last executing test programs:

10.765415408s ago: executing program 2 (id=1294):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000080)="5d2815561dbb8641a9ac69dbc889fbe5b51afac4f858e735a7092061ba8f8bc9a8a8acab57fcc226e7dd09b4", 0x2c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0))
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x30, 0xd, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x41)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback, 0x1000}}}, 0x108)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES8=0x0, @ANYRES32=r4], 0x0)
io_setup(0x8, &(0x7f0000004200))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, r6, 0x601, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)

8.669618634s ago: executing program 2 (id=1314):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xe6e, 0x80000)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104)
setxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1)
sendfile(r4, r4, 0x0, 0xe3aa6ea)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)

4.952288608s ago: executing program 2 (id=1328):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
socket$netlink(0x10, 0x3, 0xc)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x3, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0)

2.999921342s ago: executing program 0 (id=1338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000fc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x13, 0x7}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}}, 0x40000) (rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x0, 0x4, 0x24, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0x1}}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r9=>r0, {<r10=>r3}}, './file0\x00'}) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001a0001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000000000000000000000400000000000040040000000000000061f10000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000010000000000010400000d00000000000000feffffff000000000a00040090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x818) (async)
fsmount(r9, 0x0, 0x9) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="57ae83ab84b674fd9f52d4b78928975b58000000100003040000000000000000000000008ad798c2631c8a33d6e1c08834e51f9b50e667c0d264db929b72ff798e960d49ea6fe8f6", @ANYRES32=0x0, @ANYBLOB="a4280400000000000a000200aaaaaaaaaa31000008000a00", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x8000) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000480)={0x388, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x330, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "494b9372dae3ef12b471e3852bcd324e0d25f2d242960d67016d67c6664a2315203310ebb0ca4050dcf6f7fe27ae6f25e7e8ae8f417ffd88b292d8a2517c23513b8706bbe1"}, @ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "94046e019bab2b70b9677800b07ed1ac412d1c1b384d24fdda3bf33b54428fb58af85752555e3a3b229cc5532bcbdbdb055809af060b32c039c4ff37e558944eaa2cbd195b25b73d521a54bb1267b32e6ecc60ed93f4dc87239c48b2a790cdf6abb477a2e0e3f8ceba2144a853b55ca11cea48e276f26fcf5f20d14491ef08e681534e47e627223e62dfd49b331a5ee36ccb0ca9cd7b1261cdb6c006ad2ff16f32468a8613e3f07c5caf1203a00d09e9de27aba87f6c1922cae57aeef3603ecd116dcdefb8d0dd37d4790b41eb9ddb9827b8038e48a214434ea05e5b1120d6f9ce2608bd0284b87e7cec4778113dcba8f4fc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "f9a8bf5be39fd4ce1737c84225a23f6b3d7b2d904a132e462bbf57dfe8dc62a5c8731b116d7ff06667292454c5eaa054d46a98075bd262c09c12c210840adf90b1162ced171fa1c93cbb6a935d382d545d052f704f3a6328a6ae77192f9781e53a3684230654c7650f4ec5c5e57c41ca673b50f3c598203d2a36cbc22e9a7394c09796f68ab82ef7a94aaa2a2c8e0405f04ddf19b7919bc607e6ea47ef9e04"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '@\'^]{%.{^},\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "7813f9c8136f09c3f808647e1714d74e0c3c7479e1d4d1f34a9a3474b43cc063fe988bc6c16b7077d7af09b4a6373e5615bfcdf194cc5db6ae42fb7c9044c1e6c43e2c71bdd8768bc7b2bcdfc0bd61a324ff219fdd90bb661ccfa19d7846d93dd7f5eed43793f87def8ad8625ab5c2a6d0e269e01e5aab5f47cce6006827f579df2476c2a06c5f9b087bf7084a53852d42c6be5a387df33e5b3edd36d6b1a485d69870f9689a0cc2d4e80e1ee76866c4fdc017043abf9d437f10c5c5024ff0c38a6aa61e9e4a96ee6a73fda5cfd6e97370bc43d6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
fcntl$getownex(r10, 0x10, &(0x7f00000009c0)) (async)
socket(0x10, 0x3, 0x0) (async)
mount$9p_unix(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x100080, &(0x7f00000008c0)={'trans=unix,', {[{@mmap}, {@nodevmap}, {@cache_loose}, {@aname={'aname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@privport}, {@directio}, {@posixacl}, {@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ip6_vti0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':+}:};{#\\'}}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, '\'@\x9a~\'^\']-*\\-W:\xf8\xab:'}}, {@context={'context', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '{#&&,'}}, {@subj_role={'subj_role', 0x3d, '\x97/-[+#&\\-*\'-%}'}}]}})
r12 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r12, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc451001ff1f000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
socket$inet6(0xa, 0x3, 0x5)

2.966465093s ago: executing program 3 (id=1339):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001002000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

2.905856424s ago: executing program 0 (id=1340):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000080)="5d2815561dbb8641a9ac69dbc889fbe5b51afac4f858e735a7092061ba8f8bc9a8a8acab57fcc226e7dd09b4", 0x2c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0))
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x30, 0xd, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x41)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0xd4a}}, {{0xa, 0x0, 0x9, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, 0x0, 0x0)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES8=0x0, @ANYRES32=r4], 0x0)
io_setup(0x8, &(0x7f0000004200))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, r6, 0x601, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)

2.772288097s ago: executing program 3 (id=1341):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601020000000000000000000a00000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x1000)

2.757547208s ago: executing program 2 (id=1342):
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x9408, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
close(0x3)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000009c0)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updsa={0xfc, 0x1a, 0x1, 0xfffffffe, 0x0, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x10}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, @in=@loopback, {0x0, 0x4, 0x3, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x87}, {}, 0x0, 0xfffffffd, 0xa, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x2}}]}, 0xfc}}, 0x49800)
ioctl$EVIOCGBITSW(r3, 0x80404525, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x1000, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = semget(0x0, 0x2, 0x800)
semctl$SEM_INFO(r5, 0x3, 0x13, &(0x7f0000000140)=""/246)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000009400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="a39361f88f794f0cff5c023a962f79ef5b7a8ce29e3015828a61f3e7ecbd1660546ec786c1fd49a41cefa31f9e5b2fa19e819fa1e065736ff66eb81730419e229f373334765f2962a533ff3200788dcc7ee2e8c8f05f7f3dd8b51aa6fec810460cd1f767577f5bd74eb6c0aba27bf40c8015e24ffdadc7153be7aed0d976aae1e6ce59522e7a67dafa002d81637639eb9745c4157ed0b29967b8b9e76e720666ec568e0a62c2017675d5231231e16c5efb92c375ee8cc6245081d5e209ac66c05208560a97f89f50ead5369d7984dce21d31634ba0bdc864b77d859376d465905979", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2.67780176s ago: executing program 1 (id=1343):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbmon(0x0, 0x7, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5c8, &(0x7f0000000980)="$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")

2.582526912s ago: executing program 3 (id=1344):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800)
listen(r0, 0x7)

2.582353782s ago: executing program 3 (id=1345):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x2, 0x2, 0x2f5, 0x67, 0x0, 0xa4, 0x2f, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0xf, 0xff, [@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0x62, [@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x0, [0xd0d, 0x0, 0x2, 0xffffffff]}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x2, [0x0]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1c, 0x2, [0xfffe, 0x9], "581787a3e514fe2e74b4eb9703127b6d16164bbe46fc64ae1dabba52"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xf, 0x9], "b6c10e7dfc093633b2fceecb3beb24d353fbd127b05dedc9ebf1de32d00c1e6f25b6e0092f14bde231f558642c2e597ae4a4f6503a3e570e01b0f625c7745a1955e07bd6d1cbdaf81daba6bbf338449938e37e5349b95b3cc39f5a72c41977ce98f40d7ff1bf6baa893b2f46377748c95a1c29607aa1e3c1174698c56f2948ae2f6078017572e6641d0b98cbdbca9f18c76c21eb69b27fd66889"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xe2e, 0xfff8], "9afc999e60221c819c18747023f9f61e2241efec33273103b5bbf7ccfaa4d23ef57481690cbd19c20893135ce45289dd17c244fa10fb077e9740a32a8ba4530434beeed3b3c8376d5d9e85290260262471d56b9e4e8f4cab4183706a876a178bb451852b470e078b11ab240476dabd2e0fc87a002308a50e0ceb8c643572c253992beb1be7130862981e30684570b0eda48030b75b72ddfd2af69bd6279512095b786a856f78ef50bc34eff31ba51afad4fa67d214c6f95d464bffed755e2cd33b8e68b4daf77c053527452babda7f6191d5e4f0e13dfb4520c5533ad36428b202213f59b407d5764e164ddcea"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0xf, 0x2, 0x0, 0x3, 0x0, 0xf2}, 0x1, {0xe}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x5, 0x0, 0x0, 0x1, 0x2, 0x40}, 0x2, {0x1, 0x81, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "10efc52e0a3de63fe566fe21458f4093c8fc189c25ec37221fc3de78b4eb0519d230cc46bc586635c15b9dc2a3b80617a47892e4e6c6d99aa321e56882fc2c091d891b0f0531e7cce10850f6e9da1d9565e9318d6241cc0ab85598159a0140290c9f3f21d0adc8fb4dec4b6eae3195a026a3386d16c8240e1da1bc247633e0dc40e2185eca262abe93f60cdc43f9137533609519f941fffc2b5a32bf02f014798d9454c3b27bf49768e8"}}}}}}}, 0x307)

2.429211865s ago: executing program 3 (id=1347):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x13, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x8, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c)
read(r1, &(0x7f0000000040)=""/47, 0x2f)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x20008000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000700)={0xcf47, 0x4cc, 0xffff, 0x9e02, 0x1, "8003e3ffff072000"})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgrp(0xffffffffffffffff)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0)

2.376546516s ago: executing program 2 (id=1348):
r0 = socket$phonet(0x23, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6)
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0xee01, 0x0)
recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}, 0xb85}], 0x1, 0x40, 0x0)

2.376386766s ago: executing program 1 (id=1349):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048044)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000070000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)

2.323526728s ago: executing program 4 (id=1350):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xf, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'system_u'}}]}, 0x1, 0x59f, &(0x7f0000000400)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
fallocate(r2, 0x20, 0x0, 0x8000)
open(0x0, 0x248202, 0xc0)
bind$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f6010000000000140000010100ac1414aa0400907800000000450008000000001100110000ac1414aa7f00000100"/62], 0x3e)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x2, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x3, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00')
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1)
getsockopt$inet_buf(r7, 0x0, 0x29, 0x0, &(0x7f0000695ffc))

2.284965818s ago: executing program 2 (id=1351):
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000ff0000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000de80000000000000180000000000000000000000000000009500000000000000950000000000000071b47ac95d7b75e88d54d620b71fcded0f067e86f3c2208390cc0ce459f5561a08581e9b70f0e12147603208135bca36cb982e88"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@norecovery}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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")
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x17, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000001010000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000007a1963ab23e94300b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000049a002001000", @ANYRES32, @ANYBLOB="000000000700000028380000ffffff7f18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b70200000000000085000000883e6a1fb7000000000000009500000000000000"], &(0x7f0000000f00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0x0, 0x7, 0x73e}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001000)=[{0x1, 0x3, 0x5, 0x6}, {0x3, 0x5, 0xa, 0x7}, {0x4, 0x1, 0xa, 0x9}, {0x0, 0x3, 0x6, 0xc}, {0x2, 0x4, 0x4, 0x9}, {0x0, 0x2, 0x5, 0x3}], 0x10, 0x3}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1000d, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x9, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0), 0x9}, 0xc091, 0x4, 0x0, 0x4, 0x4, 0x0, 0x401, 0x0, 0x7, 0x0, 0x14}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0), 0xc, &(0x7f0000000840)={&(0x7f0000001180)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf2505000000280002800800020000000000080001000800000008000200f7ffffff0c00038008000200760000002400038008000300050000000800010003000000080003000000000008000300f8ffffff7400028008000100400f00000800010004000000040004000800010004000000340003800800010004000000080002000500000008000200070000000800010083b500000800020005000000080002004effffff040004001400038008000200ff0100000800016e5062b56215c7d5000a00000024000180080003000d000000150001006574683a626f6e645f736c6176655f30000000000164504d2a3ead7c8c06f7899e92a9466eccb457b901bad1d8b1859417db14375df7857509a6e6feaf3475a2f88b2df340cd5d4cae03015b747faf85f570b371e2af1de14cc07bec146265827dc7b104"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0xc014)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x9)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$inet6(r7, &(0x7f00000008c0)={0xa, 0x4e24, 0x4, @loopback, 0x1}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000)

2.172365351s ago: executing program 3 (id=1352):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f00000001c0)=0x7d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x10, 0x0, 0xc0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x2, @perf_config_ext={0x9, 0x2}, 0x4480, 0xffffffffffffffff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
keyctl$negate(0xd, 0x0, 0x9, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33)
lseek(r3, 0x80000001, 0x5)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
memfd_create(0x0, 0x8)
ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
gettid()
socket$kcm(0x2, 0x200000000000001, 0x106)

2.172189381s ago: executing program 1 (id=1353):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="bc35b148e3e0d78f034d70f3df993f3dfc2a2ac83dc6c791a9104858385a414a9132d2ca21b4c12c6ad66841caace8e27c1d4f57e30bea93a0942662a524190aa2d3f07a782b973def89b1bf63361cebe5527c4ecf6eef6283d0d352bcaa84ce205084e0949b66b6b67e23d2a1c50744b67c4fb314861a806d22d326aa245fbfe3bfaf75a7269be6651305197a1fbb4f506c16296de1be7199d58dbbd13ab94cdd9d9db26a24cb4e039240a5276b8ae61acd1c06d36c19d44ac5d69988cca3868ded885547852fbb7006032fbc974177a029236a15c887060fd1a8a37e7b426eaca23b7d873980ceef93f6b5355cb61c4b65c10000", 0xf5}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000003c0)="15ee", 0x2}], 0x1}}], 0x2, 0x8804)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002300)={0x0, 0x4, 0xa629, 0x800}, 0x10)

2.073161333s ago: executing program 4 (id=1354):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="459c25bd7000fddbdf251e000000080001005a"], 0x24}, 0x1, 0x0, 0x0, 0x24}, 0x48000)

2.053403603s ago: executing program 0 (id=1355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001dc42a67deec226a89cb44a84e34e18ad6faa1676a00921bd700080000000021810040080fd010004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)={0x6001, 0x4, 0x1}, 0x18)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$KDMKTONE(r1, 0x4b30, 0x162)
pipe2$watch_queue(&(0x7f0000000080), 0x80)

2.011346414s ago: executing program 1 (id=1356):
getpid()
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rflno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)

2.010879144s ago: executing program 4 (id=1357):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x17, 0x4, 0x2, 0x2, 0x2f9, 0x67, 0x0, 0xa4, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x8c, 0x3, 0xf}, @rr={0x7, 0xf, 0xff, [@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0x62, [@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x0, [0xd0d, 0x0, 0x2, 0xffffffff]}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x2, [0x0]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1c, 0x2, [0xfffe, 0x9], "581787a3e514fe2e74b4eb9703127b6d16164bbe46fc64ae1dabba52"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xf, 0x9], "b6c10e7dfc093633b2fceecb3beb24d353fbd127b05dedc9ebf1de32d00c1e6f25b6e0092f14bde231f558642c2e597ae4a4f6503a3e570e01b0f625c7745a1955e07bd6d1cbdaf81daba6bbf338449938e37e5349b95b3cc39f5a72c41977ce98f40d7ff1bf6baa893b2f46377748c95a1c29607aa1e3c1174698c56f2948ae2f6078017572e6641d0b98cbdbca9f18c76c21eb69b27fd66889"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xe2e, 0xfff8], "9afc999e60221c819c18747023f9f61e2241efec33273103b5bbf7ccfaa4d23ef57481690cbd19c20893135ce45289dd17c244fa10fb077e9740a32a8ba4530434beeed3b3c8376d5d9e85290260262471d56b9e4e8f4cab4183706a876a178bb451852b470e078b11ab240476dabd2e0fc87a002308a50e0ceb8c643572c253992beb1be7130862981e30684570b0eda48030b75b72ddfd2af69bd6279512095b786a856f78ef50bc34eff31ba51afad4fa67d214c6f95d464bffed755e2cd33b8e68b4daf77c053527452babda7f6191d5e4f0e13dfb4520c5533ad36428b202213f59b407d5764e164ddcea"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0xf, 0x2, 0x0, 0x3, 0x0, 0xf2}, 0x1, {0xe}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x5, 0x0, 0x0, 0x1, 0x2, 0x40}, 0x2, {0x1, 0x81, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "10efc52e0a3de63fe566fe21458f4093c8fc189c25ec37221fc3de78b4eb0519d230cc46bc586635c15b9dc2a3b80617a47892e4e6c6d99aa321e56882fc2c091d891b0f0531e7cce10850f6e9da1d9565e9318d6241cc0ab85598159a0140290c9f3f21d0adc8fb4dec4b6eae3195a026a3386d16c8240e1da1bc247633e0dc40e2185eca262abe93f60cdc43f9137533609519f941fffc2b5a32bf02f014798d9454c3b27bf49768e8"}}}}}}}, 0x30b)

1.960655146s ago: executing program 0 (id=1358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)

1.933898186s ago: executing program 0 (id=1359):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000200, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100400, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
epoll_create(0x200)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0x7, 0x8000, 0x8})
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r8, &(0x7f0000006e00), 0x0, 0x8040)

1.840645329s ago: executing program 4 (id=1360):
socket$kcm(0x11, 0xd, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x28000600)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000400000004"], 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$eventfd(r2, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xa5ed, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r3, {0xef913361f4b45090}}, './file0\x00'})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="88", 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
r6 = socket(0x1d, 0x6, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve0\x00'})
poll(&(0x7f00000001c0)=[{r1}, {r4, 0x8000}, {r5, 0x20c0}, {0xffffffffffffffff, 0x220}, {0xffffffffffffffff, 0x10}, {r6, 0x280}], 0x6, 0x5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)

1.084339336s ago: executing program 1 (id=1361):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
alarm(0xfd48)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa0, 0x8080}}], 0x1, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x10, 0x2002)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000070ee6b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(0x3)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f00000007c0)={[{@nodioread_nolock}, {@grpjquota}, {@oldalloc}, {@discard}, {@prjquota}, {@lazytime}, {@noquota}]}, 0x0, 0x489, &(0x7f0000002dc0)="$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")
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000001080))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000020000000000000001000010040000000a0020000338ffff0000"], 0x0, 0x2e, 0x0, 0x0, 0x10}, 0x28)

618.610246ms ago: executing program 4 (id=1362):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={<r2=>0xffffffffffffffff, &(0x7f00000000c0)='wireguard\x00', 0x2205c0, &(0x7f0000000180)={@align=0x3000000, {0xa, 0x5, 0x4, 0x5cc}}, 0x4, &(0x7f00000001c0), &(0x7f0000000240)})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff44, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x4048811}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000200024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

503.302678ms ago: executing program 4 (id=1363):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x16, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x268, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffffee}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
mount_setattr(r1, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={0x71, 0x74, 0xe0000, {r0}}, 0x20)
fcntl$setlease(r8, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x1ff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)

467.94µs ago: executing program 1 (id=1364):
r0 = syz_open_dev$sg(0x0, 0x6f5e, 0xa0001)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$tipc(0x1e, 0x2, 0x0)
vmsplice(r1, &(0x7f0000000780)=[{0x0}], 0x1, 0x8)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r3=>0x0})
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)

0s ago: executing program 0 (id=1365):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000080)="5d2815561dbb8641a9ac69dbc889fbe5b51afac4f858e735a7092061ba8f8bc9a8a8acab57fcc226e7dd09b4", 0x2c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0))
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x30, 0xd, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x41)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0xd4a}}, {{0xa, 0x0, 0x9, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, 0x0, 0x0)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES8=0x0, @ANYRES32=r4], 0x0)
io_setup(0x8, &(0x7f0000004200))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, r6, 0x601, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)

kernel console output (not intermixed with test programs):

987650][ T6286] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.823: corrupted inode contents
[  188.009516][ T6286] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  188.009670][ T6286] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  188.037727][ T5956] Bluetooth: hci0: Frame reassembly failed (-84)
[  188.049789][ T6286] loop0: lost filesystem error report for type 5 error -117
[  188.049958][ T6286] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.823: corrupted inode contents
[  188.110307][ T6286] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  188.110921][ T6286] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.823: mark_inode_dirty error
[  188.132037][ T6286] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  188.137951][ T6286] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  188.156591][ T6286] loop0: lost filesystem error report for type 5 error -117
[  188.156975][ T6286] EXT4-fs (loop0): 1 truncate cleaned up
[  188.173874][ T5956] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:17: Failed to release dquot type 1
[  188.174939][ T6286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.198726][ T6286] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.238970][ T6302] loop1: detected capacity change from 0 to 512
[  188.282060][ T6302] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  188.294712][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.300804][ T6302] EXT4-fs (loop1): orphan cleanup on readonly fs
[  188.326539][ T6302] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  188.345747][ T5954] Bluetooth: hci4: Frame reassembly failed (-84)
[  188.387038][ T6302] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  188.412505][ T6302] EXT4-fs (loop1): 1 truncate cleaned up
[  188.418730][ T6302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  188.489689][ T6313] loop0: detected capacity change from 0 to 512
[  188.505838][ T6313] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.831: casefold flag without casefold feature
[  188.542516][ T6313] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  188.543503][ T6318] netlink: 'syz.3.833': attribute type 1 has an invalid length.
[  188.543911][ T6313] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.831: couldn't read orphan inode 15 (err -117)
[  188.552742][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  188.552765][    C0] EXT4-fs (loop0): initial error at time 1784178682: ext4_orphan_get:1399: inode 15
[  188.552799][    C0] EXT4-fs (loop0): last error at time 1784178682: ext4_orphan_get:1399: inode 15
[  188.597974][ T6313] loop0: lost filesystem error report for type 5 error -117
[  188.600155][ T6313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  188.620376][ T6313] ext4 filesystem being mounted at /194/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  188.685310][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  188.863787][ T6324] Process accounting resumed
[  188.991111][ T6323] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  189.008673][ T6323] bond0 (unregistering): Released all slaves
[  189.117817][ T6334] loop3: detected capacity change from 0 to 8192
[  189.137631][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.158478][ T6336] loop1: detected capacity change from 0 to 512
[  189.167411][ T6334]  loop3: p2 p3
[  189.172467][ T6334] loop3: p3 start 117440512 is beyond EOD, truncated
[  189.189104][ T6336] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.838: corrupted inode contents
[  189.201181][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.201833][ T6336] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.838: mark_inode_dirty error
[  189.222385][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  189.222413][    C0] EXT4-fs (loop1): initial error at time 1784178683: ext4_do_update_inode:5742: inode 16
[  189.222446][    C0] EXT4-fs (loop1): last error at time 1784178683: ext4_do_update_inode:5742: inode 16
[  189.251829][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.252012][ T6336] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.838: corrupted inode contents
[  189.257063][ T4827] udevd[4827]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  189.273158][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.290438][ T6336] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.838: mark_inode_dirty error
[  189.313365][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.313704][ T6336] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.838: corrupted inode contents
[  189.335088][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.335308][ T6336] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  189.353364][ T6336] loop1: lost filesystem error report for type 5 error -117
[  189.353569][ T6336] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.838: corrupted inode contents
[  189.374357][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.374652][ T6336] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.838: mark_inode_dirty error
[  189.395481][ T6336] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  189.395721][ T6336] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  189.414195][ T6336] loop1: lost filesystem error report for type 5 error -117
[  189.414629][ T6336] EXT4-fs (loop1): 1 truncate cleaned up
[  189.428139][ T6336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.440881][ T6336] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.441050][ T5944] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 1
[  189.472853][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.528989][ T6345] loop1: detected capacity change from 0 to 512
[  189.552863][ T6345] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  189.561556][ T6345] EXT4-fs (loop1): orphan cleanup on readonly fs
[  189.576007][ T6345] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  189.615215][ T6345] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  189.628337][ T6345] EXT4-fs (loop1): 1 truncate cleaned up
[  189.636882][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  189.681039][   T42] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  189.694569][ T6350] loop0: detected capacity change from 0 to 8192
[  189.963991][ T6359] syzkaller0: entered promiscuous mode
[  189.980093][ T6359] syzkaller0: entered allmulticast mode
[  189.996975][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[  190.080174][ T6294] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  190.081526][ T3548] Bluetooth: hci0: command tx timeout
[  190.128808][ T6361] loop0: detected capacity change from 0 to 512
[  190.152420][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.162317][ T6361] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (40000)
[  190.172405][ T6361] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  190.228234][ T6368] loop2: detected capacity change from 0 to 512
[  190.261121][ T6368] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  190.291034][ T6370] loop0: detected capacity change from 0 to 1024
[  190.300648][ T6368] EXT4-fs (loop2): orphan cleanup on readonly fs
[  190.324237][ T6368] __quota_error: 8 callbacks suppressed
[  190.324254][ T6368] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  190.382215][ T6370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  190.400166][ T6368] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  190.400191][   T42] Bluetooth: hci4: command 0x1003 tx timeout
[  190.422921][ T5431] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  190.430290][ T6370] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.446427][ T6368] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  190.465662][   T28] audit: type=1400 audit(1784178684.260:1203): avc:  denied  { write } for  pid=6369 comm="syz.0.849" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.492977][ T6368] EXT4-fs (loop2): 1 truncate cleaned up
[  190.510740][ T6368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.542567][ T6379] loop1: detected capacity change from 0 to 512
[  190.627496][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.851: corrupted inode contents
[  190.680065][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  190.686586][    C1] EXT4-fs (loop1): initial error at time 1784178684: ext4_do_update_inode:5742: inode 16
[  190.696477][    C1] EXT4-fs (loop1): last error at time 1784178684: ext4_do_update_inode:5742: inode 16
[  190.706760][ T6379] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.851: mark_inode_dirty error
[  190.720183][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  190.721618][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.851: corrupted inode contents
[  190.795254][ T6379] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.851: mark_inode_dirty error
[  190.821690][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.851: corrupted inode contents
[  190.848547][ T6379] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  190.880367][ T6379] loop1: lost filesystem error report for type 5 error -117
[  190.880606][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.851: corrupted inode contents
[  190.939420][ T6379] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.851: mark_inode_dirty error
[  191.082170][   T28] audit: type=1400 audit(1784178684.790:1204): avc:  denied  { sqpoll } for  pid=6378 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  191.150372][ T6379] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  191.160205][ T6379] loop1: lost filesystem error report for type 5 error -117
[  191.160755][ T6379] EXT4-fs (loop1): 1 truncate cleaned up
[  191.181368][   T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  191.193343][   T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1
[  191.217186][ T6379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.681929][   T49] loop1: lost filesystem error report for type 5 error -117
[  191.708718][ T6379] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.039299][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.148183][   T28] audit: type=1400 audit(1784178685.870:1205): avc:  denied  { write } for  pid=6377 comm="syz.1.851" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  192.192157][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.416808][ T6409] vfat: Unknown parameter 'shortnam�'
[  192.520580][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  192.557406][ T6408] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  192.624129][   T28] audit: type=1400 audit(1784178686.420:1206): avc:  denied  { create } for  pid=6396 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  192.715367][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.811572][   T28] audit: type=1400 audit(1784178686.600:1207): avc:  denied  { write } for  pid=6407 comm="syz.2.868" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  192.848741][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.891728][   T28] audit: type=1400 audit(1784178686.600:1208): avc:  denied  { write } for  pid=6407 comm="syz.2.868" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  193.012524][ T5944] Bluetooth: hci3: Frame reassembly failed (-84)
[  193.025031][ T6405]  loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2
[  193.414976][ T5944] Bluetooth: hci0: Frame reassembly failed (-84)
[  193.574161][ T6428] set_capacity_and_notify: 4 callbacks suppressed
[  193.574270][ T6428] loop2: detected capacity change from 0 to 764
[  193.588027][ T6428] iso9660: Unknown parameter '��ˁ}'
[  193.606416][   T28] audit: type=1400 audit(1784178687.400:1209): avc:  denied  { setopt } for  pid=6423 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  194.246134][ T6440] loop2: detected capacity change from 0 to 512
[  194.314864][ T6440] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  194.323233][ T6440] EXT4-fs (loop2): orphan cleanup on readonly fs
[  194.341650][ T6440] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  194.362132][ T6440] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  194.416367][ T6440] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  194.520991][ T6440] EXT4-fs (loop2): 1 truncate cleaned up
[  194.527373][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.040194][ T5431] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  195.439536][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.450342][ T6427] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  195.456535][   T42] Bluetooth: hci0: command tx timeout
[  195.589444][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'.
[  195.608438][ T6450] netlink: 8396 bytes leftover after parsing attributes in process `syz.2.869'.
[  195.652617][ T6450] netlink: 'syz.2.869': attribute type 3 has an invalid length.
[  195.664367][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'.
[  195.865081][ T6456] FAULT_INJECTION: forcing a failure.
[  195.865081][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.895984][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.0.872 Not tainted syzkaller #0 PREEMPT(lazy) 
[  195.896037][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  195.896051][ T6456] Call Trace:
[  195.896059][ T6456]  <TASK>
[  195.896069][ T6456]  __dump_stack+0x1d/0x30
[  195.896096][ T6456]  dump_stack_lvl+0x95/0xd0
[  195.896156][ T6456]  dump_stack+0x15/0x1b
[  195.896179][ T6456]  should_fail_ex+0x25e/0x270
[  195.896243][ T6456]  should_fail+0xb/0x20
[  195.896272][ T6456]  should_fail_usercopy+0x1a/0x20
[  195.896345][ T6456]  strncpy_from_user+0x27/0x250
[  195.896371][ T6456]  do_getname+0x59/0x1c0
[  195.896401][ T6456]  getname_flags+0x1d/0x30
[  195.896429][ T6456]  do_sys_openat2+0x6c/0x130
[  195.896492][ T6456]  __x64_sys_open+0xe6/0x110
[  195.896525][ T6456]  x64_sys_call+0x14b9/0x3020
[  195.896576][ T6456]  do_syscall_64+0x136/0x3c0
[  195.896602][ T6456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.896625][ T6456] RIP: 0033:0x7ff4a508de59
[  195.896701][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.896719][ T6456] RSP: 002b:00007ff4a3ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  195.896745][ T6456] RAX: ffffffffffffffda RBX: 00007ff4a5315fa0 RCX: 00007ff4a508de59
[  195.896812][ T6456] RDX: 0000000000000000 RSI: 0000000000143c62 RDI: 0000200000000740
[  195.896897][ T6456] RBP: 00007ff4a3ae7090 R08: 0000000000000000 R09: 0000000000000000
[  195.896911][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.896923][ T6456] R13: 00007ff4a5316038 R14: 00007ff4a5315fa0 R15: 00007ffed18d4ad8
[  195.896956][ T6456]  </TASK>
[  196.284769][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.874'.
[  196.384675][ T4831] udevd[4831]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  196.387851][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  196.415701][ T6474] loop1: detected capacity change from 0 to 512
[  196.422278][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory
[  196.433172][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[  196.443483][ T3760] udevd[3760]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[  196.444357][ T4830] udevd[4830]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  196.464810][ T3813] udevd[3813]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory
[  196.465939][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  196.485696][ T4827] udevd[4827]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  196.501815][ T4836] udevd[4836]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  196.533514][ T6474] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.866: corrupted inode contents
[  196.588052][ T6474] fserror_report: 7 callbacks suppressed
[  196.588070][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  196.594341][ T6474] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.866: mark_inode_dirty error
[  196.603524][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  196.603546][    C1] EXT4-fs (loop1): initial error at time 1784178690: ext4_do_update_inode:5742: inode 16
[  196.603578][    C1] EXT4-fs (loop1): last error at time 1784178690: ext4_do_update_inode:5742: inode 16
[  196.638323][ T6483] loop0: detected capacity change from 0 to 512
[  196.650397][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  196.650827][ T6474] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.866: corrupted inode contents
[  196.733405][   T28] audit: type=1400 audit(1784178690.520:1210): avc:  denied  { mount } for  pid=6488 comm="syz.2.881" name="/" dev="mqueue" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  196.758193][ T6483] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  196.808462][ T6483] EXT4-fs (loop0): orphan cleanup on readonly fs
[  196.861286][ T6483] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  196.890193][ T6483] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  196.891920][   T28] audit: type=1326 audit(1784178690.570:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  196.905006][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  196.943451][ T6483] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  197.006214][ T6474] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.866: mark_inode_dirty error
[  197.013612][   T28] audit: type=1326 audit(1784178690.570:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.027223][ T6483] EXT4-fs (loop0): 1 truncate cleaned up
[  197.057667][   T28] audit: type=1326 audit(1784178690.570:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.078657][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  197.098994][ T6483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.141486][ T6474] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.866: corrupted inode contents
[  197.209439][ T6495] loop2: detected capacity change from 0 to 512
[  197.216584][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  197.224595][   T28] audit: type=1326 audit(1784178690.570:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.239672][   T28] audit: type=1326 audit(1784178690.570:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.298653][ T6474] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  197.341724][ T6495] EXT4-fs: Ignoring removed i_version option
[  197.348737][ T6474] loop1: lost filesystem error report for type 5 error -117
[  197.348919][ T6474] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.866: corrupted inode contents
[  197.366498][   T28] audit: type=1326 audit(1784178690.570:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.390080][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  197.408635][ T6495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  197.416860][ T6474] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.866: mark_inode_dirty error
[  197.462476][ T6495] EXT4-fs (loop2): 1 truncate cleaned up
[  197.525653][ T6495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.544050][   T28] audit: type=1326 audit(1784178690.570:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.547122][ T6474] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  197.603221][ T6474] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  197.638186][   T28] audit: type=1326 audit(1784178690.570:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.2.881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9fd8de59 code=0x7ffc0000
[  197.838175][ T6474] loop1: lost filesystem error report for type 5 error -117
[  197.839488][ T6474] EXT4-fs (loop1): 1 truncate cleaned up
[  197.944833][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.021656][ T6474] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.578053][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.588907][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.644157][ T6508] loop1: detected capacity change from 0 to 1024
[  198.672610][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.711851][ T6508] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  198.768612][ T6508] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  199.184967][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.226359][ T6508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.474854][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  199.502376][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'.
[  199.605917][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'.
[  199.616159][ T6559] IPVS: set_ctl: invalid protocol: 50 10.1.32.255:19969
[  199.764629][ T6558] Falling back ldisc for ptm3.
[  199.773912][ T6558] loop2: detected capacity change from 0 to 764
[  203.702428][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  203.790766][ T6601] loop2: detected capacity change from 0 to 128
[  203.817675][ T6601] ext4: Unknown parameter '�'
[  203.866608][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  203.866625][   T28] audit: type=1400 audit(1784178697.660:1237): avc:  denied  { bind } for  pid=6604 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.921603][   T28] audit: type=1400 audit(1784178697.660:1238): avc:  denied  { name_bind } for  pid=6604 comm="syz.1.911" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  203.951396][   T49] Bluetooth: hci3: Frame reassembly failed (-84)
[  203.960339][   T28] audit: type=1400 audit(1784178697.660:1239): avc:  denied  { node_bind } for  pid=6604 comm="syz.1.911" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  204.274851][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'.
[  204.378524][ T6630] netlink: 212 bytes leftover after parsing attributes in process `syz.3.918'.
[  204.430729][ T6632] netlink: get zone limit has 4 unknown bytes
[  204.708829][ T6648] netlink: 68 bytes leftover after parsing attributes in process `syz.2.924'.
[  204.717885][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  204.728864][ T6646] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  204.741837][ T6646] loop3: detected capacity change from 0 to 128
[  204.758118][ T6646] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  204.768328][ T6646] FAT-fs (loop3): Filesystem has been set read-only
[  204.835115][   T28] audit: type=1400 audit(1784178698.630:1240): avc:  denied  { create } for  pid=6649 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  205.013374][ T6615] loop1: detected capacity change from 0 to 4096
[  205.085453][ T6655] loop4: detected capacity change from 0 to 512
[  205.098577][ T6615] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  205.111292][ T6655] msdos: Bad value for 'uid'
[  205.116202][ T6655] msdos: Bad value for 'uid'
[  205.568656][   T28] audit: type=1400 audit(1784178699.360:1241): avc:  denied  { unmount } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  206.233172][   T42] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  206.451723][   T28] audit: type=1400 audit(1784178700.240:1242): avc:  denied  { read } for  pid=6677 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  207.074856][ T6696] loop2: detected capacity change from 0 to 512
[  207.086920][ T6696] EXT4-fs (loop2): 1 truncate cleaned up
[  207.093328][ T6696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.120553][   T28] audit: type=1400 audit(1784178700.920:1243): avc:  denied  { write } for  pid=6695 comm="syz.2.939" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  207.132019][ T6703] loop4: detected capacity change from 0 to 512
[  207.149442][ T6703] EXT4-fs: Ignoring removed oldalloc option
[  207.156675][ T6696] FAULT_INJECTION: forcing a failure.
[  207.156675][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.157364][   T28] audit: type=1400 audit(1784178700.920:1244): avc:  denied  { write } for  pid=6695 comm="syz.2.939" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  207.196252][ T6703] EXT4-fs (loop4): 1 truncate cleaned up
[  207.211783][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.2.939 Not tainted syzkaller #0 PREEMPT(lazy) 
[  207.211818][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  207.211832][ T6696] Call Trace:
[  207.211838][ T6696]  <TASK>
[  207.211848][ T6696]  __dump_stack+0x1d/0x30
[  207.211914][ T6696]  dump_stack_lvl+0x95/0xd0
[  207.212006][ T6696]  dump_stack+0x15/0x1b
[  207.212027][ T6696]  should_fail_ex+0x25e/0x270
[  207.212118][ T6696]  should_fail+0xb/0x20
[  207.212151][ T6696]  should_fail_usercopy+0x1a/0x20
[  207.212187][ T6696]  _copy_from_user+0x1c/0xb0
[  207.212212][ T6696]  file_ioctl+0xbe/0x5b0
[  207.212256][ T6696]  do_vfs_ioctl+0x7c4/0xe50
[  207.212281][ T6696]  ? selinux_file_ioctl+0x33c/0x3c0
[  207.212322][ T6696]  ? __fget_files+0x184/0x1c0
[  207.212415][ T6696]  ? mutex_lock+0x57/0x90
[  207.212446][ T6696]  __se_sys_ioctl+0x82/0x140
[  207.212467][ T6696]  __x64_sys_ioctl+0x43/0x50
[  207.212500][ T6696]  x64_sys_call+0x1563/0x3020
[  207.212528][ T6696]  do_syscall_64+0x136/0x3c0
[  207.212627][ T6696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.212664][ T6696] RIP: 0033:0x7f5b9fd8de59
[  207.212685][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.212708][ T6696] RSP: 002b:00007f5b9e7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  207.212859][ T6696] RAX: ffffffffffffffda RBX: 00007f5ba0015fa0 RCX: 00007f5b9fd8de59
[  207.212877][ T6696] RDX: 0000200000000240 RSI: 0000000040305829 RDI: 0000000000000004
[  207.212897][ T6696] RBP: 00007f5b9e7e7090 R08: 0000000000000000 R09: 0000000000000000
[  207.212963][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.212979][ T6696] R13: 00007f5ba0016038 R14: 00007f5ba0015fa0 R15: 00007ffcb6f2a758
[  207.213002][ T6696]  </TASK>
[  207.218446][ T6703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.426484][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.435544][   T28] audit: type=1400 audit(1784178701.230:1245): avc:  denied  { write } for  pid=6702 comm="syz.4.941" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  207.459813][   T28] audit: type=1400 audit(1784178701.230:1246): avc:  denied  { write } for  pid=6702 comm="syz.4.941" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  207.482702][ T6703] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.941: bg 0: block 465: padding at end of block bitmap is not set
[  207.497423][ T6703] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  207.506912][ T6703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.941: invalid indirect mapped block 234881024 (level 0)
[  207.537240][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.936738][ T6718] loop0: detected capacity change from 0 to 512
[  207.998414][ T5956] Bluetooth: hci3: Frame reassembly failed (-84)
[  208.041239][ T6718] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.944: corrupted xattr block 95: invalid header
[  208.056547][ T6718] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  208.060192][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  208.076951][    C0] EXT4-fs (loop0): initial error at time 1784178701: ext4_expand_extra_isize_ea:2810: inode 11
[  208.087962][    C0] EXT4-fs (loop0): last error at time 1784178701: ext4_expand_extra_isize_ea:2810: inode 11
[  208.102838][ T6718] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.944: bg 0: block 7: invalid block bitmap
[  208.116266][ T6718] loop0: lost filesystem error report for type 5 error -117
[  208.119365][ T6718] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  208.137347][ T6718] loop0: lost filesystem error report for type 5 error -117
[  208.140982][ T6718] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.944: corrupted xattr block 95: invalid header
[  208.163078][ T6718] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  208.165464][ T6718] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117)
[  208.186220][ T6718] EXT4-fs (loop0): 1 orphan inode deleted
[  208.208614][ T6718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.483999][ T6723] program syz.4.946 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.761994][ T6723] loop4: detected capacity change from 0 to 764
[  209.070917][ T6707] loop2: detected capacity change from 0 to 512
[  209.393356][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.948'.
[  209.403407][ T6727] IPv6: Can't replace route, no match found
[  209.410543][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.431220][ T6707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  209.443728][ T6707] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  209.575508][ T6739] loop4: detected capacity change from 0 to 256
[  209.575570][ T6707] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  209.594517][ T6739] FAT-fs (loop4): Directory bread(block 1285) failed
[  209.594546][ T6739] FAT-fs (loop4): Directory bread(block 1286) failed
[  209.594569][ T6739] FAT-fs (loop4): Directory bread(block 1287) failed
[  209.594605][ T6739] FAT-fs (loop4): Directory bread(block 1288) failed
[  209.710246][ T6707] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  209.727216][ T6707] System zones: 0-2, 18-18, 34-35
[  209.841753][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.946678][ T6746] loop4: detected capacity change from 0 to 1024
[  209.991666][ T6707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.993130][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  210.000925][ T5431] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  210.013157][   T42] Bluetooth: hci3: command 0x1003 tx timeout
[  210.020190][ T6746] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.203676][ T6746] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.955: bg 0: block 112: padding at end of block bitmap is not set
[  210.258388][ T6746] EXT4-fs (loop4): Remounting filesystem read-only
[  210.270441][ T6755] netlink: 'syz.3.958': attribute type 1 has an invalid length.
[  210.319105][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  210.322244][ T6755] bond0: entered promiscuous mode
[  210.363293][ T6762] loop4: detected capacity change from 0 to 128
[  210.371924][ T6755] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.384095][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  210.384113][   T28] audit: type=1400 audit(1784178704.180:1250): avc:  denied  { write } for  pid=6754 comm="syz.3.958" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  210.452482][ T6762] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  210.478040][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.507688][ T6760] bond0: (slave gre1): The slave device specified does not support setting the MAC address
[  210.522687][ T6762] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.555098][   T28] audit: type=1400 audit(1784178704.350:1251): avc:  denied  { write } for  pid=6761 comm="syz.4.960" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.564956][ T6760] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  210.590916][ T6760] bond0: (slave gre1): Opening slave failed
[  210.638846][   T28] audit: type=1400 audit(1784178704.380:1252): avc:  denied  { setattr } for  pid=6761 comm="syz.4.960" path="/165/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.678536][ T6775] loop2: detected capacity change from 0 to 1024
[  210.704030][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.725360][ T6778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6778 comm=syz.1.966
[  210.736749][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  210.747534][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.966'.
[  210.762498][   T28] audit: type=1400 audit(1784178704.560:1253): avc:  denied  { write } for  pid=6774 comm="syz.2.965" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.868816][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.904340][ T6794] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  210.972445][ T6798] loop3: detected capacity change from 0 to 512
[  210.986870][ T6798] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.975: invalid indirect mapped block 256 (level 2)
[  211.010996][ T6798] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  211.011256][ T6798] EXT4-fs (loop3): 2 truncates cleaned up
[  211.020572][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  211.020612][    C0] EXT4-fs (loop3): initial error at time 1784178704: ext4_free_branches:1023: inode 11
[  211.020644][    C0] EXT4-fs (loop3): last error at time 1784178704: ext4_free_branches:1023: inode 11
[  211.055436][ T6809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6809 comm=syz.1.974
[  211.080820][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.642861][ T6828] loop0: detected capacity change from 0 to 512
[  211.706834][ T6828] ext2: Unknown parameter 'noacl'
[  211.824579][ T6832] geneve2: entered promiscuous mode
[  211.875451][ T6832] geneve2: entered allmulticast mode
[  212.051622][ T4297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  212.088121][ T6839] loop0: detected capacity change from 0 to 256
[  212.102224][ T4297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  212.195447][ T4297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  212.235621][ T4297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  212.256049][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.305811][   T28] audit: type=1400 audit(1784178706.100:1254): avc:  denied  { watch watch_reads } for  pid=6850 comm="syz.1.989" path="/205/file0" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  212.395934][ T6858] loop2: detected capacity change from 0 to 128
[  212.417625][ T6858] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  212.451808][ T6858] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  212.545237][   T30] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.088699][ T6872] loop3: detected capacity change from 0 to 512
[  213.247293][ T6872] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  213.274907][ T6872] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.297236][ T6872] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  213.378911][ T6872] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  213.520844][ T6872] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  213.541771][ T6872] EXT4-fs (loop3): 1 truncate cleaned up
[  213.677678][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  213.705813][   T28] audit: type=1400 audit(1784178707.500:1255): avc:  denied  { write } for  pid=6886 comm="syz.2.999" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  214.716561][ T6889] xt_TPROXY: Can be used only with -p tcp or -p udp
[  215.291083][ T6906] syzkaller0: entered promiscuous mode
[  215.299779][ T6906] syzkaller0: entered allmulticast mode
[  215.314104][ T6918] loop1: detected capacity change from 0 to 512
[  215.315223][ T6919] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  215.335502][ T6918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  215.465907][ T6918] EXT4-fs (loop1): 1 truncate cleaned up
[  215.494516][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.526884][ T6928] loop2: detected capacity change from 0 to 256
[  215.801735][   T28] audit: type=1400 audit(1784178709.590:1256): avc:  denied  { write } for  pid=6915 comm="syz.1.1007" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  215.847319][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.073659][ T6926] loop0: detected capacity change from 0 to 512
[  216.089685][ T6918] SET target dimension over the limit!
[  216.400075][ T6926] EXT4-fs: Ignoring removed oldalloc option
[  218.238805][ T6926] EXT4-fs (loop0): orphan cleanup on readonly fs
[  218.388827][ T6926] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1010: ea_inode with extended attributes
[  218.458772][ T6926] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  218.470058][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  218.485689][    C1] EXT4-fs (loop0): initial error at time 1784178712: ext4_xattr_inode_iget:441: inode 11
[  218.495553][    C1] EXT4-fs (loop0): last error at time 1784178712: ext4_xattr_inode_iget:441: inode 11
[  218.542530][ T6926] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1010: error while reading EA inode 11 err=-117
[  218.592393][ T6926] loop0: lost filesystem error report for type 5 error -117
[  218.663499][ T6926] EXT4-fs (loop0): 1 orphan inode deleted
[  218.803150][ T6954] loop3: detected capacity change from 0 to 128
[  218.859848][ T6954] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  218.936964][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.950878][ T6954] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.055033][   T28] audit: type=1400 audit(1784178712.850:1257): avc:  denied  { bind } for  pid=6958 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  219.139768][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  219.216488][ T4297] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.412394][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.425465][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'.
[  219.494942][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.531993][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.541034][   T28] audit: type=1400 audit(1784178713.330:1258): avc:  denied  { append } for  pid=6989 comm="syz.3.1027" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  219.576216][ T6992] loop1: detected capacity change from 0 to 512
[  219.585106][ T6992] EXT4-fs: Ignoring removed nobh option
[  219.610518][   T28] audit: type=1326 audit(1784178713.410:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  219.656876][ T6992] ------------[ cut here ]------------
[  219.656905][   T28] audit: type=1326 audit(1784178713.410:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  219.662518][ T6992] EA inode 11 i_nlink=1026
[  219.688468][ T6992] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.1.1018/6992
[  219.704034][ T6992] Modules linked in:
[  219.708062][ T6992] CPU: 1 UID: 0 PID: 6992 Comm: syz.1.1018 Not tainted syzkaller #0 PREEMPT(lazy) 
[  219.717449][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  219.728226][ T6992] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330
[  219.735178][ T6992] Code: 96 c5 96 ff 49 8d 7e 40 4c 8d 2d fb a3 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 ad d9 03 90 90 90 90 90 90 90
[  219.755732][ T6992] RSP: 0018:ffffc900117cf7f8 EFLAGS: 00010246
[  219.761915][ T6992] RAX: ffff888103fce170 RBX: ffff888105ad3360 RCX: ffffffff81c29236
[  219.769927][ T6992] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3620
[  219.777969][ T6992] RBP: 000000000000000b R08: 0001888105ad3313 R09: 0000000000000000
[  219.786633][ T6992] R10: ffffc900117cf728 R11: 0001c900117cf728 R12: ffff888105ad3310
[  219.795327][ T6992] R13: ffffffff871d3620 R14: ffff888105ad32c8 R15: 0000000000000001
[  219.803425][ T6992] FS:  00007f406f6256c0(0000) GS:ffff8882ae9cf000(0000) knlGS:0000000000000000
[  219.812964][ T6992] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.814152][   T28] audit: type=1326 audit(1784178713.410:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  219.819596][ T6992] CR2: 00001ffffffffe80 CR3: 000000011f006000 CR4: 00000000003506f0
[  219.819623][ T6992] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000
[  219.819637][ T6992] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  219.819653][ T6992] Call Trace:
[  219.819662][ T6992]  <TASK>
[  219.876791][ T6992]  ext4_xattr_inode_dec_ref_all+0x579/0x8d0
[  219.882990][ T6992]  ext4_xattr_delete_inode+0x6b5/0x790
[  219.888575][ T6992]  ext4_evict_inode+0xb18/0xdf0
[  219.893627][ T6992]  ? __pfx_ext4_evict_inode+0x10/0x10
[  219.899102][ T6992]  evict+0x2a5/0x510
[  219.903611][ T6992]  iput+0x430/0x5a0
[  219.907483][ T6992]  ext4_process_orphan+0x1a4/0x1c0
[  219.912683][ T6992]  ext4_orphan_cleanup+0x6a6/0xa10
[  219.917909][ T6992]  ? ext4_register_li_request+0x403/0x440
[  219.923902][ T6992]  ext4_fill_super+0x33ab/0x3760
[  219.929702][ T6992]  ? set_blocksize+0x14c/0x270
[  219.935100][ T6992]  ? __pfx_ext4_fill_super+0x10/0x10
[  219.940623][ T6992]  get_tree_bdev_flags+0x291/0x300
[  219.943524][   T28] audit: type=1326 audit(1784178713.410:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  219.945912][ T6992]  ? __pfx_ext4_fill_super+0x10/0x10
[  219.976667][ T6992]  get_tree_bdev+0x1f/0x30
[  219.982164][ T6992]  ext4_get_tree+0x1c/0x30
[  219.986670][ T6992]  vfs_get_tree+0x57/0x1d0
[  219.991168][ T6992]  do_new_mount+0x288/0x8d0
[  219.995711][ T6992]  path_mount+0x4ad/0xb90
[  220.000168][ T6992]  __se_sys_mount+0x28c/0x2e0
[  220.005168][ T6992]  __x64_sys_mount+0x67/0x80
[  220.009909][ T6992]  x64_sys_call+0x2d61/0x3020
[  220.015351][ T6992]  do_syscall_64+0x136/0x3c0
[  220.020089][ T6992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.024684][   T28] audit: type=1326 audit(1784178713.440:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  220.026129][ T6992] RIP: 0033:0x7f4070c0f0ca
[  220.056109][ T6992] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.076385][ T6992] RSP: 002b:00007f406f624e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  220.085079][ T6992] RAX: ffffffffffffffda RBX: 00007f406f624ee0 RCX: 00007f4070c0f0ca
[  220.093285][ T6992] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f406f624ea0
[  220.101826][ T6992] RBP: 0000200000000180 R08: 00007f406f624ee0 R09: 0000000000000000
[  220.110116][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
[  220.118250][ T6992] R13: 00007f406f624ea0 R14: 00000000000004a2 R15: 0000200000000200
[  220.126582][ T6992]  </TASK>
[  220.129857][ T6992] ---[ end trace 0000000000000000 ]---
[  220.136715][ T6992] EXT4-fs (loop1): 1 orphan inode deleted
[  220.143026][ T6992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.157622][   T28] audit: type=1326 audit(1784178713.440:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  220.247249][   T28] audit: type=1326 audit(1784178713.440:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.0.1025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a508de59 code=0x7ffc0000
[  222.344457][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.513649][ T7028] loop4: detected capacity change from 0 to 512
[  223.190816][ T7043] loop1: detected capacity change from 0 to 256
[  223.238773][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  223.835570][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  223.835657][   T28] audit: type=1400 audit(1784178717.630:1278): avc:  denied  { lock } for  pid=7052 comm="syz.4.1046" path="socket:[16288]" dev="sockfs" ino=16288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  223.922693][   T28] audit: type=1400 audit(1784178717.710:1279): avc:  denied  { getopt } for  pid=7052 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  223.972568][ T7053] 9p: Could not find request transport: f[�d
[  224.098282][ T7055] loop4: detected capacity change from 0 to 1024
[  224.133856][ T7055] EXT4-fs: dax option not supported
[  224.466303][ T7064] loop4: detected capacity change from 0 to 512
[  224.481553][ T7064] EXT4-fs: Ignoring removed i_version option
[  224.488664][ T7064] EXT4-fs: Ignoring removed bh option
[  224.643929][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.664460][ T7064] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.860127][   T28] audit: type=1400 audit(1784178718.650:1280): avc:  denied  { search } for  pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.765895][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.838444][   T28] audit: type=1400 audit(1784178718.650:1281): avc:  denied  { search } for  pid=3019 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.860258][   T28] audit: type=1400 audit(1784178718.650:1282): avc:  denied  { search } for  pid=3019 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.295285][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'.
[  226.496002][   T28] audit: type=1400 audit(1784178718.650:1283): avc:  denied  { read } for  pid=3019 comm="dhcpcd" name="n26" dev="tmpfs" ino=8916 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  226.518193][   T28] audit: type=1400 audit(1784178718.650:1284): avc:  denied  { open } for  pid=3019 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=8916 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  226.560200][   T28] audit: type=1400 audit(1784178718.650:1285): avc:  denied  { getattr } for  pid=3019 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=8916 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  226.645139][   T28] audit: type=1400 audit(1784178719.460:1286): avc:  denied  { read } for  pid=7082 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.786087][   T28] audit: type=1400 audit(1784178719.460:1287): avc:  denied  { read open } for  pid=7082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.875633][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'.
[  228.420773][ T7159] netlink: 'syz.4.1068': attribute type 21 has an invalid length.
[  228.464301][ T7159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1068'.
[  228.501277][ T7163] netlink: 'syz.4.1068': attribute type 2 has an invalid length.
[  228.509471][ T7163] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1068'.
[  228.515396][ T7164] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1070'.
[  228.547447][ T7164] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1070'.
[  228.571585][    C1] sd 0:0:1:0: [sda] tag#5897 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  228.582119][    C1] sd 0:0:1:0: [sda] tag#5897 CDB: Read(6) 08 00 e3 ec 00 a7
[  228.696097][ T7169] loop0: detected capacity change from 0 to 1024
[  228.736339][ T7169] EXT4-fs: dax option not supported
[  228.845464][ T7172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  228.876059][ T7175] SELinux:  Context �Y7 is not valid (left unmapped).
[  228.918162][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  228.918183][   T28] audit: type=1400 audit(1784178722.710:1303): avc:  denied  { create } for  pid=7171 comm="syz.1.1073" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9B5937
[  228.956104][ T7172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  228.994645][   T28] audit: type=1400 audit(1784178722.710:1304): avc:  denied  { associate } for  pid=7171 comm="syz.1.1073" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9B5937
[  229.065312][   T28] audit: type=1400 audit(1784178722.710:1305): avc:  denied  { write open } for  pid=7171 comm="syz.1.1073" path="/224/file0" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9B5937
[  229.276624][ T7156] syz.4.1068 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  229.330225][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.4.1068 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  229.330267][ T7156] Tainted: [W]=WARN
[  229.330275][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  229.330288][ T7156] Call Trace:
[  229.330374][ T7156]  <TASK>
[  229.330384][ T7156]  __dump_stack+0x1d/0x30
[  229.330457][ T7156]  dump_stack_lvl+0x95/0xd0
[  229.330480][ T7156]  dump_stack+0x15/0x1b
[  229.330528][ T7156]  dump_header+0x80/0x240
[  229.330555][ T7156]  oom_kill_process+0x295/0x350
[  229.330591][ T7156]  out_of_memory+0x981/0xbc0
[  229.330702][ T7156]  try_charge_memcg+0x621/0xa00
[  229.330746][ T7156]  charge_memcg+0x6d/0x120
[  229.330854][ T7156]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  229.330942][ T7156]  swap_cache_alloc_folio+0x47b/0x5e0
[  229.330977][ T7156]  swap_cluster_readahead+0x3d2/0x460
[  229.331051][ T7156]  swapin_readahead+0xd8/0x8a0
[  229.331086][ T7156]  ? _raw_spin_unlock+0x9/0x30
[  229.331113][ T7156]  ? swap_put_entries_cluster+0x49c/0x4c0
[  229.331150][ T7156]  ? __entry_text_end+0xf208/0x102179
[  229.331201][ T7156]  ? __rcu_read_unlock+0x4e/0x70
[  229.331260][ T7156]  ? swap_cache_get_folio+0x1f7/0x200
[  229.331368][ T7156]  do_swap_page+0x2a2/0x1ec0
[  229.331412][ T7156]  ? __css_rstat_updated+0xbb/0x280
[  229.331444][ T7156]  ? __rcu_read_lock+0x36/0x50
[  229.331477][ T7156]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  229.331511][ T7156]  handle_mm_fault+0xb3c/0x2da0
[  229.331557][ T7156]  do_user_addr_fault+0x634/0x1060
[  229.331591][ T7156]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  229.331620][ T7156]  ? trace_page_fault_user+0x1f/0xa0
[  229.331653][ T7156]  exc_page_fault+0x62/0xa0
[  229.331687][ T7156]  asm_exc_page_fault+0x26/0x30
[  229.331744][ T7156] RIP: 0033:0x7fd3fc7c4766
[  229.331762][ T7156] Code: 48 8d 3d 64 01 1d 00 31 c0 e8 b6 ec fe ff 66 0f 1f 44 00 00 0f b6 05 8e 0f ef 00 84 c0 74 0b 0f b6 05 71 0f ef 00 84 c0 74 0a <c3> 66 0f 1f 84 00 00 00 00 00 0f b6 05 5d 0f ef 00 0f b6 15 52 0f
[  229.331785][ T7156] RSP: 002b:00007ffe22b84808 EFLAGS: 00010202
[  229.331824][ T7156] RAX: 0000000000000001 RBX: 00007fd3fcb85fa0 RCX: 0000000000037e88
[  229.331872][ T7156] RDX: 00000000000000bd RSI: 00007ffe22b847f0 RDI: 0000000000000001
[  229.331933][ T7156] RBP: 00007fd3fcb87da0 R08: 00007fd3fcb85fa0 R09: 3fffffffffffffff
[  229.332024][ T7156] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000037f21
[  229.332094][ T7156] R13: 00007fd3fcb8609c R14: 0000000000037ced R15: 00007fd3fcb86090
[  229.332115][ T7156]  </TASK>
[  229.589988][ T7156] memory: usage 57056kB, limit 307200kB, failcnt 647
[  229.597879][ T7156] memory+swap: usage 51440kB, limit 9007199254740988kB, failcnt 0
[  229.606892][ T7156] kmem: usage 44344kB, limit 9007199254740988kB, failcnt 0
[  229.616984][ T7156] Memory cgroup stats for /syz4:
[  229.617270][ T7156] cache 524288
[  229.625981][ T7156] rss 4096
[  229.639757][ T7156] shmem 0
[  229.642891][ T7156] mapped_file 65536
[  229.672448][ T7156] dirty 0
[  229.676003][ T7172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  229.690340][ T7186] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  229.700190][ T7156] writeback 0
[  229.715905][ T7172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  229.716646][ T7156] workingset_refault_anon 136
[  229.769807][ T7156] workingset_refault_file 2055
[  229.781266][ T7156] swap 372736
[  229.790091][   T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  229.798714][   T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  229.811510][ T7156] swapcached 1318912
[  229.822459][ T7156] pgpgin 112848
[  229.830180][   T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  229.842169][ T7156] pgpgout 112719
[  229.848899][   T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  229.860583][ T7156] pgfault 141695
[  229.870782][ T7156] pgmajfault 121
[  229.879460][ T7156] inactive_anon 0
[  229.892633][ T7156] active_anon 4096
[  229.895233][   T28] audit: type=1400 audit(1784178723.690:1306): avc:  denied  { unlink } for  pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9B5937
[  229.900221][ T7156] inactive_file 0
[  229.944974][ T7156] active_file 507904
[  229.949159][ T7156] unevictable 0
[  229.961623][ T7156] hierarchical_memory_limit 314572800
[  229.984028][ T7156] hierarchical_memsw_limit 9223372036854771712
[  229.990561][ T7156] total_cache 524288
[  230.008410][ T7156] total_rss 4096
[  230.020216][ T7156] total_shmem 0
[  230.023882][ T7156] total_mapped_file 65536
[  230.028363][ T7156] total_dirty 0
[  230.033616][ T7156] total_writeback 0
[  230.037709][ T7156] total_workingset_refault_anon 136
[  230.073500][ T7156] total_workingset_refault_file 2055
[  230.080277][   T28] audit: type=1400 audit(1784178723.870:1307): avc:  denied  { read } for  pid=7204 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  230.089873][ T7156] total_swap 372736
[  230.154948][ T7156] total_swapcached 1318912
[  230.165881][ T7156] total_pgpgin 112848
[  230.178120][ T7156] total_pgpgout 112719
[  230.186316][ T7156] total_pgfault 141695
[  230.190896][ T7156] total_pgmajfault 121
[  230.197308][ T7156] total_inactive_anon 0
[  230.201764][ T7156] total_active_anon 4096
[  230.206227][ T7156] total_inactive_file 0
[  230.210782][ T7156] total_active_file 507904
[  230.236752][ T7156] total_unevictable 0
[  230.243193][ T7156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1068,pid=7156,uid=0
[  230.244305][ T7209] loop2: detected capacity change from 0 to 512
[  230.259224][ T7156] Memory cgroup out of memory: Killed process 7156 (syz.4.1068) total-vm:96360kB, anon-rss:1240kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  230.377905][ T7218] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  230.464761][ T7158] syz.4.1068 (7158) used greatest stack depth: 8896 bytes left
[  230.502695][ T7209] loop2: detected capacity change from 0 to 1164
[  230.604011][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'.
[  230.827334][ T7227] loop4: detected capacity change from 0 to 512
[  230.982832][ T7227] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.1092: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  231.196264][ T7227] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  231.197179][ T7227] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.1092: Bad quota inode: 4, type: 1
[  231.206446][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  231.206468][    C0] EXT4-fs (loop4): initial error at time 1784178724: ext4_ext_check_inode:521: inode 4
[  231.206500][    C0] EXT4-fs (loop4): last error at time 1784178724: ext4_ext_check_inode:521: inode 4
[  231.529321][ T7241] loop0: detected capacity change from 0 to 2364
[  231.553318][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'.
[  231.620362][   T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.629221][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'.
[  231.642995][   T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.658368][ T7227] loop4: lost filesystem error report for type 5 error -117
[  231.658594][ T7227] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  231.683010][   T28] audit: type=1400 audit(1784178725.480:1308): avc:  denied  { map } for  pid=7248 comm="syz.0.1102" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  231.687439][   T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.716545][ T7227] EXT4-fs (loop4): mount failed
[  231.717830][   T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.783083][ T7255] loop3: detected capacity change from 0 to 1024
[  232.066828][ T7274] loop0: detected capacity change from 0 to 512
[  232.093366][ T7274] EXT4-fs: quotafile must be on filesystem root
[  232.140287][   T28] audit: type=1400 audit(1784178725.880:1309): avc:  denied  { nlmsg_read } for  pid=7271 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  232.518137][   T28] audit: type=1400 audit(1784178726.310:1310): avc:  denied  { mounton } for  pid=7281 comm="syz.1.1113" path="/" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  232.532144][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'.
[  232.699922][ T7293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1116'.
[  232.755255][ T7297] loop1: detected capacity change from 0 to 128
[  232.823135][ T7297] vfat: Bad value for 'errors'
[  233.083734][ T7306] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma?
[  233.207410][ T7307] vti0: entered promiscuous mode
[  233.212448][ T7307] vti0: entered allmulticast mode
[  233.341756][   T28] audit: type=1400 audit(1784178727.140:1311): avc:  denied  { bind } for  pid=7308 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  233.354399][ T7279] loop0: detected capacity change from 0 to 512
[  233.385250][   T28] audit: type=1400 audit(1784178727.160:1312): avc:  denied  { write } for  pid=7308 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  233.489398][ T7295] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1117'.
[  233.524664][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.583544][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.630046][ T7279] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  233.741141][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  233.763196][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  233.888758][ T7279] EXT4-fs (loop0): 1 truncate cleaned up
[  233.926757][ T7320] loop2: detected capacity change from 0 to 1024
[  234.008206][   T28] audit: type=1326 audit(1784178727.800:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.051242][   T28] audit: type=1326 audit(1784178727.800:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.097798][   T28] audit: type=1326 audit(2000000000.000:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.144521][   T28] audit: type=1326 audit(2000000000.000:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.264160][   T28] audit: type=1326 audit(2000000000.020:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.323311][   T28] audit: type=1326 audit(2000000000.020:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.429501][   T28] audit: type=1326 audit(2000000000.130:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.458189][   T28] audit: type=1326 audit(2000000000.180:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.489336][ T7339] tmpfs: Bad value for 'nr_blocks'
[  234.519138][ T7279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.542200][   T28] audit: type=1326 audit(2000000000.180:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.583224][   T28] audit: type=1326 audit(2000000000.310:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4070c0de59 code=0x7ffc0000
[  234.692260][ T7342] loop4: detected capacity change from 0 to 512
[  234.712761][ T7342] EXT4-fs: inline encryption not supported
[  234.731761][ T7342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  234.755758][ T7342] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  234.772715][ T7342] EXT4-fs (loop4): group descriptors corrupted!
[  234.814877][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.943429][ T7355] FAULT_INJECTION: forcing a failure.
[  234.943429][ T7355] name failslab, interval 1, probability 0, space 0, times 0
[  234.979147][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.0.1136 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  234.979189][ T7355] Tainted: [W]=WARN
[  234.979273][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  234.979288][ T7355] Call Trace:
[  234.979295][ T7355]  <TASK>
[  234.979303][ T7355]  __dump_stack+0x1d/0x30
[  234.979404][ T7355]  dump_stack_lvl+0x95/0xd0
[  234.979425][ T7355]  dump_stack+0x15/0x1b
[  234.979450][ T7355]  should_fail_ex+0x25e/0x270
[  234.979482][ T7355]  should_failslab+0x8c/0xb0
[  234.979511][ T7355]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  234.979538][ T7355]  ? skb_clone+0x151/0x1f0
[  234.979594][ T7355]  ? skb_clone+0x151/0x1f0
[  234.979634][ T7355]  skb_clone+0x151/0x1f0
[  234.979678][ T7355]  __netlink_deliver_tap+0x2be/0x510
[  234.979711][ T7355]  netlink_unicast+0x654/0x680
[  234.979738][ T7355]  netlink_sendmsg+0x5be/0x6f0
[  234.979818][ T7355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.979866][ T7355]  ____sys_sendmsg+0x532/0x580
[  234.979907][ T7355]  ___sys_sendmsg+0x195/0x1e0
[  234.979951][ T7355]  __x64_sys_sendmsg+0xd4/0x160
[  234.980004][ T7355]  x64_sys_call+0x194c/0x3020
[  234.980043][ T7355]  do_syscall_64+0x136/0x3c0
[  234.980069][ T7355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.980220][ T7355] RIP: 0033:0x7ff4a508de59
[  234.980238][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.980257][ T7355] RSP: 002b:00007ff4a3ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.980284][ T7355] RAX: ffffffffffffffda RBX: 00007ff4a5315fa0 RCX: 00007ff4a508de59
[  234.980302][ T7355] RDX: 0000000004008844 RSI: 0000200000000000 RDI: 0000000000000003
[  234.980372][ T7355] RBP: 00007ff4a3ae7090 R08: 0000000000000000 R09: 0000000000000000
[  234.980388][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.980404][ T7355] R13: 00007ff4a5316038 R14: 00007ff4a5315fa0 R15: 00007ffed18d4ad8
[  234.980427][ T7355]  </TASK>
[  235.190660][ T7332] loop3: detected capacity change from 0 to 512
[  235.230895][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  237.213039][ T7332] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  237.222448][ T7332] EXT4-fs: failed to create workqueue
[  237.473559][ T7332] EXT4-fs (loop3): mount failed
[  237.901326][ T7374] FAULT_INJECTION: forcing a failure.
[  237.901326][ T7374] name failslab, interval 1, probability 0, space 0, times 0
[  237.944609][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz.0.1142 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  237.944696][ T7374] Tainted: [W]=WARN
[  237.944776][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  237.944821][ T7374] Call Trace:
[  237.944829][ T7374]  <TASK>
[  237.944837][ T7374]  __dump_stack+0x1d/0x30
[  237.944861][ T7374]  dump_stack_lvl+0x95/0xd0
[  237.944952][ T7374]  dump_stack+0x15/0x1b
[  237.944976][ T7374]  should_fail_ex+0x25e/0x270
[  237.945006][ T7374]  should_failslab+0x8c/0xb0
[  237.945088][ T7374]  __kmalloc_noprof+0xd4/0x4a0
[  237.945116][ T7374]  ? fib_create_info+0xb84/0x18e0
[  237.945144][ T7374]  ? fib_create_info+0xb84/0x18e0
[  237.945198][ T7374]  fib_create_info+0xb84/0x18e0
[  237.945232][ T7374]  fib_table_insert+0x61/0xee0
[  237.945290][ T7374]  ? fib_trie_table+0xb3/0xf0
[  237.945329][ T7374]  ? fib_trie_table+0xd0/0xf0
[  237.945398][ T7374]  ? fib_new_table+0x1d4/0x1f0
[  237.945460][ T7374]  inet_rtm_newroute+0xb5/0x160
[  237.945494][ T7374]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  237.945570][ T7374]  rtnetlink_rcv_msg+0x64b/0x720
[  237.945596][ T7374]  netlink_rcv_skb+0x11e/0x220
[  237.945619][ T7374]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  237.945648][ T7374]  rtnetlink_rcv+0x1c/0x30
[  237.945677][ T7374]  netlink_unicast+0x5a7/0x680
[  237.945735][ T7374]  netlink_sendmsg+0x5be/0x6f0
[  237.945766][ T7374]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.945795][ T7374]  ____sys_sendmsg+0x532/0x580
[  237.945875][ T7374]  ___sys_sendmsg+0x195/0x1e0
[  237.946004][ T7374]  __x64_sys_sendmsg+0xd4/0x160
[  237.946117][ T7374]  x64_sys_call+0x194c/0x3020
[  237.946140][ T7374]  do_syscall_64+0x136/0x3c0
[  237.946163][ T7374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.946190][ T7374] RIP: 0033:0x7ff4a508de59
[  237.946267][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.946287][ T7374] RSP: 002b:00007ff4a3ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.946309][ T7374] RAX: ffffffffffffffda RBX: 00007ff4a5315fa0 RCX: 00007ff4a508de59
[  237.946324][ T7374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  237.946393][ T7374] RBP: 00007ff4a3ae7090 R08: 0000000000000000 R09: 0000000000000000
[  237.946409][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.946424][ T7374] R13: 00007ff4a5316038 R14: 00007ff4a5315fa0 R15: 00007ffed18d4ad8
[  237.946445][ T7374]  </TASK>
[  238.205255][ T7367] loop4: detected capacity change from 0 to 512
[  238.227021][ T7367] EXT4-fs: Ignoring removed nobh option
[  238.279960][ T7378] loop0: detected capacity change from 0 to 512
[  238.288846][ T7378] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  238.360184][ T7367] EXT4-fs (loop4): orphan cleanup on readonly fs
[  238.395117][ T7391] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1149'.
[  238.409060][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'.
[  238.424634][ T7387] loop2: detected capacity change from 0 to 1024
[  238.540037][ T7367] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1140: EA inode hash validation failed
[  238.679767][ T7367] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  238.699029][ T7401] loop0: detected capacity change from 0 to 1024
[  238.718823][ T7367] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1140: corrupted inode contents
[  238.733271][ T7367] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.734641][ T7367] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.1140: mark_inode_dirty error
[  238.736279][ T7401] EXT4-fs: Ignoring removed bh option
[  238.748255][ T7367] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.756831][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  238.756912][    C1] EXT4-fs (loop4): initial error at time 2000000004: ext4_do_update_inode:5742: inode 15
[  238.757059][    C1] EXT4-fs (loop4): last error at time 2000000004: ext4_do_update_inode:5742: inode 15
[  238.762501][ T7401] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  238.771853][ T7367] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1140: corrupted inode contents
[  238.829957][ T7367] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.834016][ T7367] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.1140: mark_inode_dirty error
[  238.838988][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.848042][ T7367] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.874777][ T7367] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.1140: mark inode dirty (error -117)
[  239.007954][ T7367] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  239.018072][ T7367] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[  239.058663][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.073954][ T7367] EXT4-fs (loop4): 1 orphan inode deleted
[  240.084073][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  240.281850][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.074753][ T7429] FAULT_INJECTION: forcing a failure.
[  242.074753][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.460706][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.1.1158 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  242.460764][ T7429] Tainted: [W]=WARN
[  242.460772][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  242.460787][ T7429] Call Trace:
[  242.460794][ T7429]  <TASK>
[  242.460803][ T7429]  __dump_stack+0x1d/0x30
[  242.460850][ T7429]  dump_stack_lvl+0x95/0xd0
[  242.460887][ T7429]  dump_stack+0x15/0x1b
[  242.460908][ T7429]  should_fail_ex+0x25e/0x270
[  242.460941][ T7429]  should_fail+0xb/0x20
[  242.460988][ T7429]  should_fail_usercopy+0x1a/0x20
[  242.461030][ T7429]  _copy_to_user+0x20/0xa0
[  242.461051][ T7429]  simple_read_from_buffer+0xb5/0x130
[  242.461076][ T7429]  proc_fail_nth_read+0x10e/0x150
[  242.461201][ T7429]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.461262][ T7429]  vfs_read+0x18e/0x7c0
[  242.461279][ T7429]  ? __rcu_read_unlock+0x4e/0x70
[  242.461309][ T7429]  ? __fget_files+0x184/0x1c0
[  242.461362][ T7429]  ? mutex_lock+0x57/0x90
[  242.461470][ T7429]  ksys_read+0xdc/0x1a0
[  242.461490][ T7429]  __x64_sys_read+0x40/0x50
[  242.461511][ T7429]  x64_sys_call+0x2886/0x3020
[  242.461594][ T7429]  do_syscall_64+0x136/0x3c0
[  242.461620][ T7429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.461644][ T7429] RIP: 0033:0x7f4070bce68e
[  242.461707][ T7429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  242.461726][ T7429] RSP: 002b:00007f406f666fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  242.461748][ T7429] RAX: ffffffffffffffda RBX: 00007f406f6676c0 RCX: 00007f4070bce68e
[  242.461763][ T7429] RDX: 000000000000000f RSI: 00007f406f6670a0 RDI: 0000000000000009
[  242.461776][ T7429] RBP: 00007f406f667090 R08: 0000000000000000 R09: 0000000000000000
[  242.461858][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.461874][ T7429] R13: 00007f4070e96038 R14: 00007f4070e95fa0 R15: 00007ffe6ff55b28
[  242.461897][ T7429]  </TASK>
[  243.900818][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  243.900847][   T28] audit: type=1400 audit(2000000009.790:1329): avc:  denied  { ioctl } for  pid=7432 comm="syz.1.1160" path="socket:[17252]" dev="sockfs" ino=17252 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  244.186253][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.201782][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.211726][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.219251][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.239847][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.247768][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'.
[  244.270526][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.300804][ T7451] loop1: detected capacity change from 0 to 256
[  244.534344][ T7460] loop1: detected capacity change from 0 to 1024
[  246.799660][ T7480] loop2: detected capacity change from 0 to 128
[  246.906516][ T7480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  247.016712][ T7480] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  247.055356][ T7485] SELinux: security_context_str_to_sid (}o�b��?3b��l��G��;o������xo�) failed with errno=-22
[  247.533084][ T7492] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in;
[  247.533084][ T7492]    program syz.0.1180 not setting count and/or reply_len properly
[  247.559629][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'.
[  247.837660][ T7498] FAULT_INJECTION: forcing a failure.
[  247.837660][ T7498] name failslab, interval 1, probability 0, space 0, times 0
[  247.907206][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.0.1182 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  247.907248][ T7498] Tainted: [W]=WARN
[  247.907257][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  247.907272][ T7498] Call Trace:
[  247.907361][ T7498]  <TASK>
[  247.907372][ T7498]  __dump_stack+0x1d/0x30
[  247.907402][ T7498]  dump_stack_lvl+0x95/0xd0
[  247.907427][ T7498]  dump_stack+0x15/0x1b
[  247.907449][ T7498]  should_fail_ex+0x25e/0x270
[  247.907560][ T7498]  should_failslab+0x8c/0xb0
[  247.907614][ T7498]  __kmalloc_node_track_caller_noprof+0xd5/0x4c0
[  247.907645][ T7498]  ? sidtab_sid2str_get+0xa0/0x130
[  247.907683][ T7498]  ? sidtab_sid2str_get+0xa0/0x130
[  247.907794][ T7498]  kmemdup_noprof+0x2b/0x70
[  247.907841][ T7498]  sidtab_sid2str_get+0xa0/0x130
[  247.907878][ T7498]  security_sid_to_context_core+0x1eb/0x2e0
[  247.907956][ T7498]  security_sid_to_context+0x27/0x40
[  247.908025][ T7498]  avc_audit_post_callback+0x10f/0x520
[  247.908052][ T7498]  ? audit_log_lsm_data+0x759/0xbb0
[  247.908154][ T7498]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  247.908179][ T7498]  common_lsm_audit+0x1ba/0x230
[  247.908261][ T7498]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  247.908296][ T7498]  ? avc_denied+0xe4/0x100
[  247.908321][ T7498]  slow_avc_audit+0x14c/0x190
[  247.908379][ T7498]  avc_has_perm+0x144/0x190
[  247.908406][ T7498]  selinux_lsm_setattr+0x118/0x650
[  247.908432][ T7498]  selinux_setprocattr+0x4f/0x70
[  247.908462][ T7498]  security_setprocattr+0x1a7/0x1d0
[  247.908610][ T7498]  proc_pid_attr_write+0x1ea/0x220
[  247.908645][ T7498]  vfs_writev+0x41e/0x8b0
[  247.908672][ T7498]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  247.908703][ T7498]  do_writev+0xe9/0x210
[  247.908738][ T7498]  __x64_sys_writev+0x45/0x50
[  247.908799][ T7498]  x64_sys_call+0x1c0c/0x3020
[  247.908827][ T7498]  do_syscall_64+0x136/0x3c0
[  247.908854][ T7498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.908880][ T7498] RIP: 0033:0x7ff4a508de59
[  247.908904][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.908926][ T7498] RSP: 002b:00007ff4a3ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  247.908967][ T7498] RAX: ffffffffffffffda RBX: 00007ff4a5315fa0 RCX: 00007ff4a508de59
[  247.908985][ T7498] RDX: 100000000000022d RSI: 00002000000003c0 RDI: 0000000000000003
[  247.909016][ T7498] RBP: 00007ff4a3ae7090 R08: 0000000000000000 R09: 0000000000000000
[  247.909032][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.909048][ T7498] R13: 00007ff4a5316038 R14: 00007ff4a5315fa0 R15: 00007ffed18d4ad8
[  247.909071][ T7498]  </TASK>
[  248.223128][   T28] audit: type=1400 audit(2000000013.820:1330): avc:  denied  { setcurrent } for  pid=7497 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tsid=137 tclass=process permissive=1
[  248.836096][ T7502] loop3: detected capacity change from 0 to 1024
[  248.870572][ T7502] EXT4-fs: Ignoring removed orlov option
[  248.892473][ T7502] EXT4-fs: Ignoring removed orlov option
[  248.911714][ T7502] EXT4-fs: inline encryption not supported
[  248.983856][ T7502] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  249.112263][ T7502] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  249.149676][ T7502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  249.799203][    C1] sd 0:0:1:0: [sda] tag#5913 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  249.809628][    C1] sd 0:0:1:0: [sda] tag#5913 CDB: Read(6) 08 00 e3 ec 00 a7
[  249.942523][ T7525] loop3: detected capacity change from 0 to 512
[  250.193951][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1194'.
[  250.477625][    C1] sd 0:0:1:0: [sda] tag#5914 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  250.488044][    C1] sd 0:0:1:0: [sda] tag#5914 CDB: Read(6) 08 00 e3 ec 00 a7
[  250.626263][ T7561] loop3: detected capacity change from 0 to 256
[  251.201023][   T28] audit: type=1400 audit(2000000017.180:1331): avc:  denied  { read } for  pid=7569 comm="syz.1.1205" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  251.201096][   T28] audit: type=1400 audit(2000000017.180:1332): avc:  denied  { open } for  pid=7569 comm="syz.1.1205" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  251.201244][   T28] audit: type=1400 audit(2000000017.190:1333): avc:  denied  { ioctl } for  pid=7569 comm="syz.1.1205" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  251.891500][ T7580] loop4: detected capacity change from 0 to 4096
[  251.959626][ T7580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.068631][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.347665][ T7586] loop4: detected capacity change from 0 to 4096
[  252.390561][ T7586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.462934][ T7586] FAULT_INJECTION: forcing a failure.
[  252.462934][ T7586] name failslab, interval 1, probability 0, space 0, times 0
[  252.509520][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.4.1209 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  252.509626][ T7586] Tainted: [W]=WARN
[  252.509638][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  252.509655][ T7586] Call Trace:
[  252.509664][ T7586]  <TASK>
[  252.509675][ T7586]  __dump_stack+0x1d/0x30
[  252.509707][ T7586]  dump_stack_lvl+0x95/0xd0
[  252.509732][ T7586]  dump_stack+0x15/0x1b
[  252.509806][ T7586]  should_fail_ex+0x25e/0x270
[  252.509878][ T7586]  should_failslab+0x8c/0xb0
[  252.509911][ T7586]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  252.509952][ T7586]  ? skb_clone+0x151/0x1f0
[  252.509986][ T7586]  ? skb_clone+0x151/0x1f0
[  252.510022][ T7586]  skb_clone+0x151/0x1f0
[  252.510131][ T7586]  __netlink_deliver_tap+0x2be/0x510
[  252.510160][ T7586]  netlink_unicast+0x654/0x680
[  252.510259][ T7586]  netlink_sendmsg+0x5be/0x6f0
[  252.510285][ T7586]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.510309][ T7586]  ____sys_sendmsg+0x532/0x580
[  252.510347][ T7586]  ___sys_sendmsg+0x195/0x1e0
[  252.510445][ T7586]  __x64_sys_sendmsg+0xd4/0x160
[  252.510554][ T7586]  x64_sys_call+0x194c/0x3020
[  252.510577][ T7586]  do_syscall_64+0x136/0x3c0
[  252.510598][ T7586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.510626][ T7586] RIP: 0033:0x7fd3fc8fde59
[  252.510661][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.510681][ T7586] RSP: 002b:00007fd3fb357028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.510705][ T7586] RAX: ffffffffffffffda RBX: 00007fd3fcb85fa0 RCX: 00007fd3fc8fde59
[  252.510723][ T7586] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  252.510741][ T7586] RBP: 00007fd3fb357090 R08: 0000000000000000 R09: 0000000000000000
[  252.510756][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.510837][ T7586] R13: 00007fd3fcb86038 R14: 00007fd3fcb85fa0 R15: 00007ffe22b846a8
[  252.510861][ T7586]  </TASK>
[  252.753832][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.781257][    C1] sd 0:0:1:0: [sda] tag#5918 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  252.792437][    C1] sd 0:0:1:0: [sda] tag#5918 CDB: Read(6) 08 00 e3 ec 00 a7
[  252.844217][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.926457][ T7606] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  252.934501][ T7604] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1217'.
[  252.947301][ T7602] random: crng reseeded on system resumption
[  252.969211][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'.
[  253.018459][ T7614] netlink: 'syz.4.1218': attribute type 19 has an invalid length.
[  253.104102][ T7619] loop4: detected capacity change from 0 to 2048
[  253.155512][ T7619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.214527][   T28] audit: type=1400 audit(2000000019.200:1334): avc:  denied  { append } for  pid=7618 comm="syz.4.1220" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  253.237553][ T3363] Process accounting resumed
[  253.249514][ T5954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  253.278748][ T5954] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  253.291376][ T5954] EXT4-fs (loop4): This should not happen!! Data will be lost
[  253.291376][ T5954] 
[  253.302267][ T5954] EXT4-fs (loop4): Total free blocks count 0
[  253.308679][ T5954] EXT4-fs (loop4): Free/Dirty block details
[  253.315112][ T5954] EXT4-fs (loop4): free_blocks=2415919104
[  253.328676][ T5954] EXT4-fs (loop4): dirty_blocks=32
[  253.338977][ T5954] EXT4-fs (loop4): Block reservation details
[  253.348264][ T7630] netlink: 'syz.1.1222': attribute type 21 has an invalid length.
[  253.361582][ T5954] EXT4-fs (loop4): i_reserved_data_blocks=2
[  253.376635][ T7630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1222'.
[  253.389614][   T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 510 with max blocks 1 with error 28
[  253.426140][ T7633] netlink: 'syz.1.1222': attribute type 2 has an invalid length.
[  253.456855][ T7633] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1222'.
[  253.476784][    C1] sd 0:0:1:0: [sda] tag#5910 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  253.488884][    C1] sd 0:0:1:0: [sda] tag#5910 CDB: Read(6) 08 00 e3 ec 00 a7
[  253.973070][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  254.538971][ T7644] FAULT_INJECTION: forcing a failure.
[  254.538971][ T7644] name failslab, interval 1, probability 0, space 0, times 0
[  254.553741][ T7644] CPU: 1 UID: 0 PID: 7644 Comm: syz.2.1225 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  254.553773][ T7644] Tainted: [W]=WARN
[  254.553780][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  254.553792][ T7644] Call Trace:
[  254.553799][ T7644]  <TASK>
[  254.553808][ T7644]  __dump_stack+0x1d/0x30
[  254.553847][ T7644]  dump_stack_lvl+0x95/0xd0
[  254.553869][ T7644]  dump_stack+0x15/0x1b
[  254.553962][ T7644]  should_fail_ex+0x25e/0x270
[  254.553994][ T7644]  should_failslab+0x8c/0xb0
[  254.554023][ T7644]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  254.554081][ T7644]  ? do_getname+0x2e/0x1c0
[  254.554103][ T7644]  ? do_getname+0x2e/0x1c0
[  254.554126][ T7644]  ? ktime_get+0x212/0x240
[  254.554151][ T7644]  do_getname+0x2e/0x1c0
[  254.554181][ T7644]  getname_flags+0x1d/0x30
[  254.554231][ T7644]  do_sys_openat2+0x6c/0x130
[  254.554267][ T7644]  __x64_sys_openat+0xf2/0x120
[  254.554298][ T7644]  x64_sys_call+0x1e39/0x3020
[  254.554337][ T7644]  do_syscall_64+0x136/0x3c0
[  254.554362][ T7644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.554450][ T7644] RIP: 0033:0x7f5b9fd4e68e
[  254.554541][ T7644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  254.554561][ T7644] RSP: 002b:00007f5b9e7a4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  254.554582][ T7644] RAX: ffffffffffffffda RBX: 00007f5b9e7a56c0 RCX: 00007f5b9fd4e68e
[  254.554597][ T7644] RDX: 0000000000000002 RSI: 00007f5b9e7a4f90 RDI: ffffffffffffff9c
[  254.554611][ T7644] RBP: 00007f5b9e7a5090 R08: 0000000000000000 R09: 0000000000000000
[  254.554628][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.554690][ T7644] R13: 00007f5ba0016218 R14: 00007f5ba0016180 R15: 00007ffcb6f2a758
[  254.554715][ T7644]  </TASK>
[  256.525374][ T7625] syz.1.1222 (7625) used greatest stack depth: 8704 bytes left
[  257.749367][   T28] audit: type=1400 audit(2000000023.730:1335): avc:  denied  { nosuid_transition } for  pid=7658 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  257.908456][   T28] audit: type=1400 audit(2000000023.760:1336): avc:  denied  { transition } for  pid=7658 comm="syz.1.1229" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  258.111293][   T28] audit: type=1400 audit(2000000023.760:1337): avc:  denied  { entrypoint } for  pid=7658 comm="syz.1.1229" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1233 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  258.192289][   T28] audit: type=1400 audit(2000000023.760:1338): avc:  denied  { noatsecure } for  pid=7658 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  258.409298][   T28] audit: type=1400 audit(2000000024.350:1339): avc:  denied  { setattr } for  pid=7665 comm="syz.3.1230" name="" dev="pipefs" ino=18714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  258.505248][ T7674] netlink: 'syz.3.1234': attribute type 10 has an invalid length.
[  258.590949][ T7683] netlink: 'syz.3.1234': attribute type 10 has an invalid length.
[  259.727728][ T7692] loop3: detected capacity change from 0 to 512
[  260.077360][ T7674] team0: Port device dummy0 added
[  260.117332][ T7692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  260.157466][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.188713][ T7683] team0: Port device dummy0 removed
[  260.372873][ T7692] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.426473][   T28] audit: type=1400 audit(2000000026.410:1340): avc:  denied  { write } for  pid=7673 comm="syz.3.1234" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  260.522210][ T7707] loop4: detected capacity change from 0 to 1024
[  260.571212][ T7701] netlink: 'syz.2.1239': attribute type 21 has an invalid length.
[  260.607739][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.627462][ T7701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1239'.
[  260.638555][ T7705] netlink: 'syz.2.1239': attribute type 2 has an invalid length.
[  260.695558][    C1] sd 0:0:1:0: [sda] tag#5889 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  260.696624][ T7705] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1239'.
[  260.706001][    C1] sd 0:0:1:0: [sda] tag#5889 CDB: Read(6) 08 00 e3 ec 00 a7
[  261.359454][ T7737] x_tables: unsorted entry at hook 1
[  262.066355][   T28] audit: type=1326 audit(2000000028.050:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe47e8de59 code=0x7ffc0000
[  262.115680][ T7759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  262.122349][ T7759] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  262.199386][ T7759] vhci_hcd vhci_hcd.0: Device attached
[  262.221568][   T28] audit: type=1326 audit(2000000028.050:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe47e8de59 code=0x7ffc0000
[  262.352833][   T28] audit: type=1326 audit(2000000028.050:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe47e8de59 code=0x7ffc0000
[  262.454952][ T7768] loop1: detected capacity change from 0 to 512
[  262.481678][ T3574] usb 8-1: SetAddress Request (2) to port 0
[  262.488057][ T3574] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd
[  262.515156][   T28] audit: type=1326 audit(2000000028.050:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe47e8de59 code=0x7ffc0000
[  262.556064][ T7768] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  262.582995][ T7768] EXT4-fs (loop1): orphan cleanup on readonly fs
[  262.604918][ T7768] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  262.652363][ T7768] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  262.706054][ T7612] syz.2.1214 (7612) used greatest stack depth: 8384 bytes left
[  262.716099][ T7760] vhci_hcd: connection reset by peer
[  262.724141][ T7768] EXT4-fs (loop1): 1 truncate cleaned up
[  262.730143][ T4297] vhci_hcd vhci_hcd.3: stop threads
[  262.735468][ T4297] vhci_hcd vhci_hcd.3: release socket
[  262.741562][ T7768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.754429][ T4297] vhci_hcd vhci_hcd.3: disconnect device
[  262.763533][   T28] kauditd_printk_skb: 129 callbacks suppressed
[  262.763550][   T28] audit: type=1326 audit(2000000028.740:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe47e4e68e code=0x7ffc0000
[  262.879861][   T28] audit: type=1326 audit(2000000028.860:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe47e4e68e code=0x7ffc0000
[  263.025363][   T28] audit: type=1326 audit(2000000028.960:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe47e4e68e code=0x7ffc0000
[  263.034712][ T7786] gretap1: entered promiscuous mode
[  263.076890][ T7784] netlink: 'syz.4.1267': attribute type 21 has an invalid length.
[  263.085510][   T28] audit: type=1326 audit(2000000029.070:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe47e4e68e code=0x7ffc0000
[  263.106429][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'.
[  263.128711][ T7789] netlink: 'syz.4.1267': attribute type 2 has an invalid length.
[  263.129941][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1267'.
[  263.173064][ T7789] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1267'.
[  263.194861][    C1] sd 0:0:1:0: [sda] tag#5891 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  263.209601][    C1] sd 0:0:1:0: [sda] tag#5891 CDB: Read(6) 08 00 e3 ec 00 a7
[  263.230348][   T28] audit: type=1326 audit(2000000029.170:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe47e4e68e code=0x7ffc0000
[  263.343790][   T28] audit: type=1326 audit(2000000029.270:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.3.1258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbe47e8de59 code=0x7ffc0000
[  263.468319][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.038506][ T7809] loop2: detected capacity change from 0 to 512
[  264.085969][ T7809] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  264.102622][ T7809] EXT4-fs (loop2): orphan cleanup on readonly fs
[  264.132096][ T7815] loop1: detected capacity change from 0 to 4096
[  264.136992][ T7809] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  264.149293][ T7815] EXT4-fs: Ignoring removed nomblk_io_submit option
[  264.192048][ T7815] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  264.228554][ T7809] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  264.258642][ T7815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.295501][ T7809] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  264.317491][ T7809] EXT4-fs (loop2): 1 truncate cleaned up
[  264.335293][   T28] audit: type=1400 audit(2000000030.320:1479): avc:  denied  { write } for  pid=7814 comm="syz.1.1276" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.360274][ T7809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.408092][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.424946][   T28] audit: type=1400 audit(2000000030.320:1480): avc:  denied  { write } for  pid=7814 comm="syz.1.1276" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.834394][ T7819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1278'.
[  264.859782][ T7819] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:32789
[  264.898700][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.145889][   T28] audit: type=1400 audit(2000000031.130:1481): avc:  denied  { audit_read } for  pid=7848 comm="syz.4.1287" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  265.495637][ T7858] loop2: detected capacity change from 0 to 512
[  265.806097][ T7858] EXT4-fs: inline encryption not supported
[  265.920858][ T7858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  266.023981][ T7858] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  266.105602][ T7858] EXT4-fs (loop2): 1 truncate cleaned up
[  266.121020][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  266.175869][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.238926][ T7858] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.1290: bad extra_isize 62 (inode size 256)
[  266.279566][ T7858] EXT4-fs (loop2): Remounting filesystem read-only
[  266.336482][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.432079][ T7875] loop2: detected capacity change from 0 to 512
[  266.478848][ T7875] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  266.505798][ T7875] EXT4-fs (loop2): orphan cleanup on readonly fs
[  266.536085][ T7875] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  266.573228][ T7879] loop4: detected capacity change from 0 to 256
[  266.597762][ T7875] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  266.642448][ T7875] EXT4-fs (loop2): 1 truncate cleaned up
[  266.661030][ T7875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  267.248528][ T7894] netlink: 'syz.3.1302': attribute type 40 has an invalid length.
[  267.354502][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'.
[  267.515498][ T7904] loop4: detected capacity change from 0 to 764
[  267.525180][ T7904] rock: directory entry would overflow storage
[  267.531511][ T7904] rock: sig=0x5245, size=8, remaining=5
[  267.600122][ T3574] usb 8-1: device descriptor read/8, error -110
[  267.714669][ T7903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7903 comm=syz.3.1304
[  267.740454][ T3574] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd
[  267.793068][ T3574] usb 8-1: enqueue for inactive port 0
[  267.844276][ T3574] usb 8-1: enqueue for inactive port 0
[  267.900428][ T3574] usb 8-1: enqueue for inactive port 0
[  267.967923][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  267.967943][   T28] audit: type=1400 audit(2000000033.950:1484): avc:  denied  { mounton } for  pid=7861 comm="syz.1.1291" path="/proc/791/task" dev="proc" ino=19064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  268.078222][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'.
[  268.088928][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'.
[  268.173352][   T28] audit: type=1400 audit(2000000034.160:1485): avc:  denied  { setopt } for  pid=7922 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  268.243086][ T7928] syzkaller1: entered promiscuous mode
[  268.248739][ T7928] syzkaller1: entered allmulticast mode
[  268.256872][ T7928] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1309'.
[  268.266109][ T7928] openvswitch: netlink: Message has 6 unknown bytes.
[  268.273730][   T28] audit: type=1400 audit(2000000034.260:1486): avc:  denied  { write } for  pid=7929 comm="syz.3.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  268.414464][ T7941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1313'.
[  268.423732][ T7941] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1313'.
[  268.432894][ T7941] netlink: 'syz.3.1313': attribute type 5 has an invalid length.
[  268.441628][ T7941] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1313'.
[  268.452929][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.707862][ T7948] bridge: RTM_NEWNEIGH with unconfigured vlan 257 on bridge0
[  269.071044][ T3574] usb usb8-port1: attempt power cycle
[  269.472213][ T7952] futex_wake_op: syz.4.1317 tries to shift op by 32; fix this program
[  269.484405][ T7954] FAULT_INJECTION: forcing a failure.
[  269.484405][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.498227][ T7952] ieee802154 phy0 wpan0: encryption failed: -22
[  269.513621][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'.
[  269.523335][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.0.1318 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  269.523398][ T7954] Tainted: [W]=WARN
[  269.523405][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  269.523419][ T7954] Call Trace:
[  269.523427][ T7954]  <TASK>
[  269.523475][ T7954]  __dump_stack+0x1d/0x30
[  269.523507][ T7954]  dump_stack_lvl+0x95/0xd0
[  269.523530][ T7954]  dump_stack+0x15/0x1b
[  269.523571][ T7954]  should_fail_ex+0x25e/0x270
[  269.523605][ T7954]  should_fail+0xb/0x20
[  269.523631][ T7954]  should_fail_usercopy+0x1a/0x20
[  269.523661][ T7954]  _copy_from_user+0x1c/0xb0
[  269.523749][ T7954]  sk_getsockopt+0xcf/0x1a30
[  269.523780][ T7954]  ? selinux_socket_getsockopt+0x1ab/0x1e0
[  269.523816][ T7954]  ? should_fail_ex+0xd9/0x270
[  269.523962][ T7954]  do_sock_getsockopt+0x179/0x570
[  269.524049][ T7954]  ? vfs_write+0x848/0x990
[  269.524075][ T7954]  __x64_sys_getsockopt+0x11d/0x1a0
[  269.524113][ T7954]  x64_sys_call+0x2dcf/0x3020
[  269.524176][ T7954]  do_syscall_64+0x136/0x3c0
[  269.524201][ T7954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.524224][ T7954] RIP: 0033:0x7ff4a508de59
[  269.524278][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.524301][ T7954] RSP: 002b:00007ff4a3ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  269.524325][ T7954] RAX: ffffffffffffffda RBX: 00007ff4a5315fa0 RCX: 00007ff4a508de59
[  269.524340][ T7954] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003
[  269.524354][ T7954] RBP: 00007ff4a3ae7090 R08: 00002000000053c0 R09: 0000000000000000
[  269.524368][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.524447][ T7954] R13: 00007ff4a5316038 R14: 00007ff4a5315fa0 R15: 00007ffed18d4ad8
[  269.524468][ T7954]  </TASK>
[  269.836339][   T28] audit: type=1400 audit(2000000035.780:1487): avc:  denied  { ioctl } for  pid=7951 comm="syz.4.1317" path="socket:[20086]" dev="sockfs" ino=20086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  269.867162][ T7956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7956 comm=syz.4.1317
[  269.896160][ T7956] x_tables: duplicate underflow at hook 3
[  269.914172][   T28] audit: type=1400 audit(2000000035.850:1488): avc:  denied  { getopt } for  pid=7951 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  269.948538][ T7956] loop4: detected capacity change from 0 to 1024
[  269.973704][   T28] audit: type=1326 audit(2000000035.880:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fc8fde59 code=0x7ffc0000
[  270.033403][ T7956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.063638][   T28] audit: type=1326 audit(2000000035.880:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fc8fde59 code=0x7ffc0000
[  270.141755][   T28] audit: type=1326 audit(2000000035.880:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fc8fde59 code=0x7ffc0000
[  270.229510][   T28] audit: type=1326 audit(2000000035.880:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3fc8fde59 code=0x7ffc0000
[  270.298258][   T28] audit: type=1326 audit(2000000035.880:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fc8fde59 code=0x7ffc0000
[  270.350269][ T7974] loop3: detected capacity change from 0 to 1024
[  270.503549][ T7977] netlink: 'syz.3.1321': attribute type 3 has an invalid length.
[  270.515509][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.600842][ T7976] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  270.600842][ T7976] Please contact the netfilter-devel mailing list or update your nftables rules.
[  270.922107][ T7989] loop4: detected capacity change from 0 to 512
[  270.957096][ T7989] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  271.915497][ T7989] EXT4-fs (loop4): orphan cleanup on readonly fs
[  271.926699][ T3574] usb usb8-port1: unable to enumerate USB device
[  271.931722][ T7989] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  271.953404][ T7989] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  272.080013][ T7976] loop1: detected capacity change from 0 to 128
[  272.131530][ T7989] EXT4-fs (loop4): 1 truncate cleaned up
[  272.142585][ T7989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.339165][ T7976] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  272.424319][ T7976] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  272.881117][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.970462][ T8003] loop3: detected capacity change from 0 to 256
[  273.019356][ T8003] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  273.336642][ T8012] loop4: detected capacity change from 0 to 512
[  273.393476][ T8012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.584029][   T28] kauditd_printk_skb: 75 callbacks suppressed
[  273.584048][   T28] audit: type=1400 audit(2000000039.560:1568): avc:  denied  { write } for  pid=8010 comm="syz.4.1331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  273.619397][ T5956] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  273.663603][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'.
[  273.672828][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  273.991358][   T28] audit: type=1400 audit(2000000039.920:1569): avc:  denied  { write } for  pid=8010 comm="syz.4.1331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  274.042523][ T8023] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  274.098838][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'.
[  274.109411][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  274.127628][ T8029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  274.171942][ T8012] tipc: Can't bind to reserved service type 1
[  274.241868][ T5431] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  274.588434][ T8047] loop1: detected capacity change from 0 to 1024
[  274.598766][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.609190][ T8047] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  274.620437][ T8047] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  274.630550][ T8047] JBD2: no valid journal superblock found
[  274.636341][ T8047] EXT4-fs (loop1): Could not load journal inode
[  274.730359][ T8053] loop2: detected capacity change from 0 to 4096
[  274.740228][ T8053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.775841][   T28] audit: type=1400 audit(2000000040.760:1570): avc:  denied  { read } for  pid=8052 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  274.811486][ T8061] loop4: detected capacity change from 0 to 1024
[  274.822062][ T8061] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  274.822228][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  274.893550][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.964163][ T8067] loop2: detected capacity change from 0 to 512
[  274.974805][ T8067] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1351: dx entry: limit 1024 != root limit 124
[  274.994036][ T8067] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1351: Corrupt directory, running e2fsck is recommended
[  275.008635][ T8067] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  275.017092][ T8067] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1351: corrupted in-inode xattr: invalid ea_ino
[  275.056207][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'.
[  275.072420][ T8067] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  275.072615][ T8067] EXT4-fs (loop2): Remounting filesystem read-only
[  275.081828][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  275.081850][    C1] EXT4-fs (loop2): initial error at time 2000000041: ext4_iget_extra_inode:5180: inode 15
[  275.081882][    C1] EXT4-fs (loop2): last error at time 2000000041: ext4_iget_extra_inode:5180: inode 15
[  275.125180][ T8077] 9pnet_fd: Insufficient options for proto=fd
[  275.133381][ T8067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.133841][ T8079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1358'.
[  275.158357][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'.
[  275.181290][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  275.208803][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  275.215604][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  275.949515][ T8084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1352'.
[  276.171685][ T8067] infiniband syz0: set active
[  276.176456][ T3574] xfrm0 speed is unknown, defaulting to 1000
[  276.194762][ T8067] infiniband syz0: added xfrm0
[  276.211171][ T8092] loop1: detected capacity change from 0 to 512
[  276.263758][ T8092] EXT4-fs: Ignoring removed oldalloc option
[  276.335914][ T8067] RDS/IB: syz0: added
[  276.351919][ T8067] smc: adding ib device syz0 with port count 1
[  276.368694][ T8067] smc:    ib device syz0 port 1 has no pnetid
[  276.385852][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  276.406451][ T3574] xfrm0 speed is unknown, defaulting to 1000
[  276.465178][ T8092] EXT4-fs (loop1): orphan cleanup on readonly fs
[  276.484068][ T8092] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1361: ea_inode with extended attributes
[  276.550176][ T8092] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  276.550433][ T8092] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1361: error while reading EA inode 11 err=-117
[  276.571897][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  276.571919][    C0] EXT4-fs (loop1): initial error at time 2000000042: ext4_xattr_inode_iget:441: inode 11
[  276.571953][    C0] EXT4-fs (loop1): last error at time 2000000042: ext4_xattr_inode_iget:441: inode 11
[  276.729165][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  276.762995][ T8092] loop1: lost filesystem error report for type 5 error -117
[  276.763230][ T8092] EXT4-fs (loop1): 1 orphan inode deleted
[  276.808982][ T8092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  276.909875][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  277.069849][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  277.081533][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.125025][ T3295] ==================================================================
[  277.133169][ T3295] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[  277.140741][ T3295] 
[  277.143087][ T3295] read-write to 0xffff888237d26528 of 1 bytes by task 8100 on cpu 1:
[  277.144900][ T8067] xfrm0 speed is unknown, defaulting to 1000
[  277.151163][ T3295]  folio_add_lru+0xa4/0x250
[  277.151193][ T3295]  folio_add_lru_vma+0x49/0x70
[  277.166513][ T3295]  do_wp_page+0x13a5/0x2030
[  277.171117][ T3295]  handle_mm_fault+0x8bc/0x2da0
[  277.176003][ T3295]  do_user_addr_fault+0x402/0x1060
[  277.181138][ T3295]  exc_page_fault+0x62/0xa0
[  277.185755][ T3295]  asm_exc_page_fault+0x26/0x30
[  277.190660][ T3295]  __put_user_4+0xd/0x30
[  277.194963][ T3295]  schedule_tail+0x3f/0x90
[  277.199481][ T3295]  ret_from_fork+0x25/0x330
[  277.204001][ T3295]  ret_from_fork_asm+0x1a/0x30
[  277.208779][ T3295] 
[  277.211105][ T3295] read to 0xffff888237d26528 of 1 bytes by task 3295 on cpu 0:
[  277.218684][ T3295]  __lru_add_drain_all+0x17e/0x450
[  277.223891][ T3295]  lru_add_drain_all+0x10/0x20
[  277.228667][ T3295]  invalidate_bdev+0x47/0x70
[  277.233371][ T3295]  ext4_put_super+0x614/0x7c0
[  277.238066][ T3295]  generic_shutdown_super+0xee/0x220
[  277.243366][ T3295]  kill_block_super+0x2a/0x70
[  277.248060][ T3295]  ext4_kill_sb+0x42/0x80
[  277.252488][ T3295]  deactivate_locked_super+0x75/0x1c0
[  277.257882][ T3295]  deactivate_super+0x97/0xa0
[  277.262670][ T3295]  cleanup_mnt+0x2c3/0x340
[  277.267122][ T3295]  __cleanup_mnt+0x19/0x20
[  277.271650][ T3295]  task_work_run+0x130/0x1a0
[  277.276281][ T3295]  exit_to_user_mode_loop+0x1e4/0x8c0
[  277.281685][ T3295]  do_syscall_64+0x23c/0x3c0
[  277.286316][ T3295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.292335][ T3295] 
[  277.294682][ T3295] value changed: 0x00 -> 0x01
[  277.299369][ T3295] 
[  277.301701][ T3295] Reported by Kernel Concurrency Sanitizer on:
[  277.307863][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  277.318910][ T3295] Tainted: [W]=WARN
[  277.322713][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  277.332774][ T3295] ==================================================================
[  277.388065][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.008263][ T8101] xfrm0 speed is unknown, defaulting to 1000