.571063][T18146] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  281.705863][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'.
[  281.807503][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'.
[  281.807653][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'.
[  281.841114][T18182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3542'.
[  281.842560][T18178] ip_tables: iptables: counters copy to user failed while replacing table
[  281.885983][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.886131][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.920850][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3554'.
[  283.029742][T18240] netlink: 'syz.8.3556': attribute type 15 has an invalid length.
[  283.029775][T18240] netlink: 11870 bytes leftover after parsing attributes in process `syz.8.3556'.
[  283.030889][T18240] netlink: 'syz.8.3556': attribute type 6 has an invalid length.
[  283.030916][T18240] netlink: 'syz.8.3556': attribute type 7 has an invalid length.
[  283.031054][T18240] netlink: 'syz.8.3556': attribute type 11 has an invalid length.
[  283.031080][T18240] netlink: 'syz.8.3556': attribute type 15 has an invalid length.
[  283.031104][T18240] netlink: 'syz.8.3556': attribute type 16 has an invalid length.
[  283.031129][T18240] netlink: 'syz.8.3556': attribute type 21 has an invalid length.
[  283.031223][T18240] netlink: 'syz.8.3556': attribute type 25 has an invalid length.
[  283.031291][T18240] netlink: 'syz.8.3556': attribute type 27 has an invalid length.
[  283.031315][T18240] netlink: 'syz.8.3556': attribute type 28 has an invalid length.
[  283.290490][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3567'.
[  283.325937][T18269] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3569'.
[  283.347958][   T51] IPVS: starting estimator thread 0...
[  283.348115][T18274] IPVS: nq: FWM 3 0x00000003 - no destination available
[  283.375601][T18258] rxe_eth0 speed is unknown, defaulting to 1000
[  283.431742][T18277] IPVS: using max 2544 ests per chain, 127200 per kthread
[  283.774503][T18288] ªªªªª»: renamed from vlan0 (while UP)
[  283.907498][T18322] loop4: detected capacity change from 0 to 512
[  283.908000][T18322] EXT4-fs: Ignoring removed nobh option
[  283.908612][T18322] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  283.935304][T18322] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.3585: corrupted inode contents
[  283.935332][T18322] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  283.935551][T18322] EXT4-fs (loop4): Remounting filesystem read-only
[  283.936360][T18322] EXT4-fs (loop4): 1 truncate cleaned up
[  283.940095][T18322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.940168][T18322] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.089442][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'.
[  284.157039][T17539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.029586][T18396] FAULT_INJECTION: forcing a failure.
[  285.029586][T18396] name failslab, interval 1, probability 0, space 0, times 0
[  285.029614][T18396] CPU: 1 UID: 0 PID: 18396 Comm: syz.8.3602 Not tainted syzkaller #0 PREEMPT(lazy) 
[  285.029649][T18396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.029722][T18396] Call Trace:
[  285.029730][T18396]  <TASK>
[  285.029794][T18396]  __dump_stack+0x1d/0x30
[  285.029824][T18396]  dump_stack_lvl+0x95/0xd0
[  285.029920][T18396]  dump_stack+0x15/0x1b
[  285.029944][T18396]  should_fail_ex+0x262/0x280
[  285.029976][T18396]  ? alloc_pipe_info+0x1c8/0x340
[  285.030047][T18396]  should_failslab+0x8c/0xb0
[  285.030145][T18396]  __kmalloc_noprof+0xd0/0x4d0
[  285.030267][T18396]  ? __css_rstat_updated+0xbb/0x280
[  285.030295][T18396]  ? alloc_pipe_info+0x1c8/0x340
[  285.030317][T18396]  alloc_pipe_info+0x1c8/0x340
[  285.030347][T18396]  splice_direct_to_actor+0x593/0x680
[  285.030445][T18396]  ? __pfx_direct_splice_actor+0x10/0x10
[  285.030468][T18396]  ? ktime_get+0x212/0x240
[  285.030568][T18396]  ? _raw_spin_unlock+0x9/0x30
[  285.030604][T18396]  ? finish_task_switch+0x121/0x340
[  285.030633][T18396]  ? avc_policy_seqno+0x15/0x30
[  285.030668][T18396]  do_splice_direct+0x119/0x1a0
[  285.030712][T18396]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  285.030744][T18396]  do_sendfile+0x37d/0x640
[  285.030780][T18396]  __x64_sys_sendfile64+0x105/0x150
[  285.030855][T18396]  x64_sys_call+0x1015/0x2550
[  285.030963][T18396]  do_syscall_64+0x112/0x360
[  285.031054][T18396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.031079][T18396] RIP: 0033:0x7f000c23e559
[  285.031124][T18396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.031216][T18396] RSP: 002b:00007f000ac97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  285.031241][T18396] RAX: ffffffffffffffda RBX: 00007f000c4c5fa0 RCX: 00007f000c23e559
[  285.031257][T18396] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  285.031272][T18396] RBP: 00007f000c2d58b0 R08: 0000000000000000 R09: 0000000000000000
[  285.031288][T18396] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000000
[  285.031302][T18396] R13: 00007f000c4c6038 R14: 00007f000c4c5fa0 R15: 00007ffe1dbb4dc8
[  285.031343][T18396]  </TASK>
[  285.061002][   T29] kauditd_printk_skb: 477 callbacks suppressed
[  285.061017][   T29] audit: type=1326 audit(1792153024.500:20135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.062191][   T29] audit: type=1326 audit(1792153024.500:20136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.063740][   T29] audit: type=1326 audit(1792153024.500:20137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.065428][   T29] audit: type=1326 audit(1792153024.500:20138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.067605][   T29] audit: type=1326 audit(1792153024.500:20139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.069755][   T29] audit: type=1326 audit(1792153024.500:20140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.073810][   T29] audit: type=1326 audit(1792153024.510:20141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.076203][   T29] audit: type=1326 audit(1792153024.510:20142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.077756][   T29] audit: type=1326 audit(1792153024.510:20143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.079334][   T29] audit: type=1326 audit(1792153024.510:20144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18353 comm="syz.1.3591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f792373ed8e code=0x7ffc0000
[  285.098003][T18401] bond4: entered allmulticast mode
[  285.115864][T18401] macvlan2: entered promiscuous mode
[  285.115883][T18401] macvlan2: entered allmulticast mode
[  285.116256][T18401] bond4: entered promiscuous mode
[  285.116415][T18401] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  285.152475][T18401] bond4: left promiscuous mode
[  285.374384][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'.
[  285.636915][T18442] loop4: detected capacity change from 0 to 164
[  285.778837][T18461] loop4: detected capacity change from 0 to 256
[  285.850165][T18471] bridge0: port 4(batadv0) entered disabled state
[  285.850240][T18471] bridge0: port 3(team0) entered disabled state
[  285.850321][T18471] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.850488][T18471] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.859624][T18471] team0: Device bridge0 is already an upper device of the team interface
[  286.319681][T18532] 8021q: adding VLAN 0 to HW filter on device bond5
[  286.329368][T18532] macvlan2: entered promiscuous mode
[  286.329389][T18532] macvlan2: entered allmulticast mode
[  286.490874][T18560] syzkaller1: entered promiscuous mode
[  286.490960][T18560] syzkaller1: entered allmulticast mode
[  286.632285][T18580] batman_adv: batadv0: Adding interface: syzkaller0
[  286.632299][T18580] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.632355][T18580] batman_adv: batadv0: Interface activated: syzkaller0
[  286.633705][T18582] ./dev/sda1: Can't lookup blockdev
[  286.827884][T18590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  286.848373][T18579] batman_adv: batadv0: Interface deactivated: syzkaller0
[  286.859403][T18579] batman_adv: batadv0: Removing interface: syzkaller0
[  286.993076][T18606] loop4: detected capacity change from 0 to 512
[  287.028515][T18606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.028643][T18606] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.840876][T18620] __nla_validate_parse: 5 callbacks suppressed
[  287.840893][T18620] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3687'.
[  287.844318][T18620] syzkaller1: entered promiscuous mode
[  287.844338][T18620] syzkaller1: entered allmulticast mode
[  287.875574][T17539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.306342][T18655] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3702'.
[  288.314108][T18655] syzkaller1: entered promiscuous mode
[  288.314128][T18655] syzkaller1: entered allmulticast mode
[  288.407026][T18660] ip_tables: iptables: counters copy to user failed while replacing table
[  288.591694][T18663] team0: Device xfrm0 is of different type
[  288.614315][T18667] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  288.755896][T18681] ./dev/sda1: Can't lookup blockdev
[  288.838745][T18679] sctp: [Deprecated]: syz.1.3713 (pid 18679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  288.838745][T18679] Use struct sctp_sack_info instead
[  289.615656][T18705] loop4: detected capacity change from 0 to 512
[  289.616084][T18705] EXT4-fs: Ignoring removed bh option
[  289.616102][T18705] EXT4-fs: Ignoring removed i_version option
[  289.618695][T18705] EXT4-fs (loop4): failed to initialize system zone (-117)
[  289.618726][T18705] EXT4-fs (loop4): mount failed
[  290.253335][T18714] loop4: detected capacity change from 0 to 512
[  290.298111][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  290.298129][   T29] audit: type=1400 audit(1792153029.730:20235): avc:  denied  { ioctl } for  pid=18712 comm="syz.4.3727" path="socket:[50060]" dev="sockfs" ino=50060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  290.434148][   T29] audit: type=1400 audit(1792153029.870:20236): avc:  denied  { create } for  pid=18733 comm="syz.1.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  290.614381][T18752] ./dev/sda1: Can't lookup blockdev
[  290.650377][T18754] pimreg: entered allmulticast mode
[  290.658778][T18754] xt_ecn: cannot match TCP bits for non-tcp packets
[  290.790115][   T29] audit: type=1400 audit(1792153030.220:20237): avc:  denied  { mount } for  pid=18765 comm="syz.1.3744" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  290.871327][T18772] loop4: detected capacity change from 0 to 512
[  290.879038][T18772] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  290.879055][T18772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.898056][T18772] EXT4-fs (loop4): 1 truncate cleaned up
[  290.898439][T18772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.941122][T17539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.180095][T18793] validate_nla: 3 callbacks suppressed
[  291.180124][T18793] netlink: 'syz.8.3754': attribute type 10 has an invalid length.
[  291.198559][T18793] team0 (unregistering): Port device team_slave_0 removed
[  291.209666][T18793] team0 (unregistering): Port device team_slave_1 removed
[  291.289576][   T29] audit: type=1400 audit(1792153030.720:20238): avc:  denied  { write } for  pid=18795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.324322][   T29] audit: type=1400 audit(1792153030.760:20239): avc:  denied  { write } for  pid=18812 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.422223][   T29] audit: type=1400 audit(1792153030.860:20240): avc:  denied  { write } for  pid=18817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.470930][   T29] audit: type=1400 audit(1792153030.910:20241): avc:  denied  { write } for  pid=18835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.495373][T18837] netlink: 'syz.0.3762': attribute type 1 has an invalid length.
[  291.520859][T18837] bond6: entered promiscuous mode
[  291.520963][T18837] 8021q: adding VLAN 0 to HW filter on device bond6
[  291.526626][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'.
[  291.565863][T18837] 8021q: adding VLAN 0 to HW filter on device bond6
[  291.571531][T18837] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  291.571555][T18837] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  291.603697][T18837] bond6: (slave wireguard0): making interface the new active one
[  291.603718][T18837] wireguard0: entered promiscuous mode
[  291.608323][T18847] sctp: [Deprecated]: syz.8.3760 (pid 18847) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.608323][T18847] Use struct sctp_sack_info instead
[  291.644452][T18837] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  291.680147][T18834] loop8: detected capacity change from 0 to 128
[  291.716875][T18834] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  291.734240][T18834] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.739713][T18834] ext2 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.784083][T16116] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.831568][   T29] audit: type=1326 audit(1792153031.270:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.4.3770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd641e559 code=0x7ffc0000
[  291.831814][   T29] audit: type=1326 audit(1792153031.270:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.4.3770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd641e559 code=0x7ffc0000
[  291.831991][   T29] audit: type=1326 audit(1792153031.270:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18862 comm="syz.4.3770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd641e559 code=0x7ffc0000
[  291.945207][T18870] sctp: [Deprecated]: syz.1.3773 (pid 18870) Use of int in max_burst socket option.
[  291.945207][T18870] Use struct sctp_assoc_value instead
[  291.950243][T18868] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  291.952000][T18868] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  292.021814][ T2589] Bluetooth: hci0: Frame reassembly failed (-84)
[  292.117653][T18881] rxe_eth0 speed is unknown, defaulting to 1000
[  292.388507][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3782'.
[  292.388528][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3782'.
[  292.567958][T18912] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3784'.
[  292.706224][T18926] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  292.706315][T18926] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  293.220671][   T71] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  293.296198][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3806'.
[  293.667396][T19005] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  294.040325][ T5482] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  294.040345][ T3713] Bluetooth: hci0: command 0x1003 tx timeout
[  298.039375][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  298.039390][   T29] audit: type=1400 audit(1792153037.470:20281): avc:  denied  { write } for  pid=19027 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.098911][   T29] audit: type=1400 audit(1792153037.530:20282): avc:  denied  { write } for  pid=19027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.135007][   T29] audit: type=1400 audit(1792153037.570:20283): avc:  denied  { write } for  pid=19041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  300.701097][T19056] rxe_eth0 speed is unknown, defaulting to 1000
[  301.105737][T19089] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in;
[  301.105737][T19089]    program syz.0.3846 not setting count and/or reply_len properly
[  301.150792][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3837'.
[  301.200527][   T29] audit: type=1400 audit(1792153040.630:20284): avc:  denied  { write } for  pid=19098 comm="rm" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  301.222958][   T29] audit: type=1400 audit(1792153040.660:20285): avc:  denied  { write } for  pid=19097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  301.267598][T19101] bond2: entered allmulticast mode
[  301.285988][T19101] wireguard0: entered promiscuous mode
[  301.286010][T19101] wireguard0: entered allmulticast mode
[  301.286169][T19101] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  301.289915][   T29] audit: type=1400 audit(1792153040.720:20286): avc:  denied  { write } for  pid=19105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  301.289962][T19101] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  301.519389][T19129] loop8: detected capacity change from 0 to 128
[  301.527094][T19130] FAULT_INJECTION: forcing a failure.
[  301.527094][T19130] name failslab, interval 1, probability 0, space 0, times 0
[  301.527153][T19130] CPU: 1 UID: 0 PID: 19130 Comm: syz.0.3849 Not tainted syzkaller #0 PREEMPT(lazy) 
[  301.527182][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.527196][T19130] Call Trace:
[  301.527203][T19130]  <TASK>
[  301.527278][T19130]  __dump_stack+0x1d/0x30
[  301.527306][T19130]  dump_stack_lvl+0x95/0xd0
[  301.527331][T19130]  dump_stack+0x15/0x1b
[  301.527411][T19130]  should_fail_ex+0x262/0x280
[  301.527442][T19130]  should_failslab+0x8c/0xb0
[  301.527494][T19130]  __kvmalloc_node_noprof+0x168/0x5c0
[  301.527517][T19130]  ? nf_hook_entries_grow+0x1cb/0x460
[  301.527545][T19130]  ? nf_hook_entries_grow+0x1cb/0x460
[  301.527573][T19130]  nf_hook_entries_grow+0x1cb/0x460
[  301.527655][T19130]  ? call_rcu+0x2be/0x440
[  301.527686][T19130]  __nf_register_net_hook+0x187/0x480
[  301.527715][T19130]  nf_register_net_hook+0x88/0x130
[  301.527883][T19130]  nf_register_net_hooks+0x44/0x150
[  301.527911][T19130]  nf_defrag_ipv6_enable+0x6e/0xc0
[  301.527940][T19130]  nf_ct_netns_do_get+0x161/0x3a0
[  301.527968][T19130]  ? __kmalloc_cache_noprof+0x19b/0x400
[  301.528030][T19130]  ? limit_mt_check+0x159/0x2e0
[  301.528062][T19130]  nf_ct_netns_get+0xf1/0x2c0
[  301.528152][T19130]  conntrack_mt_check+0x35/0xa0
[  301.528175][T19130]  xt_check_match+0x3b7/0x5e0
[  301.528199][T19130]  ? xt_find_match+0x208/0x240
[  301.528223][T19130]  ? xt_find_match+0x1e4/0x240
[  301.528250][T19130]  translate_table+0xc1c/0x1220
[  301.528335][T19130]  ? _copy_from_user+0x89/0xb0
[  301.528369][T19130]  do_ip6t_set_ctl+0x73e/0x990
[  301.528391][T19130]  ? __rcu_read_unlock+0x4e/0x70
[  301.528477][T19130]  nf_setsockopt+0x199/0x1b0
[  301.528510][T19130]  ipv6_setsockopt+0x11a/0x130
[  301.528532][T19130]  rawv6_setsockopt+0x1cc/0x3f0
[  301.528569][T19130]  sock_common_setsockopt+0x69/0x80
[  301.528626][T19130]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  301.528691][T19130]  __sys_setsockopt+0x184/0x200
[  301.528719][T19130]  __x64_sys_setsockopt+0x64/0x80
[  301.528747][T19130]  x64_sys_call+0x248f/0x2550
[  301.528776][T19130]  do_syscall_64+0x112/0x360
[  301.528830][T19130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.528854][T19130] RIP: 0033:0x7f0f001be559
[  301.528869][T19130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.528888][T19130] RSP: 002b:00007f0efec17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  301.528964][T19130] RAX: ffffffffffffffda RBX: 00007f0f00445fa0 RCX: 00007f0f001be559
[  301.528980][T19130] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  301.528996][T19130] RBP: 00007f0f002558b0 R08: 0000000000000410 R09: 0000000000000000
[  301.529013][T19130] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000000
[  301.529072][T19130] R13: 00007f0f00446038 R14: 00007f0f00445fa0 R15: 00007ffc150df378
[  301.529092][T19130]  </TASK>
[  301.535220][T19130] xt_conntrack: cannot load conntrack support for proto=10
[  301.543871][T19129] FAT-fs (loop8): bogus logical sector size 0
[  301.543890][T19129] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  301.543907][T19129] FAT-fs (loop8): Can't find a valid FAT filesystem
[  301.649380][T19131] loop8: detected capacity change from 0 to 1024
[  301.662110][T19131] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5
[  301.662138][T19131] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  301.662184][T19131] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.3850: Failed to acquire dquot type 0
[  301.662207][T19131] loop8: lost filesystem error report for type 5 error -117
[  301.665478][T19131] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  301.665796][T19131] EXT4-fs (loop8): 1 truncate cleaned up
[  301.666213][T19131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.730292][T19131] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.730467][T19131] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.804395][T19131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.806587][T19131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.837151][   T71] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.837325][   T71] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.837441][   T71] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.837480][   T71] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.356288][T16116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.026212][   T29] audit: type=1400 audit(1792153046.460:20287): avc:  denied  { write } for  pid=19134 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  307.083361][   T29] audit: type=1400 audit(1792153046.520:20288): avc:  denied  { write } for  pid=19134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  307.125728][   T29] audit: type=1400 audit(1792153046.560:20289): avc:  denied  { write } for  pid=19148 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.578029][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3853'.
[  308.647726][   T29] audit: type=1400 audit(1792153048.080:20290): avc:  denied  { write } for  pid=19165 comm="rm" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.650004][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'.
[  308.650033][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'.
[  308.704910][   T29] audit: type=1400 audit(1792153048.140:20291): avc:  denied  { write } for  pid=19163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.706439][T19172] loop8: detected capacity change from 0 to 128
[  308.724134][T19172] syz.8.3858: attempt to access beyond end of device
[  308.724134][T19172] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128
[  308.731051][T19172] syz.8.3858: attempt to access beyond end of device
[  308.731051][T19172] loop8: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  308.731168][T19172] Buffer I/O error on dev loop8, logical block 71, lost async page write
[  308.749804][T19172] syz.8.3858: attempt to access beyond end of device
[  308.749804][T19172] loop8: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  308.749899][T19172] Buffer I/O error on dev loop8, logical block 71, lost async page write
[  308.749918][T19172] syz.8.3858: attempt to access beyond end of device
[  308.749918][T19172] loop8: rw=8390657, sector=144, nr_sectors = 2 limit=128
[  308.749942][T19172] Buffer I/O error on dev loop8, logical block 72, lost async page write
[  308.755944][T19172] syz.8.3858: attempt to access beyond end of device
[  308.755944][T19172] loop8: rw=2049, sector=146, nr_sectors = 104 limit=128
[  308.841787][   T29] audit: type=1400 audit(1792153048.280:20292): avc:  denied  { write } for  pid=19180 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.994438][T19189] xt_CT: No such helper "snmp"
[  313.728580][   T29] audit: type=1400 audit(1792153053.160:20293): avc:  denied  { write } for  pid=19198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.785469][   T29] audit: type=1400 audit(1792153053.220:20294): avc:  denied  { write } for  pid=19198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.825212][   T29] audit: type=1400 audit(1792153053.260:20295): avc:  denied  { write } for  pid=19212 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.337119][T19219] netlink: 'syz.0.3866': attribute type 4 has an invalid length.
[  315.362548][T19219] netlink: 'syz.0.3866': attribute type 4 has an invalid length.
[  315.376795][T19223] 8021q: adding VLAN 0 to HW filter on device bond1
[  315.432885][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'.
[  315.432903][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3869'.
[  315.495717][T19219] lo: entered allmulticast mode
[  315.637697][T19248] gretap0: entered promiscuous mode
[  315.704720][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3880'.
[  315.762943][   T29] audit: type=1400 audit(1792153055.200:20296): avc:  denied  { write } for  pid=19256 comm="rm" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.792522][   T29] audit: type=1400 audit(1792153055.230:20297): avc:  denied  { write } for  pid=19255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.879156][   T29] audit: type=1400 audit(1792153055.310:20298): avc:  denied  { write } for  pid=19268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.882184][    C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  315.883400][    C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[  315.884353][    C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c
[  316.097227][T19278] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  316.279172][T19282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3887'.
[  316.329435][T19288] tipc: Started in network mode
[  316.329449][T19288] tipc: Node identity 2000004, cluster identity 4711
[  316.329460][T19288] tipc: Node number set to 33554436
[  321.194186][   T29] audit: type=1400 audit(1792153060.630:20299): avc:  denied  { write } for  pid=19289 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  321.252214][   T29] audit: type=1400 audit(1792153060.690:20300): avc:  denied  { write } for  pid=19289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  321.289058][   T29] audit: type=1400 audit(1792153060.730:20301): avc:  denied  { write } for  pid=19303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  322.634107][   T29] audit: type=1326 audit(1792153062.070:20302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.634163][   T29] audit: type=1326 audit(1792153062.070:20303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.634195][   T29] audit: type=1326 audit(1792153062.070:20304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.634773][   T29] audit: type=1326 audit(1792153062.070:20305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.634816][   T29] audit: type=1326 audit(1792153062.070:20306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.634997][   T29] audit: type=1326 audit(1792153062.070:20307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.635085][   T29] audit: type=1326 audit(1792153062.070:20308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19310 comm="syz.1.3896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792377e559 code=0x7ffc0000
[  322.743705][T19322] loop4: detected capacity change from 0 to 164
[  322.923874][T19340] netlink: 'syz.1.3904': attribute type 1 has an invalid length.
[  322.933639][T19340] 8021q: adding VLAN 0 to HW filter on device bond4
[  322.950210][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3901'.
[  322.982343][T19340] bond4: (slave geneve2): making interface the new active one
[  322.983885][T19340] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  323.016061][T19347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.016191][T19347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.052127][T19347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.052219][T19347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.181383][T19363] netlink: 'syz.8.3913': attribute type 4 has an invalid length.
[  323.204760][T19365] netlink: 'syz.8.3914': attribute type 12 has an invalid length.
[  323.446950][T19369] ==================================================================
[  323.446982][T19369] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  323.447016][T19369] 
[  323.447023][T19369] write to 0xffff88810b20bee0 of 8 bytes by task 19371 on cpu 1:
[  323.447044][T19369]  shmem_file_splice_read+0x401/0x590
[  323.447071][T19369]  splice_direct_to_actor+0x261/0x680
[  323.447097][T19369]  do_splice_direct+0x119/0x1a0
[  323.447123][T19369]  do_sendfile+0x37d/0x640
[  323.447149][T19369]  __x64_sys_sendfile64+0x105/0x150
[  323.447175][T19369]  x64_sys_call+0x1015/0x2550
[  323.447204][T19369]  do_syscall_64+0x112/0x360
[  323.447233][T19369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.447259][T19369] 
[  323.447266][T19369] write to 0xffff88810b20bee0 of 8 bytes by task 19369 on cpu 0:
[  323.447283][T19369]  shmem_file_splice_read+0x401/0x590
[  323.447304][T19369]  splice_direct_to_actor+0x261/0x680
[  323.447325][T19369]  do_splice_direct+0x119/0x1a0
[  323.447350][T19369]  do_sendfile+0x37d/0x640
[  323.447376][T19369]  __x64_sys_sendfile64+0x105/0x150
[  323.447400][T19369]  x64_sys_call+0x1015/0x2550
[  323.447424][T19369]  do_syscall_64+0x112/0x360
[  323.447446][T19369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.447473][T19369] 
[  323.447477][T19369] value changed: 0x0000000000003ddd -> 0x0000000000003ddf
[  323.447489][T19369] 
[  323.447492][T19369] Reported by Kernel Concurrency Sanitizer on:
[  323.447509][T19369] CPU: 0 UID: 0 PID: 19369 Comm: syz.4.3916 Not tainted syzkaller #0 PREEMPT(lazy) 
[  323.447539][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  323.447555][T19369] ==================================================================